Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/JPbocou3aB_UxhSU15N90C4CXrQ.roa
File: JPbocou3aB_UxhSU15N90C4CXrQ.roa (raw, json)
Hash identifier: E49b5GhlDR8SadXGKGn1TFbtdZvC482LoC/Zbm6tpPs=
Subject key identifier: 24:F6:E8:72:8B:B7:68:1F:D4:C6:14:94:D7:93:7D:D0:2E:02:5E:B4
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018B70E9DB8CD67E4FE6834B88E6A59C1562
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/JPbocou3aB_UxhSU15N90C4CXrQ.roa
Signing time: Fri 27 Oct 2023 11:34:16 +0000
ROA not before: Fri 27 Oct 2023 11:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56435
IP address blocks: 212.86.103.0/24 maxlen: 24
212.86.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:e9:db:8c:d6:7e:4f:e6:83:4b:88:e6:a5:9c:15:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 27 11:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f6e8728bb7681fd4c61494d7937dd02e025eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:40:f0:fd:7e:74:70:5b:6b:b3:15:e9:32:
79:a8:78:44:50:cf:08:30:47:ac:41:8f:cf:17:86:
f3:23:74:03:53:79:30:14:f2:7f:37:08:9a:72:5b:
ef:83:60:2f:c5:f5:4a:71:59:73:73:68:a3:7a:06:
33:72:68:ca:85:62:df:cb:99:9f:4e:2a:0e:45:ca:
84:95:9d:f0:d6:a1:4c:c5:db:42:4f:96:38:c7:3a:
79:7c:c5:01:55:7a:03:e2:79:11:5f:38:b1:92:e5:
26:86:10:2e:44:dc:86:61:f5:2d:26:5b:bb:64:e5:
ac:08:22:09:17:d1:83:1d:c8:c9:8b:6f:2a:a8:43:
da:ba:23:2a:fe:0d:bd:1e:9f:55:ac:18:e1:93:04:
7d:9a:c3:97:7e:85:a8:7a:ce:b0:12:76:2e:73:d2:
24:bb:2e:fe:0e:c5:02:8c:9f:7d:83:29:4d:13:fe:
d1:d7:80:47:1c:bb:2c:b7:aa:2d:00:1e:f1:c3:ae:
27:72:46:eb:6d:91:a7:98:63:8c:83:d2:33:0d:6c:
e5:2e:de:be:f6:89:d0:c1:c1:00:46:c5:49:45:fa:
b4:a8:cb:62:bc:00:6c:e9:7e:d8:17:26:89:ff:0e:
4b:9e:50:b1:35:b1:a4:fe:c4:f9:36:fb:6b:52:da:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:E8:72:8B:B7:68:1F:D4:C6:14:94:D7:93:7D:D0:2E:02:5E:B4
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/JPbocou3aB_UxhSU15N90C4CXrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.103.0/24
212.86.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:55:32:52:44:10:9f:7d:6d:48:2e:f5:54:cc:e6:ef:f6:c9:
5b:5b:63:6a:ee:55:e1:e8:b1:25:0d:83:d9:8a:b2:39:8b:e7:
2d:58:ef:12:17:45:11:fa:19:ba:f6:4d:ee:94:67:bc:e7:0c:
08:f0:c2:bf:25:6d:f3:d8:0b:a8:10:05:05:48:02:51:a0:5c:
d0:b0:35:c9:da:c2:07:ff:7d:6f:9f:c2:02:9a:87:b0:09:70:
8b:70:44:33:53:2e:bd:d4:c0:11:40:51:82:2d:5f:04:87:ab:
41:6e:d0:64:41:fd:fd:99:77:3f:10:44:12:1c:d3:9e:41:46:
77:46:35:50:ea:6c:39:a6:6e:52:fa:7b:d3:24:b9:32:04:81:
90:09:9c:e8:87:88:02:0c:40:0d:48:06:cd:00:d5:5d:eb:70:
24:52:31:02:bf:cc:1e:4b:d1:97:0a:2c:63:24:ca:8e:aa:a4:
19:8e:42:82:20:94:70:e4:7d:83:e9:cf:5b:bb:d6:c2:81:8d:
3d:15:19:67:42:81:f0:35:39:9b:de:92:93:cc:b1:40:c2:67:
32:f9:f8:a0:9c:0e:fc:66:46:b0:89:d0:05:07:d5:78:8d:80:
6c:9f:08:f0:32:b2:46:49:b8:51:8f:cb:35:1d:36:f7:cc:36:
7e:e4:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:32 2025 by rpki-client