Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/JXA59t5WHHySrt48swK9E1WtCbw.roa
File: JXA59t5WHHySrt48swK9E1WtCbw.roa (raw, json)
Hash identifier: lVKJqDVW2m6MkV6JdQDINaeUcrhbr3VnSJ7PNx11bgo=
Subject key identifier: 25:70:39:F6:DE:56:1C:7C:92:AE:DE:3C:B3:02:BD:13:55:AD:09:BC
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 11B8F815
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/JXA59t5WHHySrt48swK9E1WtCbw.roa
Signing time: Sat 01 Jan 2022 10:56:08 +0000
ROA not before: Sat 01 Jan 2022 10:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60132
IP address blocks: 185.56.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297334805 (0x11b8f815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jan 1 10:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257039f6de561c7c92aede3cb302bd1355ad09bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:9e:c2:90:61:13:fc:73:73:f6:dd:ab:2d:
04:3f:46:76:2f:fa:da:68:7d:21:fc:b2:bf:d4:01:
6a:31:3b:35:24:c5:54:3e:18:22:5a:b0:87:79:ec:
5b:b8:b6:96:0b:9f:8f:27:88:96:91:2f:a2:c7:99:
48:42:7c:93:d0:d0:90:25:0c:94:4d:da:00:00:20:
3d:c8:53:a1:7a:67:7b:aa:ba:71:1d:3b:bd:b9:af:
c5:fe:61:ff:7d:3e:78:a4:01:15:6c:a9:57:d6:85:
63:06:80:1f:71:d6:a8:d8:fa:ac:9f:d8:14:08:df:
ec:5e:68:16:a9:ba:fb:7f:c6:c6:ec:40:23:89:52:
a5:f3:88:f2:9a:05:f2:cd:c6:66:ef:ef:ac:d4:d4:
2a:9a:a8:a2:80:b5:c6:a4:d6:1f:34:5a:d4:22:71:
53:60:79:47:43:da:60:32:7e:02:c2:cc:ac:d7:42:
a3:cb:30:ad:f6:17:a3:33:53:2a:31:c8:a6:4a:69:
d9:4d:bf:fe:ee:7b:04:ff:d6:75:1f:a4:d9:de:32:
8d:8f:b7:6e:68:83:f4:c9:2a:a6:b1:98:75:11:32:
12:80:00:9a:73:39:5f:06:83:ba:9d:4a:f0:f2:1b:
0d:fa:d5:4b:e0:18:cd:6c:bb:5d:85:45:16:9b:c8:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:39:F6:DE:56:1C:7C:92:AE:DE:3C:B3:02:BD:13:55:AD:09:BC
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/JXA59t5WHHySrt48swK9E1WtCbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.153.0/24
Signature Algorithm: sha256WithRSAEncryption
83:91:bf:1e:05:ed:cd:c5:a1:e3:c1:49:3a:bc:13:db:82:7e:
a6:b6:59:8a:77:48:6d:f8:05:03:e8:66:2a:9d:7f:11:f3:48:
9a:5f:3d:38:43:5d:d1:fd:45:94:a7:a6:e8:7c:ed:df:ca:6c:
1b:00:ef:35:dd:29:f1:d7:a7:cd:4c:0b:6f:b1:f7:56:b2:3e:
2b:10:60:82:e0:fc:5d:7c:3a:57:91:55:ea:c6:9c:80:7f:7d:
d6:50:f5:c8:64:53:d3:e1:8d:27:97:03:73:b3:16:fe:37:3c:
68:d9:ec:d9:00:ed:56:47:11:ac:86:9d:5c:87:03:e1:0e:7f:
f9:30:d8:41:89:18:a5:ba:0a:b2:99:04:9c:f6:7f:e8:26:04:
71:65:a1:5b:92:1d:82:92:c7:5e:84:4b:55:43:ec:fa:2f:df:
9f:fd:36:ac:fd:60:c9:fa:2d:b5:aa:b1:d6:c3:5c:3b:b9:53:
19:2c:4c:0d:51:d2:66:1f:5b:8f:ce:65:7c:cb:2a:b9:c8:6b:
53:b1:32:c9:f3:70:e0:4e:35:3f:d2:06:ae:03:b8:c1:98:6f:
a6:3c:d1:4c:d0:c2:73:ed:f7:f7:5e:40:f7:e4:d0:58:71:a2:
9e:89:20:7d:75:5d:53:2d:9e:91:68:6c:fd:ca:c9:80:f1:bc:
4b:16:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:23 2023 by rpki-client on console-ams.rpki-client.org