Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/jpmKzBu1Zu44GnUx5Esfkwyg_3s.roa
File: jpmKzBu1Zu44GnUx5Esfkwyg_3s.roa (raw, json)
Hash identifier: kA/n0e21gUzTLiRJvI3jRv/oTBWkl6giZ78THuvt1FA=
Subject key identifier: 8E:99:8A:CC:1B:B5:66:EE:38:1A:75:31:E4:4B:1F:93:0C:A0:FF:7B
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 017422
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/jpmKzBu1Zu44GnUx5Esfkwyg_3s.roa
Signing time: Fri 25 Feb 2022 08:13:23 +0000
ROA not before: Fri 25 Feb 2022 08:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20777
IP address blocks: 194.125.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95266 (0x17422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Feb 25 08:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e998acc1bb566ee381a7531e44b1f930ca0ff7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:b7:db:f8:8a:c0:a9:9a:d6:2d:1c:3c:c1:
fd:67:7e:4b:1b:5f:e7:ee:bf:d7:20:9d:37:5e:7a:
7a:e4:d1:c2:2e:ab:4c:e6:4b:b3:52:e8:f0:99:7f:
49:74:7b:1d:85:a8:0f:61:61:67:97:a7:7b:c7:61:
15:f2:cc:19:3d:c1:a3:1d:99:e6:b6:8d:1f:bb:da:
85:05:5d:6d:ce:6f:75:c9:f8:7d:ed:bb:c8:cd:19:
09:25:7d:58:44:aa:f6:1d:cb:59:90:fa:ff:7d:a6:
c8:a4:cd:27:7e:69:a4:7d:31:a5:cb:54:d9:0c:78:
0c:25:19:d1:ae:9e:6b:6a:31:4a:2b:16:37:09:54:
4e:52:61:37:e7:bc:6c:49:f4:04:c1:d1:90:78:eb:
8d:d1:4a:89:ef:86:aa:eb:4b:60:57:a4:d6:89:51:
6f:e7:ea:ac:73:10:58:f2:48:0d:11:f7:39:e2:a3:
b0:e8:b0:0f:7e:60:65:ad:8b:a1:df:b5:d9:60:a1:
34:4c:04:c8:7e:07:5a:aa:ef:8b:d0:d1:9f:b3:cd:
62:21:f9:11:37:47:1a:d5:24:66:38:c7:53:99:0d:
2a:f4:54:fd:8f:28:e8:d7:f3:10:b9:4a:86:24:49:
4b:91:60:ac:92:2c:89:71:74:22:a4:8a:6c:97:1c:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:8A:CC:1B:B5:66:EE:38:1A:75:31:E4:4B:1F:93:0C:A0:FF:7B
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/jpmKzBu1Zu44GnUx5Esfkwyg_3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.241.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bb:3b:84:dd:c6:51:54:48:3a:5d:09:ed:f9:bd:86:d2:e4:
fc:63:e9:23:c9:b2:b6:34:b8:67:24:bf:58:3c:d9:1d:0e:ee:
ed:fc:ea:b4:9f:40:45:85:c3:e3:ba:19:9c:cf:1d:bc:2f:33:
03:80:b2:82:fc:dd:a9:71:3f:39:c3:77:0d:fd:fc:4e:f9:94:
12:c7:26:89:fe:bd:68:7b:a1:24:50:da:a9:a4:a5:13:b6:08:
a8:f2:5f:ef:7b:af:7b:7c:52:73:a9:fe:dd:d3:1d:66:2e:2e:
5e:0a:06:24:d4:30:74:9e:79:06:7f:92:1b:4e:4d:d4:b2:1b:
bc:88:30:f5:67:4c:aa:2b:e6:79:a8:9b:f2:e0:20:1e:0a:27:
a1:f0:ee:63:1e:bc:89:f7:3b:18:99:f9:f6:e1:38:8e:80:74:
0e:ce:64:dd:ed:9f:23:75:7b:c2:7d:ae:47:e5:5d:46:68:b4:
6e:8e:a2:be:db:5d:96:50:5a:21:e2:2c:36:64:ba:ad:fb:83:
76:44:d4:89:e3:16:5f:aa:a8:7f:14:16:c2:4f:24:9e:b3:98:
12:2f:94:ee:a4:f5:87:a8:c8:8f:6d:26:d7:fb:55:fb:f5:35:
9c:e2:d2:7a:d3:71:b7:c1:36:c2:fe:30:e6:9a:1b:e5:25:44:
3a:2d:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:16 2025 by rpki-client