Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JZWEmMLMmuMlKodmuZK7oLuN86Q.roa
File: JZWEmMLMmuMlKodmuZK7oLuN86Q.roa (raw, json)
Hash identifier: 0StLIgTosOEWHdYrPW6Pqlt+Mg7uPGh0hgDnILy/ato=
Subject key identifier: 25:95:84:98:C2:CC:9A:E3:25:2A:87:66:B9:92:BB:A0:BB:8D:F3:A4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B13B0D7
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JZWEmMLMmuMlKodmuZK7oLuN86Q.roa
Signing time: Sat 01 Jan 2022 13:58:09 +0000
ROA not before: Sat 01 Jan 2022 13:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205030
IP address blocks: 188.114.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722710743 (0x2b13b0d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25958498c2cc9ae3252a8766b992bba0bb8df3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:fc:80:a1:a8:41:e7:df:e9:f1:fe:11:9f:
98:10:04:d1:70:75:28:44:8f:c2:b8:82:31:35:f6:
bb:6f:e7:af:95:f5:9f:02:68:7c:0d:56:47:0b:76:
bf:d3:1b:af:01:d2:24:57:e7:fd:a4:3d:dd:29:c7:
74:62:01:b5:e5:ce:51:e1:d3:2d:e9:c5:40:15:c6:
0f:9d:8c:e0:26:12:1e:7e:f3:73:5f:86:fe:5a:8d:
db:cb:8c:a3:fc:d3:c9:58:db:e1:b7:49:d1:fd:04:
6a:59:4d:dd:da:96:4f:2d:4c:52:48:f9:f4:e1:ad:
61:7e:70:6d:dd:e8:88:72:c5:59:1a:c0:34:87:a4:
8d:5e:0c:af:00:e9:c8:8c:83:1c:59:a2:6f:77:ad:
e7:01:a8:96:71:54:93:9b:75:d2:05:b8:bc:4c:46:
d4:2a:60:96:bb:9d:26:65:07:cf:52:9d:22:e9:61:
97:8d:20:82:7b:c9:4c:58:e9:1f:80:63:2f:20:9a:
2a:cf:95:53:42:0a:b1:c6:20:f0:eb:f4:46:1b:cb:
e3:7c:5a:a0:c7:4f:ba:07:1c:6a:a5:e6:1b:cc:34:
4c:b8:dc:6b:e2:53:63:e3:5a:93:b9:10:4d:19:b1:
86:13:41:b9:1e:eb:15:57:3c:18:91:1d:fb:e9:b9:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:84:98:C2:CC:9A:E3:25:2A:87:66:B9:92:BB:A0:BB:8D:F3:A4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JZWEmMLMmuMlKodmuZK7oLuN86Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.88.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:07:18:c3:db:a7:3b:10:38:f3:1e:8f:d9:d5:ba:1c:62:28:
a7:67:8a:9d:61:57:ab:0d:68:b9:db:b7:44:b1:3a:40:14:41:
51:ec:c8:41:42:5a:54:b9:64:f5:f7:8a:8e:ea:5f:63:6a:6a:
d4:d9:62:c3:31:08:35:5d:92:d7:32:ec:53:b6:03:af:5d:77:
e6:77:50:db:87:5f:74:bb:fd:d5:3d:c5:f3:fa:98:fe:38:e2:
32:7a:66:76:79:ba:54:7c:f9:74:0b:f8:3f:30:9d:18:31:b9:
f2:47:93:62:78:a4:9b:77:d1:0a:00:03:ce:0e:93:51:c7:b8:
ae:ae:02:7b:28:56:a2:27:39:4f:60:d2:63:af:e6:a6:42:b0:
7b:90:91:dc:ac:60:53:14:34:8a:39:12:ad:78:94:3b:a4:be:
9f:71:5e:ca:d2:0b:2d:fe:57:3a:85:4e:fd:36:89:1d:af:47:
a6:af:1f:8a:6a:72:3c:70:d0:0d:d0:f0:55:98:28:8d:25:c5:
c7:d3:54:23:15:65:92:27:6f:41:77:2b:53:54:f5:27:22:de:
e4:28:f5:cf:d8:93:bf:12:2c:43:cf:48:54:d3:16:c0:44:df:
c9:a7:4f:af:dc:85:49:cf:db:5d:04:d5:14:90:4d:26:4e:32:
b5:25:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org