Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/jDJRMRpmNKqzLQlIObva5leaVqk.roa
File: jDJRMRpmNKqzLQlIObva5leaVqk.roa (raw, json)
Hash identifier: tQkC76L5jBVfMF9o+b5GLAD5HDx6f4yQgP88jOe0b6U=
Subject key identifier: 8C:32:51:31:1A:66:34:AA:B3:2D:09:48:39:BB:DA:E6:57:9A:56:A9
Certificate issuer: /CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Certificate serial: B224B1
Authority key identifier: 22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/jDJRMRpmNKqzLQlIObva5leaVqk.roa
Signing time: Sat 01 Jan 2022 11:56:37 +0000
ROA not before: Sat 01 Jan 2022 11:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.242.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11674801 (0xb224b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Validity
Not Before: Jan 1 11:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c3251311a6634aab32d094839bbdae6579a56a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:2f:3e:07:4a:31:be:ac:35:5d:d1:f2:0e:
6f:22:97:18:b5:00:a6:69:5b:a5:ad:0a:05:f9:94:
69:89:b3:55:ef:8f:61:2f:ad:94:25:2c:af:73:32:
73:d7:d9:2b:c4:c9:af:53:3e:10:b3:8c:5e:86:9e:
e5:69:aa:20:a4:dd:b9:0e:ca:dc:48:4d:bc:ff:38:
8a:04:82:aa:a1:f1:e4:0d:0f:8d:7f:94:e9:76:88:
bd:0f:bb:08:31:09:62:7c:86:b9:0a:97:c7:af:1e:
69:46:18:6a:fa:e4:8f:7b:81:db:c2:93:94:47:cf:
4d:4c:56:2d:ac:99:f8:ec:11:38:7c:1c:b5:e5:d8:
f7:bd:98:05:f8:3f:35:e9:1c:43:19:4f:4a:48:2c:
08:85:21:c8:05:57:15:f2:7f:3c:7c:c5:24:04:6e:
3a:30:87:95:34:ee:f3:11:f8:6c:99:ed:da:35:2f:
34:43:a4:3a:62:db:95:20:33:cc:31:39:05:96:ce:
9d:71:5d:91:ca:e8:e4:f2:b7:fb:d8:b0:9a:75:d4:
b3:a1:7b:14:48:e0:63:ca:52:c6:cd:55:92:f0:05:
eb:a1:22:72:18:05:2a:5c:a9:66:f1:b4:85:29:82:
bb:5c:07:b4:3c:f8:38:aa:72:91:6d:db:2a:09:6f:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:51:31:1A:66:34:AA:B3:2D:09:48:39:BB:DA:E6:57:9A:56:A9
X509v3 Authority Key Identifier:
keyid:22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/jDJRMRpmNKqzLQlIObva5leaVqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/ImvMD4ezL3S4ONwfJNKOWCP2D_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.246.0/24
Signature Algorithm: sha256WithRSAEncryption
11:24:3c:51:79:84:4b:84:bb:24:94:eb:44:fd:42:15:10:3e:
1f:11:9f:82:0a:da:a2:d8:df:0a:32:6d:fb:f8:d9:93:0c:48:
f6:fa:d4:e2:16:91:3f:7c:53:cf:ec:f4:b7:31:b2:bf:ba:df:
4f:e5:58:16:8b:28:8b:e4:35:dd:f7:42:23:8d:0f:30:35:34:
60:cc:1a:ae:e9:19:c3:08:e0:3c:7e:36:07:33:88:8b:75:7d:
34:03:f5:08:ab:15:9f:ec:ff:dd:f7:fa:9d:ee:d2:07:c4:19:
34:3a:d0:9a:fc:86:98:a8:28:7c:81:92:47:ae:c3:64:c5:82:
aa:8b:b5:7e:6f:f8:ae:0c:63:7d:3a:9f:34:6b:6e:c6:95:3b:
f5:40:92:54:8b:bb:11:b8:84:37:d2:06:c5:12:b0:c7:42:8b:
34:35:d3:d6:87:e9:bc:a6:9f:8b:97:23:cd:3d:ff:ba:dd:d2:
a5:dd:a0:92:7f:2d:6d:37:a8:b5:81:3b:cd:42:31:3a:f0:df:
f4:d0:b2:46:bf:22:11:98:d3:fb:7a:d0:67:e5:22:75:fa:03:
09:ab:88:60:c9:32:84:72:18:8d:ac:ce:72:d2:fa:e0:e4:dd:
8e:82:a4:22:ee:95:6e:85:6b:fc:bf:29:d3:91:21:00:7e:53:
db:7b:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org