Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/JmEq8URs-59TIGv19lhvZJzIX2E.roa
File: JmEq8URs-59TIGv19lhvZJzIX2E.roa (raw, json)
Hash identifier: TlZA/3fYKdFnFvCrSjTW9xWNLHoXAzo1YGDArGjOzjI=
Subject key identifier: 26:61:2A:F1:44:6C:FB:9F:53:20:6B:F5:F6:58:6F:64:9C:C8:5F:61
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 04894B32
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/JmEq8URs-59TIGv19lhvZJzIX2E.roa
Signing time: Sat 01 Jan 2022 12:55:40 +0000
ROA not before: Sat 01 Jan 2022 12:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41540
IP address blocks: 194.246.120.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76106546 (0x4894b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 12:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26612af1446cfb9f53206bf5f6586f649cc85f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:55:e5:38:86:d4:17:e4:62:8c:fc:66:76:
29:9c:91:b2:6b:a4:35:82:b0:8c:91:37:21:3b:67:
c3:02:76:7f:73:e3:bf:a3:5f:32:9e:d5:ae:64:02:
ec:86:06:80:69:47:76:4c:f7:bb:b0:01:71:30:a2:
19:f1:57:ad:af:a3:8b:20:5a:7f:77:b6:4f:34:2f:
0d:e6:d9:6c:c8:de:27:e3:47:5e:41:f6:a8:d0:6d:
61:f1:e5:d9:57:8a:23:6b:40:ce:6d:83:ac:90:18:
a4:70:54:a3:1a:a9:de:b3:ba:dd:2e:98:1c:ae:06:
ca:72:16:31:33:b0:91:ed:ee:f6:49:9b:db:a4:81:
01:7e:b9:fd:46:b6:0a:1a:bb:3f:f7:d7:04:6e:59:
c4:12:f9:6e:62:bc:b7:43:0c:f9:84:b8:0a:f1:7d:
e7:3b:56:12:8d:1d:99:aa:dc:23:f5:b0:29:67:d1:
74:34:31:6d:55:81:96:a6:bc:a8:21:75:04:60:fb:
da:49:aa:8f:55:14:ed:95:44:cd:b0:28:2b:42:58:
9d:fa:0d:70:c3:16:f6:e8:9b:2d:61:a2:ac:ad:af:
d1:80:ef:18:c0:f2:2f:b9:18:fd:75:59:64:58:ab:
2f:68:b6:2f:25:0c:5c:93:d7:25:86:fe:93:66:69:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:61:2A:F1:44:6C:FB:9F:53:20:6B:F5:F6:58:6F:64:9C:C8:5F:61
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/JmEq8URs-59TIGv19lhvZJzIX2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6f:00:19:a5:d2:d6:f9:31:a7:3d:4d:0e:0e:60:79:38:6c:
5a:95:ad:19:9d:0e:3e:cc:09:de:59:5a:c1:4c:66:8d:15:f3:
af:95:0d:be:5b:5f:5f:56:46:80:9e:f3:ad:d8:86:f1:25:10:
24:37:cb:ea:66:e3:9d:05:da:d4:88:6e:d5:1a:ab:f3:f5:86:
b1:4c:28:13:ff:64:d5:9b:9e:b1:76:b9:9c:2a:6f:0b:16:79:
a7:9f:52:ab:4f:cf:24:20:60:dc:4f:cc:19:2c:35:6a:57:ae:
b1:8a:5d:bf:e9:58:e2:4f:2d:67:98:4a:c9:09:4a:82:51:76:
95:68:48:1d:e2:58:81:f7:6e:fd:92:9d:cb:40:64:4f:d5:bf:
1c:e5:f3:da:71:2b:1c:0a:c9:ea:af:25:ad:39:ac:ac:a8:e3:
08:f9:c9:65:c4:af:64:37:df:6c:8b:42:bb:95:43:19:68:9f:
77:5d:7a:6e:11:e7:59:4a:8b:cb:bd:7c:b4:86:87:ba:2a:36:
fc:04:88:54:dc:d6:e2:8c:b8:ae:1a:ca:00:4e:05:8f:2b:6c:
8d:02:1e:06:2b:42:33:7c:ca:db:87:22:9f:83:92:b9:6e:e9:
48:8d:e3:86:f3:50:c1:ca:81:14:5b:e5:96:a6:4d:47:e4:4f:
2b:a0:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:23 2024 by rpki-client on console-fra.rpki-client.org