Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/CjjjGFQA8O_KdPU8kGdeZ4dVEjc.roa
File: CjjjGFQA8O_KdPU8kGdeZ4dVEjc.roa (raw, json)
Hash identifier: fqW5w15OcAgohtO5qmR1XlAPJYST3A0R77CmUl4u2KE=
Subject key identifier: 0A:38:E3:18:54:00:F0:EF:CA:74:F5:3C:90:67:5E:67:87:55:12:37
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 42017722
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/CjjjGFQA8O_KdPU8kGdeZ4dVEjc.roa
Signing time: Sat 01 Jan 2022 16:11:21 +0000
ROA not before: Sat 01 Jan 2022 16:11:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29423
IP address blocks: 185.211.60.0/24 maxlen: 24
185.207.229.0/24 maxlen: 24
2a0b:6340::/32 maxlen: 32
2a0b:2a40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107392290 (0x42017722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 16:11:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a38e3185400f0efca74f53c90675e6787551237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:29:bd:a7:db:83:56:89:65:b9:13:c9:e0:
58:b6:0b:15:d3:51:be:9f:a6:90:91:04:ad:42:42:
2e:7b:7d:85:95:74:66:15:82:80:48:06:13:42:dd:
35:46:2b:a2:c2:89:b9:2a:fa:5a:50:23:4d:a9:ee:
82:c5:81:a2:9c:05:b9:df:fb:c3:00:76:13:8d:7e:
7d:08:53:dd:87:95:32:b4:68:87:76:77:ab:b7:2b:
45:59:0f:67:2f:9f:7b:05:dd:2d:81:1e:4a:fd:fe:
c1:b7:f0:32:5c:25:fe:0f:7b:60:d3:ec:fc:b1:32:
f4:f9:6f:15:3e:2a:e5:6a:d3:7a:71:a9:ed:a0:36:
76:92:ca:c2:fa:43:26:54:a7:19:d5:85:49:9e:f2:
12:29:53:a8:4a:f0:94:3f:19:0d:ca:57:5b:cd:54:
98:1b:cc:9c:ad:14:ec:8b:cd:46:77:69:49:4d:95:
b7:a7:37:67:f7:34:07:5c:10:a1:c7:a7:3a:f2:70:
9e:23:28:c1:d6:c4:2c:2d:17:59:46:ee:3c:61:89:
ad:0c:8d:42:48:e6:0d:76:33:47:fa:2c:56:bd:a5:
2b:d2:5d:d6:1c:0a:ce:0d:5a:f9:fe:b0:19:36:22:
0a:7f:ac:39:60:d3:71:97:01:45:9c:af:b8:2b:0f:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:E3:18:54:00:F0:EF:CA:74:F5:3C:90:67:5E:67:87:55:12:37
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/CjjjGFQA8O_KdPU8kGdeZ4dVEjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.229.0/24
185.211.60.0/24
IPv6:
2a0b:2a40::/32
2a0b:6340::/32
Signature Algorithm: sha256WithRSAEncryption
34:c7:da:3a:27:97:29:8f:73:7f:95:ff:51:34:6a:3c:79:f2:
57:c6:21:f9:8d:f9:84:44:15:b1:cd:de:07:c4:83:d0:b5:cc:
d1:8e:b8:b1:21:4f:1f:cc:1a:5d:72:68:e5:01:3c:7f:bc:13:
15:82:76:4f:72:82:f5:fe:b4:d3:f3:78:da:33:14:88:04:b3:
c1:81:0f:c2:9a:8a:8a:6f:52:4b:cf:c4:29:89:b7:cb:3e:81:
70:3c:71:82:3c:62:5c:27:ae:de:59:2d:c2:84:b8:96:0a:58:
c3:25:a6:7d:2e:e1:35:31:d7:14:13:6f:aa:1e:bf:dd:86:15:
4f:91:8f:11:61:2f:1c:44:fb:88:cb:a2:fa:e9:34:31:c8:c8:
b3:a6:e3:a9:77:60:42:cc:d9:d4:7f:09:61:64:d3:79:9d:db:
d1:5b:7c:32:18:28:44:ab:a1:72:43:91:ad:77:7e:13:3c:78:
a4:b2:5b:1f:5f:3d:24:25:20:d1:62:e3:c6:7a:b9:d8:16:32:
08:62:0f:b4:88:50:28:2c:98:de:ab:da:e9:d2:9f:48:d6:92:
52:55:8c:d3:54:51:4d:c8:9d:49:87:4c:48:3a:57:6a:ff:4a:
bc:2f:53:bc:7f:e3:05:07:b8:b2:6e:e5:d5:14:27:e0:83:d7:
90:ce:a3:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org