Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/jHko5zAQSC9QS0Shc47WUmejfq8.roa
File: jHko5zAQSC9QS0Shc47WUmejfq8.roa (raw, json)
Hash identifier: JgiJyM+Abqcw6+8Jq48lTZ5X6MTNod9x7Yx2b5Nz6+k=
Subject key identifier: 8C:79:28:E7:30:10:48:2F:50:4B:44:A1:73:8E:D6:52:67:A3:7E:AF
Certificate issuer: /CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Certificate serial: 08AB507A
Authority key identifier: 91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/jHko5zAQSC9QS0Shc47WUmejfq8.roa
Signing time: Sat 01 Jan 2022 09:03:19 +0000
ROA not before: Sat 01 Jan 2022 09:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200752
IP address blocks: 5.133.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145444986 (0x8ab507a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919eed6f0c370234c9262b1f7b4138a60717bfb1
Validity
Not Before: Jan 1 09:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c7928e73010482f504b44a1738ed65267a37eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:ba:49:1f:24:b6:87:c7:47:76:09:71:94:
69:a0:83:d6:14:34:3f:70:35:7f:e4:19:06:15:16:
53:02:77:2a:60:3a:99:15:6c:9f:af:89:0e:6b:c1:
50:81:95:74:43:49:c9:ed:23:ee:cb:f0:55:4e:05:
7c:da:45:6c:4d:db:71:e8:cc:ad:a9:e3:d3:d3:c2:
25:bb:3a:d1:0d:3d:00:d1:2e:a3:c7:b6:05:4d:e7:
02:22:15:45:91:e0:c5:8a:3b:b9:62:3c:4f:6c:62:
4c:ca:43:30:48:01:14:de:07:04:5a:9b:ef:8b:02:
c5:ff:29:74:09:ba:41:34:44:57:85:ef:7d:d5:37:
9f:d3:fa:6b:0e:59:75:07:cd:85:4c:e2:f2:b9:26:
80:76:d7:91:58:74:38:67:b9:f6:88:77:7f:6e:fa:
ae:c2:8a:8c:51:7d:71:4d:ba:5f:88:bf:86:10:0c:
62:4a:21:7b:5a:14:2c:64:dc:c8:a7:47:b8:ba:b7:
cf:49:a2:77:ea:72:59:dc:4e:a6:55:b8:a5:48:f9:
6b:18:6c:ce:ee:bd:7f:a9:4b:21:6a:0d:3f:c6:27:
13:ca:a1:ba:9b:bd:a0:d2:40:f8:64:f9:78:cb:1f:
f7:14:87:b7:7b:4b:2c:f3:7e:c3:7f:0c:5d:23:ea:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:28:E7:30:10:48:2F:50:4B:44:A1:73:8E:D6:52:67:A3:7E:AF
X509v3 Authority Key Identifier:
keyid:91:9E:ED:6F:0C:37:02:34:C9:26:2B:1F:7B:41:38:A6:07:17:BF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7tbww3AjTJJisfe0E4pgcXv7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/jHko5zAQSC9QS0Shc47WUmejfq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/72e0ff-701c-4dae-92c2-f0e1af3fff1d/1/kZ7tbww3AjTJJisfe0E4pgcXv7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.96.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:e9:66:d5:1c:3c:4d:aa:bf:c8:dc:a5:e9:b5:6a:97:63:23:
d7:60:9a:f3:24:0c:ae:cb:4a:9c:16:ac:ee:ab:3d:16:cd:73:
29:d1:f5:2b:32:d6:43:2d:66:1e:f8:b6:e3:b8:a7:8b:98:66:
f0:cc:c4:2e:40:25:56:b6:4f:25:e5:e7:4a:5f:46:73:c2:b4:
19:40:82:1a:7e:b0:d3:2d:11:6e:70:d9:5f:10:9a:4b:ec:33:
65:0c:f0:03:03:b9:4c:5c:9b:32:8e:ff:44:77:66:6a:4f:e7:
75:7d:bb:1d:dc:6b:e6:29:9e:77:8d:69:ea:d0:55:73:5b:f3:
08:2f:c6:e4:6a:3e:12:55:9f:14:6f:f0:48:51:46:4b:02:1f:
da:ea:34:60:e6:31:9c:b5:b5:6d:40:91:77:cc:ba:a3:20:8b:
62:09:20:8f:34:65:80:e7:de:b7:0b:ec:cc:83:7c:22:38:ec:
96:f1:d4:51:03:f0:0b:fa:65:ab:b0:6a:1b:9e:d5:a9:07:1c:
b1:ac:bc:3a:5e:c8:2a:18:27:61:04:4e:8f:7a:47:33:52:81:
53:cc:c1:55:98:cd:f0:de:6f:b2:46:e7:33:75:57:ee:08:8b:
29:48:85:26:aa:66:05:75:22:17:53:2f:26:2b:d5:1c:27:a0:
53:37:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:52 2024 by rpki-client on console-fra.rpki-client.org