Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/Jb2AslN5JzXb6LhRNGizubtR6a0.roa
File: Jb2AslN5JzXb6LhRNGizubtR6a0.roa (raw, json)
Hash identifier: cRU+DVTOR7/+HUMICqJxoI5rTiMCq2fwZIIo75y8HDU=
Subject key identifier: 25:BD:80:B2:53:79:27:35:DB:E8:B8:51:34:68:B3:B9:BB:51:E9:AD
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: FD41C6
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/Jb2AslN5JzXb6LhRNGizubtR6a0.roa
Signing time: Sat 01 Jan 2022 10:59:01 +0000
ROA not before: Sat 01 Jan 2022 10:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208350
IP address blocks: 185.135.19.0/24 maxlen: 24
185.135.18.0/24 maxlen: 24
85.255.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16597446 (0xfd41c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jan 1 10:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25bd80b253792735dbe8b8513468b3b9bb51e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:c2:a5:4f:d8:64:56:0b:39:9d:f0:1d:f8:
2b:73:90:50:e3:37:0b:3b:ae:61:b1:f0:90:97:f3:
37:e8:75:19:04:aa:b0:70:ec:8f:6e:e2:ad:87:41:
af:7e:9f:5a:2e:64:20:02:52:d8:63:c7:1d:00:82:
65:6e:b5:e5:a8:6a:83:f1:0a:03:fb:57:57:2d:52:
eb:c1:46:51:9e:49:b1:ba:b2:83:9f:9c:f5:1a:f1:
48:8c:24:15:3b:a8:3a:14:e2:a5:88:0c:9b:3b:5f:
f5:13:de:24:6b:e2:76:56:b0:f5:c5:a0:75:fb:6c:
07:c6:39:b9:e2:39:e0:ac:c5:55:4c:ee:64:b5:4b:
ad:26:83:1e:a9:1f:04:c0:f6:3f:52:33:a0:66:60:
f2:d9:d9:31:35:5c:4b:29:db:12:f1:f6:40:82:13:
c6:9d:eb:ab:e7:5d:ad:2a:e7:03:6a:cb:f1:a5:1a:
c0:b3:a2:3e:1d:2e:97:48:99:6d:ae:23:55:9f:8c:
29:90:e6:00:38:58:46:af:39:34:1e:53:8c:e1:a7:
06:6d:fe:84:57:c3:5f:88:43:9e:38:5b:f8:39:6f:
f0:b2:9a:7b:16:85:a8:8f:e8:cf:c5:50:e5:7d:85:
94:b8:e0:95:0d:5e:5a:c2:2e:a4:fc:50:a8:ee:e1:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:80:B2:53:79:27:35:DB:E8:B8:51:34:68:B3:B9:BB:51:E9:AD
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/Jb2AslN5JzXb6LhRNGizubtR6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.152.0/24
185.135.18.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:f7:3e:ea:79:0c:80:fd:14:b7:dd:0b:dd:2e:33:46:08:b3:
0e:53:db:27:68:be:4f:a7:01:d5:5b:63:c3:2e:41:cc:f1:c6:
fd:b2:ea:c6:53:0b:bc:0f:5e:74:17:c4:a6:89:b2:00:64:44:
16:27:64:7e:b8:fe:4f:02:65:3e:2b:58:37:5c:96:09:45:4d:
82:31:3a:8a:e6:5f:6f:e1:9e:5f:04:07:3e:31:95:3c:bf:bc:
06:55:8b:0c:bb:ba:f6:bc:be:7c:a5:bd:2c:db:2d:82:6a:d0:
d8:f1:01:7e:c5:19:ad:f2:03:57:e3:35:d1:7a:6f:ff:87:e3:
f8:81:bd:33:e5:e1:9c:a5:53:e7:53:6e:13:be:88:48:88:2a:
f9:56:76:32:ce:ab:6b:22:7b:42:36:74:cc:90:f7:a8:ae:8c:
c7:96:3f:4c:0a:c6:a2:91:bb:55:da:38:dc:79:12:57:4b:13:
e4:51:22:c1:75:ce:5f:bd:b5:97:ed:62:8d:a3:30:f9:da:f5:
24:6b:45:ea:5f:dd:6e:2e:1a:2f:c5:39:e6:d0:da:a6:0e:3c:
ec:9e:70:0e:da:26:ba:3f:83:c0:d1:fa:61:75:27:e5:b7:69:
8c:0c:2e:09:8a:fe:51:78:c2:d7:db:35:43:99:f0:a3:1f:9e:
82:00:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:48 2024 by rpki-client on console-fra.rpki-client.org