Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/jUyIc7ChYD3Ltn8uKDXgrw3nnBc.roa
File: jUyIc7ChYD3Ltn8uKDXgrw3nnBc.roa (raw, json)
Hash identifier: 2r9IACvAEmi7SDYB6km7yaO61srX+CV2KMxUkIqiQuI=
Subject key identifier: 8D:4C:88:73:B0:A1:60:3D:CB:B6:7F:2E:28:35:E0:AF:0D:E7:9C:17
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 02A361AA
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/jUyIc7ChYD3Ltn8uKDXgrw3nnBc.roa
Signing time: Sat 01 Jan 2022 16:10:36 +0000
ROA not before: Sat 01 Jan 2022 16:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15716
IP address blocks: 91.234.189.0/24 maxlen: 24
95.128.32.0/21 maxlen: 21
2001:618::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44261802 (0x2a361aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Jan 1 16:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d4c8873b0a1603dcbb67f2e2835e0af0de79c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:77:01:d1:e1:ef:2e:ca:60:ca:f7:fa:b4:
3c:a6:0a:30:54:f7:6e:f5:3c:92:51:8e:77:ac:d1:
dd:1e:ab:24:57:47:43:7d:aa:14:d6:eb:ef:8a:70:
b9:fa:3a:2a:72:5e:78:e0:0e:a3:86:59:20:98:da:
4d:90:c7:77:ec:d4:72:8d:16:50:64:9a:40:c9:e6:
7e:19:73:b2:35:d0:a6:78:76:72:98:e7:13:a3:c3:
8a:98:16:39:ce:c4:06:5b:72:fa:9c:97:ba:c9:1d:
1d:c5:c8:69:73:e0:7b:99:01:a2:7b:a6:73:ea:b0:
1e:a0:e0:42:02:b4:8c:49:72:b5:ac:90:01:6c:00:
0c:68:c5:72:bf:89:50:46:d7:b6:df:41:29:cf:58:
81:1c:c6:11:a5:3c:dc:73:de:b8:9a:c3:95:80:36:
bc:5b:33:df:69:7d:79:3f:be:70:0c:ed:95:2b:8b:
0a:c1:b2:1a:19:30:02:cd:39:26:3e:d2:44:6e:68:
25:6b:4e:00:dd:af:ad:8c:db:20:fd:15:b2:5c:4b:
23:44:07:e3:b3:4f:41:4c:97:82:41:71:db:9f:25:
84:35:d1:5b:90:cb:23:51:d2:a8:15:5f:4c:9b:60:
6e:9f:c9:77:5d:07:10:42:2a:fd:b2:31:17:f6:84:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:88:73:B0:A1:60:3D:CB:B6:7F:2E:28:35:E0:AF:0D:E7:9C:17
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/jUyIc7ChYD3Ltn8uKDXgrw3nnBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.189.0/24
95.128.32.0/21
IPv6:
2001:618::/32
Signature Algorithm: sha256WithRSAEncryption
af:dd:f7:7c:0d:fd:49:9a:00:44:b4:d5:b3:52:fa:78:00:ed:
0a:3c:f3:4f:46:ba:33:c6:dd:dc:0f:b6:f9:73:41:08:88:fc:
af:82:ba:c6:33:02:ac:30:fc:19:ad:50:4f:77:d6:3b:83:48:
fe:d3:1c:a8:6e:68:a9:19:2f:3d:ef:c1:31:c7:3c:a2:b4:41:
4e:83:f1:65:46:37:00:af:bc:08:8d:50:06:84:34:d4:6a:d0:
65:33:51:f1:ac:58:d2:cf:78:80:6b:15:15:96:e2:ec:54:56:
58:d5:d6:44:b1:72:a7:60:44:74:81:e9:c3:c5:ce:37:cf:de:
94:a7:db:89:bb:b5:ad:6c:1f:29:8e:c2:73:b3:ba:0b:61:08:
80:1d:c0:b5:52:c9:8c:cc:2c:70:df:1a:7d:c8:f2:2e:9b:eb:
77:09:69:79:c1:d4:b1:fc:16:c9:0d:e1:a7:00:3d:d8:bf:88:
17:09:50:80:f2:ee:2d:e8:6e:b6:45:40:44:a8:ff:ee:2c:7a:
a2:61:3d:07:8b:04:e4:10:fe:16:7b:bc:75:28:df:c7:5b:30:
53:03:bb:c0:18:d1:ef:ef:6e:3a:21:3b:cb:ff:d7:04:19:a9:
58:26:e7:93:07:33:39:68:03:b8:be:69:e9:a4:23:f3:d2:ee:
b1:0d:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:04 2024 by rpki-client on console-fra.rpki-client.org