Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/JFDOzErMfluZvgnDhItkbLQ4xj4.roa
File: JFDOzErMfluZvgnDhItkbLQ4xj4.roa (raw, json)
Hash identifier: nLKB8KoYEez3NJSmgODgwjQVw2q2CIb/altzvx+d8PA=
Subject key identifier: 24:50:CE:CC:4A:CC:7E:5B:99:BE:09:C3:84:8B:64:6C:B4:38:C6:3E
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0183889DD6B8D9E33EDDB19995FC8F730E69
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/JFDOzErMfluZvgnDhItkbLQ4xj4.roa
Signing time: Thu 29 Sep 2022 09:39:48 +0000
ROA not before: Thu 29 Sep 2022 09:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43345
IP address blocks: 62.221.250.0/24 maxlen: 24
185.94.228.0/24 maxlen: 24
2a0b:7280:0:4::/63 maxlen: 63
2a05:1500:500::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:9d:d6:b8:d9:e3:3e:dd:b1:99:95:fc:8f:73:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 29 09:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2450cecc4acc7e5b99be09c3848b646cb438c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:bc:9f:b3:b5:4a:2d:d5:1e:80:15:e7:b7:
04:0b:82:35:c4:c4:ce:51:ad:3b:41:86:dd:bd:83:
e0:11:ca:61:ab:07:bb:d2:a0:70:d2:50:43:27:40:
7d:8d:38:a3:d2:f4:51:4f:bc:dd:ac:f0:41:ba:73:
68:3a:65:63:c1:7a:05:07:69:93:f7:04:62:fb:a4:
80:5a:2a:ba:d5:a3:86:2b:cf:d1:90:d2:c8:1b:60:
38:46:e7:ba:9d:1f:00:df:a4:cc:03:62:a3:cd:72:
1b:10:a4:38:2b:29:bf:13:c8:07:35:22:ef:65:9f:
dd:ef:3d:1d:51:1e:f6:24:10:5c:7d:31:89:8e:98:
a2:94:02:78:50:2f:9a:ed:a1:1c:09:08:b6:5c:d3:
97:01:01:c3:d6:05:86:e2:95:cc:ea:77:fa:2b:20:
f0:7b:11:54:f3:40:9a:6c:f2:38:89:56:8a:de:0f:
96:cb:f6:80:9f:83:15:a8:12:ce:84:ae:89:dd:64:
2e:cf:5c:f9:40:10:c7:69:b5:7d:3c:82:7a:3d:8a:
26:9c:55:ac:0d:86:6d:6d:a8:5b:d3:95:75:9d:c8:
98:e3:2b:83:17:e6:22:7d:20:73:dc:64:08:c9:85:
73:62:f8:23:f5:dd:f9:96:fa:56:ea:c8:d5:03:06:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:CE:CC:4A:CC:7E:5B:99:BE:09:C3:84:8B:64:6C:B4:38:C6:3E
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/JFDOzErMfluZvgnDhItkbLQ4xj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.221.250.0/24
185.94.228.0/24
IPv6:
2a05:1500:500::/40
2a0b:7280:0:4::/63
Signature Algorithm: sha256WithRSAEncryption
21:53:fe:39:dd:c2:b4:ae:f1:87:2a:d1:50:df:73:c6:ba:e6:
b7:f8:5e:c9:36:b9:de:be:44:4e:cf:b8:b3:9b:e8:3f:af:7b:
85:28:a3:c6:c3:73:56:af:97:7f:f1:28:3f:57:84:1a:19:b6:
03:8c:2e:74:93:12:e8:b4:45:38:fc:ae:af:40:bc:57:9f:f1:
9f:c3:98:a7:fa:90:d3:38:bf:c1:8b:6d:b0:b5:d9:2b:7b:15:
55:0d:fe:dd:71:46:94:46:b7:be:f9:37:7b:8d:e6:14:72:51:
49:94:b1:d1:45:19:19:f7:34:27:5a:9a:c0:84:68:0b:20:c1:
8f:35:ea:49:91:6f:60:5e:03:80:40:26:ca:10:04:12:c6:64:
f1:e1:4a:29:e1:17:1b:6a:3b:51:35:23:fa:f3:c5:22:dc:4c:
c8:58:a9:94:85:b1:d5:ec:70:c9:2a:03:3a:06:b3:82:7e:09:
b9:69:54:7f:fc:8e:b4:cb:68:54:49:5d:57:a5:e1:77:bd:45:
ee:71:0a:86:93:31:06:5c:98:88:7f:7a:bd:bc:12:d1:b7:62:
ed:10:d2:ca:ad:1e:51:30:09:85:76:26:d9:95:e4:cf:21:cb:
65:77:6d:d8:d1:b2:d9:81:e7:3c:e0:03:d3:56:48:fc:16:e2:
7f:de:53:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org