Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/JtlR98tKx-LqmTFN4FvY0V-O3iU.roa
File: JtlR98tKx-LqmTFN4FvY0V-O3iU.roa (raw, json)
Hash identifier: /tvX9MeBVXQjtnk9XdO654oCahECgY/TUYF/SkSYzqw=
Subject key identifier: 26:D9:51:F7:CB:4A:C7:E2:EA:99:31:4D:E0:5B:D8:D1:5F:8E:DE:25
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 0FDC4A63
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/JtlR98tKx-LqmTFN4FvY0V-O3iU.roa
Signing time: Sat 01 Jan 2022 06:05:40 +0000
ROA not before: Sat 01 Jan 2022 06:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209631
IP address blocks: 194.116.112.0/24 maxlen: 24
194.116.116.0/24 maxlen: 24
194.116.118.0/24 maxlen: 24
194.116.113.0/24 maxlen: 24
194.116.112.0/21 maxlen: 24
194.116.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266095203 (0xfdc4a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Jan 1 06:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26d951f7cb4ac7e2ea99314de05bd8d15f8ede25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:1c:f9:f2:0a:ce:b5:3c:ca:09:51:9b:5d:
f7:f4:1b:6d:b8:5e:55:4d:d6:90:de:53:f1:d5:4c:
e6:d7:e5:05:68:cd:0d:f4:0a:97:be:f5:2f:07:99:
3f:25:04:6a:d9:93:7f:c7:3f:68:6b:71:a9:d1:1b:
10:07:a0:53:32:fc:4b:c7:b5:68:39:de:23:a2:40:
7f:36:71:f3:33:25:33:63:ec:3e:25:18:3b:58:54:
a8:f1:ee:87:1e:10:ba:80:b7:8a:05:57:0f:d4:e1:
7c:82:7a:fe:5a:a9:17:f9:d5:12:8e:8c:fa:aa:76:
ec:ae:25:0a:9b:f9:da:a8:6e:62:a6:ed:46:e5:54:
e6:16:8a:91:dd:a4:b7:ba:5c:75:ae:b4:1d:71:6d:
da:d6:7c:43:e3:35:8a:ce:83:d5:ad:79:f8:f7:bf:
53:96:ee:ff:86:10:56:75:10:b1:53:69:b8:ed:94:
2e:74:6d:33:30:f4:46:09:ec:69:fb:8b:bd:d3:fa:
d4:f4:b6:40:c9:2b:d3:a2:ba:29:c4:bf:12:dc:45:
f2:a8:60:0b:7f:3a:0e:3c:ad:7c:3e:7b:c1:72:9f:
16:86:70:20:49:07:92:7d:e3:1c:b0:e7:a9:4b:fe:
4c:6f:7e:55:15:62:13:ca:2f:c1:54:a8:8a:1c:39:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:51:F7:CB:4A:C7:E2:EA:99:31:4D:E0:5B:D8:D1:5F:8E:DE:25
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/JtlR98tKx-LqmTFN4FvY0V-O3iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:10:d1:b4:9f:5b:67:2b:8f:58:a9:0c:e3:3f:d7:ae:f8:87:
90:1f:59:ee:86:4a:51:08:fa:6d:ab:cc:cb:1e:b7:aa:70:e8:
89:22:b5:f3:1a:b8:4c:98:9e:c5:51:9e:cf:c6:4e:f9:96:e1:
aa:fe:d7:87:0e:2e:fc:b0:89:ca:b1:03:90:01:be:a0:41:7d:
b6:bd:7d:9d:af:65:f8:fe:5c:27:25:b2:97:45:c2:a3:c5:73:
bc:31:18:6b:26:ee:1a:56:15:56:3c:2d:03:3e:9b:18:d6:d4:
3c:f9:60:26:7f:b3:82:8a:b8:65:ad:33:e0:cb:43:b0:d4:9b:
9e:40:e4:28:7a:9e:6f:db:c9:c0:b2:4e:ca:da:4e:8b:99:a7:
3d:06:6a:82:62:52:9c:3f:84:ed:21:6f:09:f1:ca:0b:0c:25:
fb:5a:86:5a:ba:5f:db:c3:08:c7:cc:ae:a5:82:a3:36:fd:e4:
3d:d1:89:50:ff:c6:64:03:85:b4:4f:67:eb:6e:fd:36:1e:af:
67:bd:b1:b7:39:1a:2d:fa:72:61:d2:e5:06:b2:77:3a:f1:f7:
23:cc:f8:1c:4b:c1:f8:51:72:26:3e:f9:61:78:d8:a8:e7:cb:
1f:a2:c1:b0:30:f9:5f:63:74:2f:28:cd:38:ca:b3:45:38:5a:
bb:5d:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org