Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/jbrmg_61UU-bVTRKWb8DIlV0UE0.roa
File: jbrmg_61UU-bVTRKWb8DIlV0UE0.roa (raw, json)
Hash identifier: 2POfqVw+8D7f0uo97n0Y7VsM3Zonh8MxDvEFQFRMb+s=
Subject key identifier: 8D:BA:E6:83:FE:B5:51:4F:9B:55:34:4A:59:BF:03:22:55:74:50:4D
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 09ABCEDD
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/jbrmg_61UU-bVTRKWb8DIlV0UE0.roa
Signing time: Sat 01 Jan 2022 13:58:31 +0000
ROA not before: Sat 01 Jan 2022 13:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31275
IP address blocks: 83.220.64.0/19 maxlen: 19
2a04:e380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162254557 (0x9abcedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jan 1 13:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dbae683feb5514f9b55344a59bf03225574504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:c2:c7:46:81:c5:80:a0:cc:16:ff:6b:f6:
3a:22:f3:ce:6a:d9:0f:16:6c:3e:64:8b:99:1a:76:
44:f4:bc:57:90:e2:bf:91:d8:20:77:a9:1c:16:d5:
d1:97:99:56:bc:32:17:f5:0e:7c:a2:67:71:a5:41:
07:4c:13:d3:fd:e8:cd:2f:7a:b1:b8:ab:6b:3f:5d:
4c:7e:15:fe:f1:04:d8:f6:e8:07:43:90:e7:f7:10:
08:52:9e:50:35:55:aa:c6:74:b9:c6:5c:2f:e8:65:
fe:5b:a2:96:36:5c:7b:90:54:bb:db:34:d5:cd:a5:
c9:27:51:78:5c:ab:a9:c7:3e:c3:ef:69:3c:19:4a:
22:b0:4d:bb:47:67:15:2e:15:8a:3f:f6:4c:cc:40:
a2:ec:0b:6f:7a:b5:97:61:62:ab:86:15:91:58:1a:
81:43:d1:d4:b0:75:8d:fc:fb:c7:22:73:ea:14:e7:
26:fc:5f:35:f9:23:5e:0b:ae:44:57:0f:c0:46:2d:
8e:07:a9:60:c5:dc:93:de:71:34:88:b8:da:62:f2:
67:5d:a9:10:b4:c7:d2:46:f4:ef:fd:f5:f3:1f:14:
38:bf:79:05:c5:23:e2:7a:49:05:61:30:05:03:b9:
4b:1a:f6:c2:91:10:e1:7a:ce:73:52:3f:2d:51:8a:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:E6:83:FE:B5:51:4F:9B:55:34:4A:59:BF:03:22:55:74:50:4D
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/jbrmg_61UU-bVTRKWb8DIlV0UE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.64.0/19
IPv6:
2a04:e380::/29
Signature Algorithm: sha256WithRSAEncryption
23:ca:9f:62:ed:8a:af:23:0e:55:52:10:be:16:bb:43:3a:6f:
13:55:12:07:97:3b:83:dc:4d:51:fe:64:b1:b5:a2:0f:0c:bf:
45:0d:55:44:ea:89:de:03:d3:c5:89:2d:ce:ab:47:02:e1:c7:
b1:a3:6d:bc:bd:da:01:59:6e:5c:c9:3e:d0:ce:14:4e:17:15:
c9:e0:2b:80:be:f4:72:23:45:9a:66:fa:c3:63:fa:1c:cd:d8:
a2:b2:fe:33:67:d0:b9:7d:e0:7f:37:fa:3c:2a:c2:a9:ad:dc:
e6:bb:f8:17:ed:1c:62:15:14:e2:4f:68:e1:af:08:32:7b:d8:
0d:7c:e1:32:9c:2b:e1:3e:31:cf:3e:95:19:24:f9:98:2c:f0:
0e:ac:00:37:b9:72:64:48:35:54:43:50:fe:fb:58:fc:61:f9:
b3:e7:33:f4:95:22:6e:f2:5f:cc:26:2e:7d:93:19:b9:4c:35:
13:dc:7e:b5:56:6c:e8:ac:49:b8:7f:02:8b:89:ec:6b:f0:31:
36:cb:22:a4:e5:e9:ca:7e:fb:72:63:2f:c1:4f:7d:97:0e:1a:
62:ad:d1:04:d8:6f:77:e6:a0:78:62:a2:f1:d5:3b:a6:31:99:
e2:3d:76:c4:22:af:e1:b7:e6:c1:b2:8a:c0:7f:59:73:a2:f6:
8c:f1:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:55 2025 by rpki-client