Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/JXx9V4YV0jnP2fWbecncOYm9eoQ.roa
File: JXx9V4YV0jnP2fWbecncOYm9eoQ.roa (raw, json)
Hash identifier: egDQ3nMYiHKmn4UVVJ3L5KESFa9je7uRmLpz1zq3o6M=
Subject key identifier: 25:7C:7D:57:86:15:D2:39:CF:D9:F5:9B:79:C9:DC:39:89:BD:7A:84
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 3A4AA2
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/JXx9V4YV0jnP2fWbecncOYm9eoQ.roa
Signing time: Sat 01 Jan 2022 02:54:44 +0000
ROA not before: Sat 01 Jan 2022 02:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60111
IP address blocks: 185.254.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820194 (0x3a4aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Jan 1 02:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257c7d578615d239cfd9f59b79c9dc3989bd7a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:e3:ca:b7:cb:df:28:38:4a:d9:9b:59:29:
0f:df:a4:a0:fd:ea:77:ef:d1:a0:3f:5f:e8:ae:6c:
ef:4e:db:6a:04:7a:7a:87:a6:49:46:7e:3c:4e:b8:
4c:6a:c3:8d:5d:55:44:ab:82:91:71:c5:0c:bd:c7:
2c:f6:20:81:7b:ed:2b:d5:68:05:63:44:ff:e7:25:
7e:c9:d3:65:8a:4c:ea:d1:aa:b7:fd:81:c6:a9:77:
87:17:aa:a5:9f:87:a0:b3:70:10:68:5e:76:d1:57:
c7:35:d3:f8:c4:e7:6a:7c:79:0c:19:96:42:2a:57:
90:83:28:37:d9:99:9e:5f:49:fa:b6:80:12:2a:29:
e1:32:0a:47:48:1c:49:6b:12:f0:be:58:c4:55:72:
f9:4b:62:a5:e4:34:24:42:05:e3:24:6c:ae:b7:e1:
21:57:57:64:36:5a:f6:3a:86:91:3a:e1:7a:0d:1d:
a3:ba:4b:66:6e:10:02:38:a2:f6:d9:bf:f0:0c:34:
93:1c:b2:b7:ca:aa:12:7c:c1:ea:2c:bc:b9:ef:49:
29:85:bd:b6:f8:75:93:06:bf:a6:d9:43:c5:a9:3c:
2d:f8:5c:9b:f9:46:b4:f2:96:ff:51:a9:17:55:8d:
db:07:93:2d:d2:ad:85:a8:2f:82:af:06:82:02:10:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:7D:57:86:15:D2:39:CF:D9:F5:9B:79:C9:DC:39:89:BD:7A:84
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/JXx9V4YV0jnP2fWbecncOYm9eoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c9:e6:16:2c:b2:a3:4b:78:55:53:27:e5:39:ca:45:8c:fd:
91:04:48:6f:46:ac:7c:ea:60:d2:1f:5a:99:f3:49:3e:55:38:
67:1c:62:99:e1:18:c9:79:17:b9:ce:34:bf:5a:ab:ae:87:cd:
bc:4c:84:8a:ec:92:22:77:fc:b4:5a:9d:c7:d4:f8:08:31:f4:
a6:98:af:56:7b:41:cb:ae:66:b6:c6:96:12:33:8a:0f:8e:0b:
55:b8:79:f8:1d:42:47:ab:52:2a:fb:70:a0:95:02:ba:d8:cf:
36:c2:da:5a:67:04:04:f0:58:e9:9e:8e:f1:9f:f3:4d:a1:52:
00:fa:19:5e:28:d6:84:f4:20:6d:c1:df:d4:16:ab:a6:f2:ee:
4c:10:06:96:ca:a1:4a:a4:5e:d2:0c:e2:e8:3c:c2:94:70:82:
77:37:d6:13:2d:14:08:44:fe:3c:85:75:7b:e0:19:80:64:89:
ef:ff:e6:c1:a6:49:ea:57:93:ab:53:9a:ec:83:43:a8:ab:aa:
30:c7:7e:08:64:44:71:46:9b:21:68:92:fb:ad:d7:f0:3e:27:
fb:e9:3d:21:35:9b:a2:22:cb:be:44:db:99:98:34:7c:dd:e2:
58:83:92:66:c2:5f:d2:04:48:3a:a1:a1:3c:b3:3e:70:2c:98:
54:91:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:29 2024 by rpki-client on console-fra.rpki-client.org