Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/696-jpQWZBOid26tj_8FsaB2bcE.roa
File: 696-jpQWZBOid26tj_8FsaB2bcE.roa (raw, json)
Hash identifier: Vr1NYo19bbBK291vEaKdyQ9GbGZzFZLmVdJdtIx/R5s=
Subject key identifier: EB:DE:BE:8E:94:16:64:13:A2:77:6E:AD:8F:FF:05:B1:A0:76:6D:C1
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 04724199
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/696-jpQWZBOid26tj_8FsaB2bcE.roa
Signing time: Sun 13 Mar 2022 17:57:06 +0000
ROA not before: Sun 13 Mar 2022 17:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209588
IP address blocks: 147.78.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74596761 (0x4724199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 13 17:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebdebe8e94166413a2776ead8fff05b1a0766dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:b4:36:31:1a:d9:71:9b:7f:e1:67:7f:f9:
06:45:7c:13:b6:03:68:bd:79:42:8b:4a:06:33:18:
b7:38:a8:7f:29:6e:3a:3b:2e:ce:08:a9:ab:b8:4b:
3a:7b:aa:04:c3:f1:cf:8a:0e:73:43:20:11:71:d8:
a5:07:e0:32:4c:ed:d9:33:28:b3:94:36:15:e9:9a:
33:d4:ee:7f:9c:e4:dd:52:65:dd:48:5a:cd:25:49:
18:05:64:0e:58:e0:af:e4:93:fc:c9:24:b4:d8:bc:
6a:bb:cb:73:2d:88:99:fe:7c:d7:68:5c:2f:5b:b8:
cc:c3:95:d1:2a:0d:a6:b7:bd:21:d6:fd:e3:b1:70:
52:2a:f9:f0:25:67:d0:cb:d4:45:ad:c9:30:49:c5:
e9:f4:46:d1:59:11:9d:5f:2b:e7:36:26:ba:77:34:
7b:ca:48:82:29:63:34:a1:cf:d5:a3:a5:f3:cc:c2:
a6:93:1b:2e:96:16:0b:a2:dc:84:41:79:b7:de:26:
8c:60:fb:09:9f:75:17:07:7b:60:f3:09:e1:4d:03:
d4:e9:2f:06:bc:f1:b0:5d:ed:b0:66:30:72:6d:e9:
1a:46:db:da:36:f0:ad:67:34:2a:9e:fe:79:8c:34:
6f:d5:29:49:8d:83:70:05:2b:0f:fb:89:67:ae:cc:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:BE:8E:94:16:64:13:A2:77:6E:AD:8F:FF:05:B1:A0:76:6D:C1
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/696-jpQWZBOid26tj_8FsaB2bcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.47.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6b:f1:6d:b6:3c:16:da:ba:4f:89:86:d6:63:92:c9:81:18:
bc:b7:9d:86:40:58:40:11:75:cf:4f:31:7d:43:97:bc:73:ee:
f7:8e:60:65:57:3a:9d:85:43:1c:e2:8e:9c:cc:3b:f1:0f:46:
44:7a:36:b1:b0:04:c4:d7:21:4f:a7:9f:4d:98:66:a9:03:2b:
93:f8:8c:9a:db:80:82:d2:06:03:29:60:3f:3d:a5:8d:c2:9c:
aa:c1:83:83:02:e5:a5:03:eb:56:e6:c9:f0:b6:66:2c:92:ea:
90:4f:41:55:34:60:97:c0:dd:95:e1:3c:1c:ca:46:25:45:8c:
81:8d:ba:38:10:17:bb:76:69:d9:92:a4:e6:e4:93:21:c9:10:
3f:0a:9f:bb:b7:57:b3:67:3a:63:38:e0:ff:d8:44:f3:ac:0a:
3f:b0:3b:bc:b1:a2:b6:cd:0f:20:2e:4b:12:50:ed:b7:84:ed:
6c:4c:13:6e:cf:85:54:f2:1e:47:da:24:0e:24:3b:93:3b:4c:
ea:e1:b4:b1:e4:e1:d0:3c:8c:e1:4c:79:3e:e5:d8:4b:b3:d5:
e8:cc:f7:9a:de:71:dc:0e:8e:2f:0f:11:d1:89:fd:79:98:43:
ed:ec:c5:f0:3b:0f:ae:9d:94:88:8f:85:0c:f3:54:38:21:54:
18:0d:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org