Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/jTMhiz_1YFdzIHdMWXG-dHQ2jy0.roa
File: jTMhiz_1YFdzIHdMWXG-dHQ2jy0.roa (raw, json)
Hash identifier: vNwzOhuC0Bv9QTmRMe3oAk6h2nbvBJgBDVaL7i5zrcI=
Subject key identifier: 8D:33:21:8B:3F:F5:60:57:73:20:77:4C:59:71:BE:74:74:36:8F:2D
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 1830E205
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/jTMhiz_1YFdzIHdMWXG-dHQ2jy0.roa
Signing time: Sat 01 Jan 2022 12:06:05 +0000
ROA not before: Sat 01 Jan 2022 12:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210236
IP address blocks: 212.53.178.0/24 maxlen: 24
212.48.111.152/29 maxlen: 29
212.48.111.144/29 maxlen: 29
212.53.193.0/24 maxlen: 24
212.53.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405856773 (0x1830e205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 12:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d33218b3ff560577320774c5971be7474368f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:07:dc:e2:3e:55:d2:11:e1:9a:2a:18:35:
39:d6:be:4b:18:a4:40:ab:34:ec:b3:40:01:c4:6f:
29:57:36:54:65:43:b1:34:54:91:bf:e5:a1:61:2f:
43:1b:dc:d2:89:de:4a:30:b6:4f:67:02:ff:85:55:
91:68:79:17:a8:7d:57:a0:e2:56:9e:b3:3c:cc:c1:
30:85:58:04:48:e9:eb:74:35:1c:99:15:90:ef:72:
e9:2a:84:a8:18:68:df:ac:a5:40:34:84:12:05:47:
3c:38:eb:f7:70:65:a9:b4:a0:24:ee:e9:9c:d6:ed:
0f:b6:de:4d:0c:ee:4c:b8:a0:41:1c:49:74:8b:15:
c8:50:c2:c9:2c:dd:cb:d6:1f:63:6c:58:c5:92:10:
25:6d:7c:3b:66:a7:59:6c:e5:54:3e:ee:93:fb:ae:
c9:dd:9e:24:84:07:1a:a5:f7:f8:ed:5a:74:6d:61:
81:61:37:18:3a:70:13:63:f1:32:26:7d:01:1e:e2:
e9:e5:73:2e:ad:42:58:88:c7:d7:a6:ce:e9:62:ac:
28:d0:f7:b3:64:b9:f6:26:5d:87:87:90:2a:5b:ae:
1e:75:93:1a:bb:a0:71:a9:49:c4:7e:a0:e9:30:e4:
96:69:27:1a:7b:5a:d6:c9:94:b3:cb:9f:a7:ef:6d:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:21:8B:3F:F5:60:57:73:20:77:4C:59:71:BE:74:74:36:8F:2D
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/jTMhiz_1YFdzIHdMWXG-dHQ2jy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.111.144/28
212.53.147.0/24
212.53.178.0/24
212.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2a:d1:06:c5:ac:c2:a8:63:54:21:d6:b3:91:7e:91:f3:76:
90:9b:99:3e:0f:ee:63:c6:22:b4:04:b1:4e:d1:c1:3d:bf:cc:
be:c9:58:b4:52:b5:e1:a7:f1:dc:14:10:4c:51:e3:dd:dd:d5:
1f:66:21:51:69:84:86:a2:d2:51:05:f5:43:1c:6a:94:b7:bf:
64:23:c8:11:dc:77:c0:70:b4:02:b3:85:5e:70:cd:c2:c9:96:
20:72:2c:e9:86:cc:b5:c3:d2:a4:cc:3c:cb:b6:e4:37:db:b6:
f0:64:a8:ed:d6:25:a4:c3:2a:38:4d:2a:27:6e:08:3b:40:50:
ba:6e:9c:34:8d:91:ba:6f:8d:e8:8e:67:0c:09:41:f1:45:bf:
92:0c:a9:c2:60:10:d3:37:5f:40:6a:97:a1:df:3e:c9:66:38:
54:bb:06:79:79:51:ea:bc:fa:d3:87:57:c6:15:60:1a:7f:e9:
a4:bc:fd:bb:f9:1f:85:90:2f:a5:d8:ac:72:d4:68:73:3c:70:
f9:1d:0b:98:46:38:c2:fd:87:62:34:43:ce:68:51:e5:c2:d6:
49:32:72:6d:e6:9d:e3:a4:a0:8b:76:41:06:08:8e:cf:5f:66:
3f:4e:e7:d3:33:cd:86:1d:bc:23:2e:74:77:b8:9f:53:a5:0e:
b3:46:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:30 2024 by rpki-client on console-ams.rpki-client.org