Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/jDXO59dh9tc560bWds6GMUMbRMU.roa
File: jDXO59dh9tc560bWds6GMUMbRMU.roa (raw, json)
Hash identifier: A9Xx2CDb8bqH/k5dEVWfTKfCB18kAGBB+hSVqOm7Fz0=
Subject key identifier: 8C:35:CE:E7:D7:61:F6:D7:39:EB:46:D6:76:CE:86:31:43:1B:44:C5
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 01DF32
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/jDXO59dh9tc560bWds6GMUMbRMU.roa
Signing time: Mon 13 Jun 2022 07:40:26 +0000
ROA not before: Mon 13 Jun 2022 07:40:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200810
IP address blocks: 78.41.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122674 (0x1df32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jun 13 07:40:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c35cee7d761f6d739eb46d676ce8631431b44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ae:f5:05:6b:3a:40:97:ce:03:d4:3a:85:8d:
8a:9b:2d:34:1d:0c:a0:c2:b2:2f:f6:63:2c:5d:b4:
ef:18:21:7f:b2:1b:a7:c7:db:54:30:b5:01:e8:c1:
46:20:22:77:e8:d3:a0:27:9d:0f:d9:91:ea:f8:62:
5d:7c:50:09:53:c3:67:88:a3:ed:2b:3f:62:96:22:
36:35:e8:1f:f0:0b:b4:a1:c6:46:f2:30:ca:3a:d1:
e4:99:ca:a7:dd:dd:cc:49:5d:41:48:94:8d:58:01:
5d:76:44:e0:a1:6a:f8:ab:3c:2c:b6:07:d2:b5:05:
a7:b3:e9:33:91:0c:22:1b:33:c9:5f:95:d0:a6:c6:
77:92:78:e5:04:6f:e3:86:ae:a3:a6:03:2b:6d:64:
0d:a7:dc:4a:33:0a:1b:53:24:08:93:a4:78:4f:9f:
70:53:b4:8f:d3:99:82:8b:2a:f8:d8:e8:c2:f3:d6:
49:ee:e3:50:ff:96:b4:e6:16:cd:03:03:72:92:a3:
17:d4:23:2d:d6:f5:43:2c:91:b0:b3:70:ae:73:1a:
a9:d2:a1:46:5c:69:b1:60:2f:54:2f:46:6b:2b:28:
b4:bf:54:14:4a:43:14:e5:9b:7d:22:ce:f0:f3:34:
e0:98:73:2f:07:06:c5:b6:0a:af:97:a8:15:e1:df:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:CE:E7:D7:61:F6:D7:39:EB:46:D6:76:CE:86:31:43:1B:44:C5
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/jDXO59dh9tc560bWds6GMUMbRMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:32:41:de:f6:0b:e5:34:20:c0:81:dd:b7:66:ae:2b:df:22:
21:13:5d:a3:4f:e3:0c:b2:c3:21:b5:b9:37:fb:0c:8f:e9:76:
2d:d0:7e:00:04:1e:42:0e:1e:ba:5c:ee:dd:11:72:56:ea:23:
dd:ee:24:38:65:d5:41:45:8b:a5:d9:c8:e5:89:21:8b:c4:0a:
41:1d:1f:26:cf:15:98:6c:be:72:04:7d:35:d3:7a:2d:40:18:
7e:11:e4:bd:d2:f7:5c:6e:b3:21:ec:d8:d1:32:66:bf:7a:93:
b3:5a:a4:6b:99:2b:5b:a4:68:0b:b2:7d:88:a9:3e:97:3d:41:
b4:dc:bc:5c:c9:5d:13:55:e2:d8:35:d0:52:51:fd:f7:a5:44:
5f:58:de:8b:24:5d:fd:3a:47:03:74:01:c7:71:f9:c4:de:d6:
96:5a:d6:db:2a:86:f4:52:58:f2:c3:9d:c3:c2:5e:af:fb:14:
3b:8e:22:6e:bf:52:be:73:d2:7f:1b:c2:3b:73:c5:ed:6d:1c:
8e:b8:74:f2:f6:24:a4:f8:94:56:ac:3d:e1:41:60:a0:47:d3:
e8:e0:de:1f:df:fb:ee:8d:38:fe:fb:7f:f2:20:f2:3e:08:e0:
4a:46:f2:b6:a7:89:39:67:a7:37:65:25:a9:5a:24:80:58:03:
b1:8f:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-fra.rpki-client.org