Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/J7ALbNnnvAZWICU_CA-PlFaOgEo.roa
File: J7ALbNnnvAZWICU_CA-PlFaOgEo.roa (raw, json)
Hash identifier: QFjD/IadeP8W+hfnXDAF+zIEsC/t0+4u7uNa98I8k5Y=
Subject key identifier: 27:B0:0B:6C:D9:E7:BC:06:56:20:25:3F:08:0F:8F:94:56:8E:80:4A
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 02689C08
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/J7ALbNnnvAZWICU_CA-PlFaOgEo.roa
Signing time: Sat 01 Jan 2022 03:57:54 +0000
ROA not before: Sat 01 Jan 2022 03:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211145
IP address blocks: 185.244.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40410120 (0x2689c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jan 1 03:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27b00b6cd9e7bc065620253f080f8f94568e804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:ee:16:a5:62:b2:28:b7:e9:02:47:34:9d:
ac:64:81:ac:42:98:1b:85:f6:71:02:5f:85:0d:31:
81:02:f8:02:bb:db:86:cc:be:29:cb:41:12:d7:70:
3c:59:38:53:50:ed:e3:4d:96:ba:87:5a:31:a7:36:
1d:c3:2e:de:b7:c2:ba:ee:d1:e8:a9:e3:1d:e0:9c:
d3:54:c5:87:49:34:7b:fe:f6:1e:be:33:78:08:76:
3c:64:09:42:6d:9b:38:36:e4:64:60:fa:71:1b:d7:
e0:d3:98:5f:25:cc:44:5f:e2:31:21:c2:b2:d0:db:
60:4f:fc:03:d6:bb:4b:c7:84:ac:da:2c:5b:1b:44:
4c:77:e5:6c:5d:c6:4d:34:75:f3:53:74:65:30:7e:
40:d6:88:32:50:10:e9:70:78:4d:d1:88:f4:da:c2:
82:b7:cb:5d:28:45:a9:af:39:21:ca:81:8d:03:21:
de:4a:88:7e:4c:03:ca:39:5e:1c:78:dd:f7:53:75:
93:af:f4:56:57:a0:57:3f:49:67:aa:f8:dd:b2:7e:
67:c0:ba:61:2e:e4:3e:93:88:0d:8c:27:fd:fb:64:
0f:4e:8f:b8:8f:d4:5a:92:dc:82:49:53:c1:d8:7b:
48:fb:f0:aa:71:c5:36:09:24:67:6b:3e:b5:cc:a3:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B0:0B:6C:D9:E7:BC:06:56:20:25:3F:08:0F:8F:94:56:8E:80:4A
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/J7ALbNnnvAZWICU_CA-PlFaOgEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:bd:a3:70:18:e3:71:3e:91:3e:4b:fb:98:4d:57:2e:b3:92:
b6:86:99:6f:18:27:1a:ff:33:15:22:e6:24:b1:23:e8:4c:db:
05:d4:f8:51:36:03:75:19:65:6c:fa:65:6d:eb:6e:3a:9a:93:
9c:6d:8b:dc:d1:62:b9:3e:df:b0:21:67:52:c3:d0:d6:91:f7:
4a:2f:76:d1:96:8e:6f:01:c9:54:f1:f5:0a:4c:93:e2:ba:47:
0d:8a:a3:73:27:84:8c:d1:87:a3:1e:60:98:6f:23:0b:2d:2e:
9a:ab:4d:ce:7e:4e:6a:fc:a4:d8:db:6c:1b:8d:c2:64:e1:90:
cd:04:38:64:c3:d9:fe:9f:c8:e8:eb:5c:f8:aa:c3:d6:00:fb:
1c:0d:57:d4:1b:54:5d:ec:4d:2c:a6:b7:b9:31:b7:75:ee:16:
dd:18:12:4e:76:03:85:f8:96:17:48:c8:ca:00:5d:37:14:79:
18:c1:21:5e:ce:a5:f9:a2:70:e0:a3:88:5e:e1:91:36:8e:2e:
98:53:02:e8:8b:6c:b9:e3:59:7c:cb:3c:f6:98:16:b9:d9:6e:
49:73:2b:7a:a8:63:f4:cf:29:ed:e7:8d:92:50:63:51:d7:e3:
65:6d:06:77:e4:ad:7b:49:63:78:f1:10:54:b7:f6:00:9b:b7:
4c:00:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org