Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/jvBaok8koT7ddZ0aGE27INKFEJ8.roa
File: jvBaok8koT7ddZ0aGE27INKFEJ8.roa (raw, json)
Hash identifier: eFXoq6eJekBNC/sZKckO3gV3n2pxZ9l2LNPgr00bg+Y=
Subject key identifier: 8E:F0:5A:A2:4F:24:A1:3E:DD:75:9D:1A:18:4D:BB:20:D2:85:10:9F
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 341E3948
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/jvBaok8koT7ddZ0aGE27INKFEJ8.roa
Signing time: Sat 01 Jan 2022 09:03:10 +0000
ROA not before: Sat 01 Jan 2022 09:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13242
IP address blocks: 85.254.240.0/21 maxlen: 21
85.254.204.0/23 maxlen: 23
85.254.200.0/22 maxlen: 22
85.254.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874395976 (0x341e3948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 1 09:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ef05aa24f24a13edd759d1a184dbb20d285109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:12:7b:ca:21:69:44:1e:88:68:80:ec:12:
89:88:55:a9:7d:64:65:ca:54:b9:d3:aa:2a:86:65:
7c:63:c2:b1:d6:0c:b0:d6:a7:12:aa:60:6a:d7:29:
3a:b4:7d:48:65:82:65:4c:c0:74:a5:8e:64:16:f6:
1f:94:e6:c5:e4:15:4d:46:f0:a3:39:38:d4:cf:e9:
b7:ab:f3:23:a3:a5:13:dd:6f:39:28:85:cb:9f:93:
13:8f:73:72:17:e3:5f:86:a2:62:b6:b1:7d:8b:b1:
b2:4d:ff:a8:b0:eb:78:41:82:14:30:d9:b7:e3:f7:
87:71:1f:96:3a:b1:fc:e1:c9:a6:15:7c:91:48:20:
90:3b:a9:42:8a:93:a4:85:86:cd:58:4d:10:ef:2f:
6b:d1:02:5a:8e:0d:fa:6b:19:31:d4:e9:f8:64:87:
9e:0e:f5:ba:1c:05:aa:12:6b:e7:4c:da:d4:ac:14:
94:9a:a0:ec:97:16:f4:a0:57:ab:a1:7a:d0:72:49:
08:e0:13:51:f3:af:b1:c5:ca:93:fc:58:13:50:aa:
9f:ee:25:c1:7c:34:7c:bb:10:da:57:df:23:dd:ba:
10:53:ba:c7:38:16:e1:bf:cc:b2:ad:43:4a:3b:58:
35:e3:12:63:4f:b5:a9:57:47:53:c7:04:15:5b:28:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:5A:A2:4F:24:A1:3E:DD:75:9D:1A:18:4D:BB:20:D2:85:10:9F
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/jvBaok8koT7ddZ0aGE27INKFEJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.200.0-85.254.205.255
85.254.238.0-85.254.247.255
Signature Algorithm: sha256WithRSAEncryption
91:8c:61:90:f9:e3:23:47:ff:c7:b4:35:bb:16:eb:34:0a:85:
7d:38:68:38:55:34:8c:2f:95:21:f0:f7:68:7b:91:bc:19:ed:
3f:a3:3d:57:1d:95:25:e4:3b:4c:cd:5e:38:0a:d1:15:75:2a:
d1:39:19:cd:a9:0e:bd:aa:9a:8d:f5:27:dd:f6:7d:e3:2f:ff:
db:39:b3:3c:4d:74:f9:1a:a7:b6:70:ba:0d:a7:64:bb:1c:6f:
7b:ac:1b:e8:95:c6:43:2d:27:b8:31:71:d4:5d:0e:02:53:e8:
ef:80:87:e8:c3:ee:f6:7b:1e:b0:f7:a2:5d:f0:36:01:5f:60:
d0:85:b5:cf:f9:73:8b:41:5d:7b:7a:63:e8:2a:64:a9:82:7d:
df:9c:75:05:a5:bc:70:1d:df:fa:b8:d7:90:70:a5:b8:08:f7:
e2:2d:5c:68:cf:f1:42:78:48:fd:ba:d1:99:f2:4f:2c:2c:5a:
e1:61:ab:1f:f8:b6:cf:0d:e0:68:49:cd:f4:86:19:de:2e:ad:
89:1b:36:14:1a:be:4e:aa:0f:fe:1e:2b:f1:2d:55:75:c3:ab:
cc:d7:8f:79:8a:c9:6b:0c:b6:86:e5:41:58:3d:41:b9:4b:a4:
5b:ee:29:23:53:9b:00:e1:d4:31:e2:42:88:6a:b0:83:e0:22:
5a:3d:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:31 2024 by rpki-client on console-ams.rpki-client.org