Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/jkfskV0ruqwHOcqcTHX1odZ0W-s.roa
File: jkfskV0ruqwHOcqcTHX1odZ0W-s.roa (raw, json)
Hash identifier: 2qmQXMtqqEuvY3BVHwoi+j9NMr5Vg/8rpQwDJDE8FSg=
Subject key identifier: 8E:47:EC:91:5D:2B:BA:AC:07:39:CA:9C:4C:75:F5:A1:D6:74:5B:EB
Certificate issuer: /CN=19f66db40158916a1da36d25b90fb1b4915b8116
Certificate serial: D05148
Authority key identifier: 19:F6:6D:B4:01:58:91:6A:1D:A3:6D:25:B9:0F:B1:B4:91:5B:81:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfZttAFYkWodo20luQ-xtJFbgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/jkfskV0ruqwHOcqcTHX1odZ0W-s.roa
Signing time: Sat 01 Jan 2022 08:58:55 +0000
ROA not before: Sat 01 Jan 2022 08:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 94.154.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13652296 (0xd05148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f66db40158916a1da36d25b90fb1b4915b8116
Validity
Not Before: Jan 1 08:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e47ec915d2bbaac0739ca9c4c75f5a1d6745beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:9a:05:33:b7:a2:03:7f:f3:a6:a9:bb:cf:
c6:ee:70:41:55:c6:a9:a2:fb:9c:96:ab:dc:10:53:
ba:5a:d9:81:34:05:2a:7e:d2:fe:8a:16:bd:72:a2:
69:bb:07:86:1e:d1:4b:9f:a8:3e:7d:36:bf:ed:f2:
4a:9a:45:30:cd:db:30:68:6c:04:c2:da:b3:d4:df:
3f:04:f3:2b:c9:aa:e6:9c:3f:8f:bf:f6:b0:4a:6e:
a1:31:24:f4:70:76:e3:14:f5:7d:37:c3:9f:77:fc:
da:75:92:76:f3:54:01:bc:be:7b:a3:8c:39:6d:f2:
d8:4a:e7:f3:23:10:4c:e2:ae:1c:c0:e3:e9:4d:09:
e4:11:e6:66:27:53:23:b8:69:a0:b2:d8:c8:81:4b:
cf:43:b0:99:2c:46:dd:39:a3:cd:14:48:a4:e2:67:
38:80:06:7d:2c:16:e5:0f:02:2c:86:73:d2:5a:09:
13:03:a9:64:86:de:c7:d8:f9:f6:5c:21:3a:24:99:
10:54:ea:47:5f:1d:32:63:e7:f4:db:b8:92:ad:4f:
5a:69:54:c5:62:55:b7:de:f1:45:1e:a3:6c:a7:ed:
08:d5:22:ed:f8:2c:f6:ac:3b:ce:61:21:cc:de:68:
e4:bd:06:15:c7:3a:91:90:bb:ac:35:3f:ee:12:31:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:EC:91:5D:2B:BA:AC:07:39:CA:9C:4C:75:F5:A1:D6:74:5B:EB
X509v3 Authority Key Identifier:
keyid:19:F6:6D:B4:01:58:91:6A:1D:A3:6D:25:B9:0F:B1:B4:91:5B:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfZttAFYkWodo20luQ-xtJFbgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/jkfskV0ruqwHOcqcTHX1odZ0W-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/075961-a2e8-4ae0-acb9-79b56f1b5b11/1/GfZttAFYkWodo20luQ-xtJFbgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.124.0/24
Signature Algorithm: sha256WithRSAEncryption
26:97:6d:0d:c7:c7:51:36:9b:8e:ae:f9:f0:c0:1b:7f:de:b0:
84:e1:96:30:cb:6a:f0:19:63:e9:20:88:73:6e:3b:2f:6e:45:
79:0d:5f:c9:79:57:8d:e8:58:2d:b3:a0:f9:87:bb:e9:b5:68:
76:f3:74:d1:c0:50:fa:af:0e:ff:81:b5:ac:f1:cd:f7:73:e1:
9c:26:98:0a:58:b4:cd:b5:fe:f8:ab:12:2e:c4:25:cd:63:b7:
5f:88:2d:52:3c:56:a7:d5:2f:45:45:e4:f0:67:9c:31:a2:5d:
1e:9b:2b:bf:87:2e:51:55:77:de:4c:6d:76:02:98:5f:d1:97:
d6:da:7d:1a:ca:32:9a:c5:37:89:17:66:ff:64:15:9f:e9:64:
85:45:c1:a1:34:ff:f9:7f:25:04:4a:9e:a6:f1:06:fd:c7:04:
e5:bc:d5:4a:e9:5e:6a:e7:87:b4:92:c1:7d:6f:22:c2:d2:c1:
7e:03:1c:20:50:5c:6c:d9:d2:66:19:f3:1a:7f:02:9b:d3:d4:
6f:b7:6b:d0:36:42:43:7c:77:72:e5:76:dc:02:ce:f6:39:58:
63:76:d6:cb:80:f8:53:2e:fa:3d:10:4c:c1:1a:f2:4d:5f:e4:
4e:b3:ce:1e:9c:d1:f1:24:1c:8d:e6:a2:60:fb:98:04:c0:b3:
ab:1f:76:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org