Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JrINJTjlD510jjjhFgU93nSVm2g.roa
File: JrINJTjlD510jjjhFgU93nSVm2g.roa (raw, json)
Hash identifier: JAo4bW/CACfYVjVtokbLbyqMgRjtJ6MdD9qKUW+btrk=
Subject key identifier: 26:B2:0D:25:38:E5:0F:9D:74:8E:38:E1:16:05:3D:DE:74:95:9B:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018249F8E2886C2E9DFD31065D2D385E7556
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JrINJTjlD510jjjhFgU93nSVm2g.roa
Signing time: Fri 29 Jul 2022 12:40:23 +0000
ROA not before: Fri 29 Jul 2022 12:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 164.40.185.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:f8:e2:88:6c:2e:9d:fd:31:06:5d:2d:38:5e:75:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 29 12:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b20d2538e50f9d748e38e116053dde74959b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:0d:c7:f1:35:93:ab:77:b3:3c:5b:6f:0a:
7a:81:fd:34:2d:0d:8d:e7:29:56:22:b7:58:9c:76:
58:ba:5c:96:e9:4e:c5:7a:79:57:cc:37:e5:5f:fa:
59:94:c8:c7:b8:11:8f:3c:94:46:89:ad:96:b5:6a:
62:89:70:52:19:d2:ea:1b:59:87:ee:4a:1e:5c:ea:
6b:d0:4f:98:bd:d1:f6:5e:b4:33:bb:58:c7:b3:ae:
ae:00:9c:e8:2a:eb:e8:cf:9c:c2:77:eb:0a:86:ba:
9d:11:d9:af:22:f5:6f:45:49:ad:b2:e6:11:bd:24:
00:be:bb:53:09:bb:8c:fc:1a:79:d8:4e:68:95:41:
2c:e3:38:b3:7f:df:3c:28:17:58:ea:e4:c6:e6:92:
1a:a5:fd:07:da:f5:95:8c:08:e7:42:b5:14:f4:41:
85:07:11:6e:43:33:94:ee:2e:61:c4:0b:32:b3:ab:
01:eb:19:f5:4f:d0:1b:23:2f:5c:3a:ee:c0:fb:82:
b7:4a:10:1e:0a:20:cc:22:82:4d:a0:34:97:eb:91:
c6:26:4b:f4:6e:e6:4b:62:c6:f8:b7:ba:03:5f:88:
02:b3:49:8e:3e:af:84:15:f2:01:7e:75:ed:a8:e3:
a6:1f:ab:2c:f7:9b:a1:b3:5e:a6:83:99:4c:d1:c7:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:0D:25:38:E5:0F:9D:74:8E:38:E1:16:05:3D:DE:74:95:9B:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JrINJTjlD510jjjhFgU93nSVm2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.49.0/24
164.40.185.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7b:f2:cb:f4:3d:6b:2b:6f:0b:1f:04:58:7d:f5:b6:92:32:
cd:21:1a:2e:f3:4b:88:6e:81:d7:ed:58:35:13:29:3e:74:fa:
57:81:66:b0:b8:5f:46:8e:90:0d:e9:a7:57:1c:91:2a:46:95:
90:fd:3d:98:03:4a:67:f7:c5:26:eb:b8:52:98:1b:7b:5c:bb:
aa:5a:b3:f4:b4:a9:ec:24:55:d4:e9:87:99:bf:1c:8f:51:1c:
61:9d:a6:ac:64:8d:b6:e5:4e:d7:d9:39:d1:c7:24:d1:94:03:
a8:04:74:96:77:75:e2:c9:82:10:16:a0:0b:4b:73:b5:f3:1c:
b9:1b:d5:f4:62:8c:ee:e2:f7:76:a2:74:26:c4:a4:71:e6:cc:
dc:46:e5:a8:3e:18:10:79:2d:ba:92:69:80:dc:62:13:77:6b:
9c:06:94:a4:51:8d:28:e2:5d:d6:76:da:22:53:44:d6:90:1e:
68:ed:4d:95:d3:ff:f7:b5:63:73:cf:e2:7a:14:f7:4a:cb:36:
1d:bd:25:36:1c:67:6d:2f:54:3d:84:59:4e:73:2c:d7:d8:bf:
09:9c:92:35:86:48:2b:22:7b:c7:d0:f0:e5:81:b1:65:98:93:
98:76:42:0b:c2:4d:30:1c:02:1b:f8:d5:03:f0:26:4b:58:34:
46:77:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-fra.rpki-client.org