Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JaiNaj8NMTSeutlciv7g-geXqCw.roa
File: JaiNaj8NMTSeutlciv7g-geXqCw.roa (raw, json)
Hash identifier: mnQysghXgml2NtZn62CZBiwh1QPgc1yXcBJDvNUime4=
Subject key identifier: 25:A8:8D:6A:3F:0D:31:34:9E:BA:D9:5C:8A:FE:E0:FA:07:97:A8:2C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184A8B1D2FF5A112A6948BF57A7B9556B9E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JaiNaj8NMTSeutlciv7g-geXqCw.roa
Signing time: Thu 24 Nov 2022 08:12:16 +0000
ROA not before: Thu 24 Nov 2022 08:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49127
IP address blocks: 194.58.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:b1:d2:ff:5a:11:2a:69:48:bf:57:a7:b9:55:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 24 08:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25a88d6a3f0d31349ebad95c8afee0fa0797a82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:89:05:01:d4:98:06:df:a5:5d:df:2f:ac:
82:ee:c3:fe:fe:32:b7:a9:58:49:03:c8:71:33:7a:
9e:c3:c5:19:31:2a:35:ab:f9:59:97:9b:59:9e:5c:
40:ac:f1:be:7b:6f:01:07:ba:12:08:a0:53:44:9a:
28:ec:e4:3f:7d:31:10:b9:85:5d:db:58:da:3d:6f:
63:9c:d3:55:be:6f:1f:5f:66:04:0d:04:f3:21:79:
a0:8f:60:5f:7d:e8:8c:25:6f:67:b6:a5:c0:bf:b2:
42:fd:b7:1a:30:20:b4:fc:6a:c7:ff:00:76:5d:1f:
81:4f:e3:f4:ee:b5:d9:28:1f:75:ce:7c:b4:34:00:
21:d8:d0:5f:a2:fb:7c:d2:55:fc:8b:a3:fe:e0:e6:
7d:4d:23:8d:59:94:3f:4d:7b:eb:5d:d8:b1:26:1f:
b3:b7:f9:3b:09:08:e0:63:46:a4:52:84:08:ee:30:
0f:2b:2e:1d:d5:be:f2:83:74:83:6b:1d:81:25:1c:
87:ac:0f:21:19:bd:67:53:36:cc:b4:f8:f2:33:16:
03:45:02:fd:ce:82:18:e4:b4:f3:32:dd:13:9b:65:
37:7a:23:b5:3e:d0:d7:a6:a4:9b:09:28:49:a2:bc:
ed:35:e8:65:30:f4:4e:c1:f9:dc:80:b9:10:22:c3:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:8D:6A:3F:0D:31:34:9E:BA:D9:5C:8A:FE:E0:FA:07:97:A8:2C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JaiNaj8NMTSeutlciv7g-geXqCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.45.0/24
Signature Algorithm: sha256WithRSAEncryption
46:79:76:88:af:5c:65:a7:9f:4c:d8:99:e5:69:d0:0f:0c:d9:
29:82:a4:da:0f:f3:d9:d5:d5:de:22:50:78:4d:57:20:4b:80:
d6:20:59:72:b2:8a:b5:0a:4d:6f:51:04:8a:6f:80:d7:a4:a2:
72:e4:3a:83:7d:78:94:90:e8:55:35:2d:e0:98:60:60:bf:b7:
ee:80:a5:ac:3f:fb:df:a2:6e:01:30:41:c7:1a:29:9a:16:f5:
23:04:62:09:11:43:7e:98:96:ef:a4:e7:76:70:ff:1f:00:10:
ea:07:58:22:62:dc:0d:f5:e7:17:c0:fe:54:8c:7c:49:a8:6a:
46:1b:67:f3:0f:b9:ab:07:08:de:61:36:d6:c4:02:47:db:43:
25:04:57:f4:a0:f6:b6:ce:71:ea:17:0e:1b:9a:01:87:3f:44:
24:5a:1c:51:16:4a:93:29:72:bb:89:24:ee:cd:e4:e5:89:f9:
8f:cf:4b:0b:9d:be:f8:5c:ee:67:47:8a:53:10:b2:3f:fc:95:
78:0f:dd:fb:c0:f9:8d:f0:46:3d:15:27:64:ae:33:aa:87:88:
d0:b8:74:bb:ea:e9:e4:bf:23:2f:3d:b1:66:53:ec:06:18:13:
e5:c0:bb:b9:eb:00:05:00:00:66:ec:d0:36:d3:21:26:3b:4e:
55:65:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org