Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/JcffJSnmDtm3psuBT0DTOSv59pE.roa
File: JcffJSnmDtm3psuBT0DTOSv59pE.roa (raw, json)
Hash identifier: taTOr+GRiSgUYjIKf6uME8FrCm8zenmHz6CCyj13S/E=
Subject key identifier: 25:C7:DF:25:29:E6:0E:D9:B7:A6:CB:81:4F:40:D3:39:2B:F9:F6:91
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 1483CCD9
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/JcffJSnmDtm3psuBT0DTOSv59pE.roa
Signing time: Fri 07 Jan 2022 11:59:48 +0000
ROA not before: Fri 07 Jan 2022 11:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41606
IP address blocks: 185.115.132.0/22 maxlen: 22
185.115.132.0/24 maxlen: 24
185.115.134.0/24 maxlen: 24
185.115.135.0/24 maxlen: 24
185.115.133.0/24 maxlen: 24
89.251.176.0/24 maxlen: 24
89.251.176.0/20 maxlen: 20
89.251.178.0/24 maxlen: 24
89.251.177.0/24 maxlen: 24
89.251.179.0/24 maxlen: 24
89.251.186.0/24 maxlen: 24
89.251.183.0/24 maxlen: 24
89.251.182.0/24 maxlen: 24
89.251.185.0/24 maxlen: 24
89.251.184.0/24 maxlen: 24
89.251.180.0/24 maxlen: 24
89.251.181.0/24 maxlen: 24
89.251.190.0/24 maxlen: 24
89.251.189.0/24 maxlen: 24
89.251.191.0/24 maxlen: 24
89.251.188.0/24 maxlen: 24
89.251.187.0/24 maxlen: 24
89.251.188.0/22 maxlen: 22
109.104.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344181977 (0x1483ccd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 7 11:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25c7df2529e60ed9b7a6cb814f40d3392bf9f691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:23:ff:ad:7e:ee:7c:be:65:d7:95:6d:71:
2a:66:8a:45:9a:b1:28:12:fa:67:f6:50:f7:72:da:
4b:2f:16:6e:72:30:de:e1:bb:35:46:87:09:af:eb:
76:02:2b:ba:28:cc:19:40:7f:ec:e9:d0:77:ee:17:
84:fd:5d:63:5d:d0:fd:3b:56:8b:1b:65:72:ee:7f:
96:14:27:e8:40:37:aa:e5:88:8c:ff:1c:bc:fa:c9:
77:43:60:cb:cb:36:9b:f4:48:62:4e:73:ad:5a:4b:
17:78:19:b2:15:60:0d:72:fb:63:d7:db:10:90:ab:
35:d1:e9:d1:00:9e:46:6d:b7:7d:37:ce:45:b2:4a:
ee:c3:4c:46:37:01:7d:7d:a6:b5:af:56:43:1a:4a:
7c:58:8f:94:5d:24:8f:85:5b:d5:aa:fb:b7:b9:ff:
cc:3b:51:ed:a1:b5:73:be:8d:df:01:09:6f:c4:5c:
66:73:23:25:bc:85:e7:93:37:36:4b:1b:65:30:97:
b0:6a:90:d7:90:32:9d:5e:d8:96:84:20:b0:7d:72:
c4:b4:39:f1:c9:48:35:24:48:65:81:79:fb:30:ea:
0c:0d:02:e6:be:bf:95:d7:f0:fe:f7:5e:5a:6b:7d:
d5:c5:69:59:68:91:44:f2:44:d5:7a:9b:b0:70:ca:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:DF:25:29:E6:0E:D9:B7:A6:CB:81:4F:40:D3:39:2B:F9:F6:91
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/JcffJSnmDtm3psuBT0DTOSv59pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.176.0/20
109.104.232.0/24
185.115.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:b0:48:b8:8c:77:4c:f0:46:e1:3a:38:21:ad:90:35:f6:74:
e9:3d:4d:c7:7c:4e:6f:fd:da:57:a9:ee:92:6e:e5:da:fd:2b:
35:c2:d9:2c:87:eb:32:ba:4d:87:72:98:a4:8b:b6:e7:5c:95:
d0:81:d1:62:64:1f:df:f2:29:58:61:3f:76:b0:20:de:56:9f:
42:73:e3:90:4f:7b:b3:b5:48:a8:b6:5d:11:f1:25:5b:4d:10:
f4:96:41:fa:86:0a:40:c7:cb:33:0a:ed:da:d4:e1:f2:16:fa:
17:e6:c3:7e:6d:cc:8a:e6:2f:cf:a7:85:79:32:1d:f8:0e:3f:
0f:1e:b2:7c:43:87:f2:41:95:99:3b:95:86:68:8c:46:17:5a:
b0:01:18:db:f2:bb:b0:1b:c3:6a:28:bc:1e:22:10:60:04:37:
a1:84:a3:e1:83:4e:d4:91:ae:38:5e:47:87:e0:7b:fe:3c:c6:
f7:f6:7b:0a:21:b9:99:37:b6:16:2c:42:1b:1a:e9:73:84:2a:
0b:81:c5:02:97:ce:27:e9:e3:b3:03:7b:85:cd:07:6e:75:00:
7d:82:74:d6:aa:3f:34:96:c0:42:49:6d:dc:1f:01:dd:74:63:
ef:53:3f:75:e2:66:4c:1a:b1:9b:26:22:cd:fa:01:eb:be:e6:
c3:0f:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org