Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/jq-_fliwNlymbiL5HoVP36pG69M.roa
File: jq-_fliwNlymbiL5HoVP36pG69M.roa (raw, json)
Hash identifier: UAfoRBzkuTcl420HxWeZ4f91+PM8uheHoKfGZNkFYNA=
Subject key identifier: 8E:AF:BF:7E:58:B0:36:5C:A6:6E:22:F9:1E:85:4F:DF:AA:46:EB:D3
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 07133CBB
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/jq-_fliwNlymbiL5HoVP36pG69M.roa
Signing time: Mon 10 Jan 2022 13:32:33 +0000
ROA not before: Mon 10 Jan 2022 13:32:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49752
IP address blocks: 2001:678:c6c::/48 maxlen: 48
2001:678:c44::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118701243 (0x7133cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Jan 10 13:32:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eafbf7e58b0365ca66e22f91e854fdfaa46ebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:4d:24:db:b5:84:04:15:d5:d0:b3:5e:c7:
9e:2d:8f:f8:fa:e8:d6:63:29:1c:f8:81:ca:2b:61:
36:6a:90:e8:d5:50:9f:3b:85:84:8a:df:10:54:d0:
98:6a:a8:96:9c:68:fe:72:f0:46:70:3e:56:2f:64:
d7:1c:87:4f:4c:87:2b:fc:6f:96:8f:14:0d:2f:06:
1a:f0:e1:db:4d:ea:42:8f:b1:ab:82:d2:a4:8b:d5:
8b:45:80:f3:87:da:a2:44:b5:a6:10:8a:67:a3:ca:
08:b9:20:ee:02:d6:fa:11:2d:2f:f1:f0:14:cb:65:
40:d0:1d:e7:4a:e6:a0:99:6e:df:f1:e4:98:fc:d5:
5f:55:40:3b:bb:a1:77:b7:f4:70:c2:fe:ef:76:5b:
91:49:34:6e:5f:67:3a:30:bd:7b:6f:8c:e0:34:1b:
05:df:88:a8:1a:db:a1:94:3c:4d:0f:61:f5:25:da:
26:76:c0:0a:92:3a:b2:57:73:70:cc:df:46:9e:06:
80:78:29:b9:3a:ae:04:b4:1b:bd:a7:2e:85:4f:51:
30:b4:e7:a6:a5:67:df:76:0a:12:ef:df:7a:54:bd:
7b:10:73:fc:4e:f7:db:3f:f4:d2:ef:86:a2:3a:7c:
8c:7f:1e:8d:87:ed:d2:fc:be:f7:08:7d:fc:d0:0f:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:BF:7E:58:B0:36:5C:A6:6E:22:F9:1E:85:4F:DF:AA:46:EB:D3
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/jq-_fliwNlymbiL5HoVP36pG69M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c44::/48
2001:678:c6c::/48
Signature Algorithm: sha256WithRSAEncryption
03:ae:5e:7b:7b:d2:9b:5d:85:eb:91:45:4d:0e:53:84:78:80:
a6:8c:eb:a1:d4:ce:ad:1c:f6:6c:31:18:44:16:70:ef:78:8e:
69:98:bd:67:d1:e1:2b:b9:2a:a3:28:f8:f2:84:58:c6:22:10:
55:b2:af:91:8a:4a:d8:93:e9:fb:06:7d:30:a2:da:39:c2:a3:
64:8c:ae:c8:7f:84:0b:66:62:90:e5:5a:78:59:ff:18:6d:33:
c0:f1:19:f5:d0:7a:0f:bc:a9:07:56:48:d5:cf:f9:67:ad:3c:
2b:73:68:56:eb:25:42:6a:d3:b0:b6:d4:ca:fa:28:01:64:7e:
5c:a4:c4:b3:38:b5:69:13:f7:48:27:bc:b7:cd:53:70:ec:1c:
1b:c3:1d:8d:8f:26:23:75:6f:80:39:27:43:7a:5a:b2:f7:74:
de:02:0d:3c:c3:2c:0d:d2:51:4c:93:65:14:a2:a2:be:5e:99:
6b:f7:6f:35:e1:ef:de:06:c7:7a:9f:94:2a:cf:ff:a1:85:79:
32:3a:08:05:21:c3:4b:06:68:7d:0c:ef:d2:55:e3:c2:46:03:
9b:10:76:76:e8:dd:5e:e1:f7:69:64:f1:b2:6c:68:6c:08:8e:
d0:3c:2b:a6:09:01:f2:2e:08:29:3e:61:c7:3e:d5:73:f0:c7:
99:63:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:18 2024 by rpki-client on console-fra.rpki-client.org