Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/jr-qAYQwOuxs1gxu1NuJ1vT1MWE.roa
File: jr-qAYQwOuxs1gxu1NuJ1vT1MWE.roa (raw, json)
Hash identifier: JLrYCZgr9qpz5/9ouPwAZfRGj4OQMAhoZEM98ctA+lg=
Subject key identifier: 8E:BF:AA:01:84:30:3A:EC:6C:D6:0C:6E:D4:DB:89:D6:F4:F5:31:61
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01856EC1FB0CEEF0195A649E3B90A43F403F
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/jr-qAYQwOuxs1gxu1NuJ1vT1MWE.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201104
IP address blocks: 94.45.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fb:0c:ee:f0:19:5a:64:9e:3b:90:a4:3f:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ebfaa0184303aec6cd60c6ed4db89d6f4f53161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:38:d4:2a:39:35:d4:f8:18:6f:a8:23:cf:
73:77:90:50:5c:c9:93:12:45:f3:b3:7c:f0:d9:7b:
53:dd:81:88:0c:23:05:44:11:02:69:f2:32:d2:9f:
9b:fb:25:57:cf:c8:34:38:dd:65:fd:f7:70:2d:e8:
c6:58:c4:72:b6:3d:96:d0:68:4e:7b:93:b8:9f:62:
08:e1:48:c4:53:b9:b1:2d:58:5d:0c:aa:0e:3d:dd:
87:28:19:c3:17:f2:0c:0a:fd:85:09:6f:83:a6:9d:
b9:df:cf:7c:b4:03:a4:25:c5:7d:35:c1:c3:d3:f0:
e1:ff:7e:10:4e:11:7b:1b:2f:78:f5:d4:2b:dc:58:
39:d1:5d:08:34:1b:20:bf:8c:f9:48:5d:6c:f5:db:
4f:02:03:92:b8:f4:6a:9d:c3:e6:80:9d:91:14:64:
d2:83:04:43:e3:90:7c:df:78:89:52:d2:b1:d3:c0:
62:19:93:bc:ca:9f:ad:88:95:0e:66:af:22:dd:a4:
59:e8:09:56:09:5c:d0:af:ba:fa:1e:d3:42:db:09:
c3:d7:d8:0c:36:33:1c:61:49:49:7e:95:dc:01:e9:
6b:47:5f:24:45:73:7a:e4:19:74:a4:8e:32:65:23:
3c:c3:98:8d:0f:0c:c3:de:e1:36:30:e2:72:de:1d:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:AA:01:84:30:3A:EC:6C:D6:0C:6E:D4:DB:89:D6:F4:F5:31:61
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/jr-qAYQwOuxs1gxu1NuJ1vT1MWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f4:02:c5:bd:4d:3e:31:0d:a1:b8:05:d4:2a:24:23:fb:28:
a8:b0:42:f6:53:da:c1:99:0d:0c:76:01:39:c3:61:9a:67:4f:
da:4c:cd:df:a5:ea:b8:24:dc:1e:60:88:55:36:2a:c7:16:70:
e2:eb:4a:3f:8c:0e:c7:11:c9:4f:09:13:98:27:7b:ca:be:de:
73:f5:7b:6a:50:17:42:16:4b:a6:da:ab:be:7c:7c:8b:df:37:
73:58:20:de:2d:ba:dc:7d:cb:5d:c8:00:a7:7e:6a:a3:cf:cf:
db:01:84:81:af:b3:78:80:1a:fe:e8:56:5a:18:43:47:f5:12:
91:f1:64:df:a2:2f:b6:d2:a0:3c:ba:71:c1:08:b7:03:b5:8e:
99:3b:da:e5:f0:b6:82:26:7a:9e:ce:73:df:86:5b:25:8f:c8:
83:f0:6a:31:17:5b:93:5e:50:f1:98:d5:c5:a0:7a:ec:e6:93:
da:70:e7:1b:4c:e1:07:be:a8:01:68:45:89:de:de:42:12:bf:
fd:d7:7e:81:43:f2:c7:d1:01:a6:59:9b:0e:ff:35:30:a2:72:
f2:fc:4b:ac:d7:91:31:f0:01:05:bf:d6:2c:c6:1a:ec:ee:bf:
00:a9:45:58:f1:74:30:68:18:61:64:b8:bd:df:cb:41:e2:4a:
fd:64:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:49 2025 by rpki-client