Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/XZyA_iGc98NU6byekN3ONuEqylc.roa
File: XZyA_iGc98NU6byekN3ONuEqylc.roa (raw, json)
Hash identifier: F1e8M8opv1fh7qFk1MPRILq+h1mfxYnhHv7PEStSsgs=
Subject key identifier: 5D:9C:80:FE:21:9C:F7:C3:54:E9:BC:9E:90:DD:CE:36:E1:2A:CA:57
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0A474C4F
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/XZyA_iGc98NU6byekN3ONuEqylc.roa
Signing time: Sat 01 Jan 2022 06:04:49 +0000
ROA not before: Sat 01 Jan 2022 06:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58109
IP address blocks: 37.235.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172444751 (0xa474c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 06:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d9c80fe219cf7c354e9bc9e90ddce36e12aca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:90:59:e3:30:48:12:69:23:48:66:d0:52:
51:14:69:89:39:d0:02:00:f8:45:bd:73:c3:f8:f9:
0e:0d:15:4f:67:61:af:00:7c:88:b1:ce:80:0e:ac:
f7:25:2a:76:b0:9c:7b:d3:57:76:d8:1f:1f:cf:ad:
c8:46:32:18:53:81:a9:69:c6:50:e9:3f:b7:f7:81:
50:83:f6:2f:38:a3:a7:f7:63:a5:b1:50:20:6d:4b:
8a:87:cb:9c:22:0f:58:30:7f:1b:47:9d:ce:ec:48:
20:56:1f:3c:9d:ce:a2:1d:a1:18:17:ab:eb:d2:fb:
48:18:b5:f9:e8:07:e0:10:ab:9a:7c:ce:dd:2b:5c:
91:08:ef:06:13:17:a9:8b:c1:a6:6b:63:55:9d:9d:
5c:30:0d:4a:b6:53:af:6c:4a:e7:64:94:d1:02:53:
aa:79:bf:c8:5f:12:1f:d4:f9:5c:47:27:c8:d1:91:
21:e6:f0:62:45:c0:ae:db:a4:e2:bd:29:2d:b4:c2:
bb:33:bb:91:45:a2:25:9a:d4:e8:07:17:18:e9:60:
e2:55:b1:5d:30:a7:56:db:fe:3d:8b:ec:84:46:31:
72:8c:3f:0f:60:50:3d:c0:0c:e8:4b:60:8e:ed:0d:
37:67:b1:fc:df:22:98:4a:3a:2d:63:b0:be:5e:72:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:80:FE:21:9C:F7:C3:54:E9:BC:9E:90:DD:CE:36:E1:2A:CA:57
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/XZyA_iGc98NU6byekN3ONuEqylc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9e:18:c4:57:df:88:ad:bc:9c:cb:bc:4d:de:9d:2f:93:7d:
ad:bd:3a:d7:d7:f1:73:dd:fa:6f:5b:03:69:70:11:fe:81:cc:
61:ff:cb:9c:7f:13:87:96:40:e4:85:a8:2d:a7:c1:be:8c:48:
3a:69:5c:f0:17:ba:ea:a1:50:6f:57:37:97:4b:42:96:9d:ce:
9a:94:37:df:5a:30:2f:eb:c0:8d:9a:5c:75:e3:1e:0e:d7:6e:
5e:12:c0:d0:1c:8a:60:75:fd:b1:f6:4d:24:fc:08:95:c6:3d:
96:e7:08:c0:ff:c4:a6:14:14:a4:af:37:14:d5:a2:4d:39:19:
88:f3:fe:7e:80:82:e0:6f:4d:9d:1b:cb:a1:a0:9c:17:96:10:
d7:09:f1:30:20:b2:a1:ef:86:c9:f7:42:a6:3d:69:5e:4f:14:
f2:71:8c:de:e5:cd:18:94:e7:33:9f:dd:fd:eb:4a:93:4e:c1:
d3:49:41:c6:85:e9:96:d8:7f:f6:7b:b6:c5:d8:d4:0f:70:65:
1d:7e:9c:57:f7:02:2f:49:21:3c:07:92:a9:3f:01:6d:c9:04:
0c:cf:ae:3e:6e:31:03:5a:0a:dd:62:8d:38:4f:43:25:02:b1:
81:27:16:07:6d:31:f2:85:20:8f:c6:35:07:67:a8:bd:38:db:
14:50:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org