Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/xZ7BeMb8mLSq_kA6zgH8xsF0IS4.roa
File: xZ7BeMb8mLSq_kA6zgH8xsF0IS4.roa (raw, json)
Hash identifier: 68iIaWExb6HE3FbZCXE997h6X1MUA+mmkwpX8DKTnwc=
Subject key identifier: C5:9E:C1:78:C6:FC:98:B4:AA:FE:40:3A:CE:01:FC:C6:C1:74:21:2E
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 07C014A1
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/xZ7BeMb8mLSq_kA6zgH8xsF0IS4.roa
Signing time: Sat 01 Jan 2022 09:55:24 +0000
ROA not before: Sat 01 Jan 2022 09:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15395
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130028705 (0x7c014a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 09:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c59ec178c6fc98b4aafe403ace01fcc6c174212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:6b:d5:f7:a5:50:b3:0e:16:c9:14:ef:70:
34:b8:45:d2:ba:73:a7:04:2e:0d:3a:f6:14:d1:f5:
ef:95:55:5f:36:a7:39:73:07:f3:9c:1b:f6:cf:26:
57:93:15:e1:09:19:74:b2:d0:3d:ac:0c:ae:5d:f9:
7a:47:71:a5:43:d9:62:6b:9c:9d:1c:e7:63:66:95:
1c:00:9f:63:4f:d1:f5:93:78:78:38:9b:23:31:e3:
32:dc:a6:d3:5a:30:f4:23:ee:7e:07:e2:d9:19:da:
ef:5c:f3:6d:96:bb:2b:6c:89:9c:75:d3:a8:bb:a9:
f8:6a:47:f4:02:4d:a9:d4:0e:9d:cb:ce:fc:bc:83:
72:76:09:99:69:99:54:42:e9:ef:9e:29:43:7c:bf:
a1:31:5b:88:68:49:81:e5:98:4b:10:a6:d2:be:4e:
ee:71:cd:1c:f1:81:01:76:8d:6a:f3:f7:d3:70:83:
8d:25:7d:4e:30:b0:46:e3:3d:f6:71:89:56:61:cf:
60:70:f8:d6:ea:6d:a4:0c:07:61:ff:30:de:46:59:
a4:f2:5f:35:b0:43:7c:a5:f5:fa:63:f3:89:89:13:
bc:bd:61:1b:15:9b:e6:11:5a:dd:90:32:75:50:9a:
c1:82:b7:85:58:33:6f:72:92:ea:c2:b3:4e:98:0f:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:C1:78:C6:FC:98:B4:AA:FE:40:3A:CE:01:FC:C6:C1:74:21:2E
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/xZ7BeMb8mLSq_kA6zgH8xsF0IS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ef:45:e4:85:c8:9b:80:27:d2:0b:3e:6a:43:65:6f:9e:dc:
82:2a:62:89:fc:5c:ec:f9:0b:5b:93:17:27:ac:58:94:fc:29:
37:e3:38:c6:80:be:10:93:00:58:51:da:92:5c:e5:22:cd:40:
2d:34:17:02:e3:87:6b:47:15:67:97:ae:b7:47:80:f9:5a:2f:
7b:3f:6f:9c:a1:4b:c1:0a:09:f7:82:c4:cf:1c:5c:91:0d:61:
ea:99:44:4a:6c:be:f9:54:4f:96:e6:90:65:ba:a6:d4:36:05:
2a:7d:76:89:14:2a:c2:c9:04:47:85:46:d4:b1:2e:46:c5:09:
4a:42:40:44:ea:fc:6a:9c:b2:69:ae:c0:da:70:8f:cd:95:2e:
47:e2:a1:a2:29:b9:fe:5c:b7:a1:de:9d:62:8a:82:25:49:13:
9d:7f:ac:2e:d2:72:3c:78:d5:ff:db:f5:a6:c8:72:be:83:ee:
01:4e:c4:d1:e7:d2:b2:38:3f:c4:2c:24:91:b8:fa:b3:c4:97:
56:97:4e:61:96:c3:27:2b:8c:30:91:df:cc:1f:df:d5:77:9c:
26:8a:79:99:57:8f:88:b0:c4:28:e9:ec:11:ef:37:09:82:16:
11:be:78:4c:1f:a2:07:43:d6:e9:e9:f7:3e:96:11:b0:5f:5a:
cf:1d:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:15 2024 by rpki-client on console-ams.rpki-client.org