Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/JNSL_Q-pgbbzqvKJLgtViNZVEkA.roa
File: JNSL_Q-pgbbzqvKJLgtViNZVEkA.roa (raw, json)
Hash identifier: fkxvBDKvsur6CioT1FDOI3i9Wz7X/pVtt3mzfRWR2rw=
Subject key identifier: 24:D4:8B:FD:0F:A9:81:B6:F3:AA:F2:89:2E:0B:55:88:D6:55:12:40
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 0917C162
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/JNSL_Q-pgbbzqvKJLgtViNZVEkA.roa
Signing time: Sat 01 Jan 2022 01:59:01 +0000
ROA not before: Sat 01 Jan 2022 01:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201343
IP address blocks: 185.67.208.0/23 maxlen: 23
185.102.208.0/23 maxlen: 23
185.102.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152551778 (0x917c162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Jan 1 01:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24d48bfd0fa981b6f3aaf2892e0b5588d6551240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:29:bf:26:83:92:a9:ac:76:f9:1d:3e:de:
10:53:5b:f3:38:19:e4:f5:4c:56:61:db:a5:ac:21:
a6:bf:cd:7f:83:ff:77:fa:0f:86:a5:d9:be:34:7d:
12:1a:ac:c0:f3:00:4d:ed:ff:b8:79:bc:27:e9:17:
50:46:d4:87:f6:e4:d3:d6:31:de:32:5d:dd:25:be:
42:33:29:f9:71:80:c5:cc:f5:4f:90:85:d2:36:5d:
ed:2f:df:e3:53:4b:93:b7:e2:fc:46:b0:b4:7a:e3:
f2:13:78:06:4d:d3:5b:32:ef:ad:44:b1:9e:68:fe:
36:5a:af:b8:06:f9:47:0b:00:d4:e3:88:e9:a2:81:
fe:c9:d3:6e:60:61:cc:31:cb:97:54:07:37:ac:dc:
db:7d:6d:0e:17:da:29:bd:04:77:ff:aa:ea:ef:61:
7a:ae:4d:2c:27:84:13:9b:2b:cc:c9:50:e4:cc:ab:
0e:4b:da:cf:d4:33:27:39:e3:4f:b6:78:92:f0:68:
45:f1:ec:9a:e3:0e:52:67:d7:60:8d:59:5d:15:e7:
1a:76:93:ca:2d:db:d3:89:e2:71:47:4c:c1:fa:e7:
d8:71:68:38:9f:fd:a9:1d:e0:cf:0e:cf:97:d0:a1:
5d:b9:c3:61:c5:34:0d:fe:54:36:e2:6e:76:0a:3f:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:8B:FD:0F:A9:81:B6:F3:AA:F2:89:2E:0B:55:88:D6:55:12:40
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/JNSL_Q-pgbbzqvKJLgtViNZVEkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.208.0/23
185.102.208.0/23
185.102.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d8:8b:80:cf:02:08:30:9f:cb:8e:61:c4:26:c8:13:c3:5c:
d0:a2:46:5c:b8:11:89:8c:d9:ad:48:17:a7:b6:a3:4f:1a:93:
3f:35:1f:2f:39:8d:71:10:37:22:35:2b:23:fc:fe:13:67:1b:
e6:e8:14:6f:fa:54:65:b0:5d:0c:a9:e6:f4:2f:2d:7c:ec:da:
99:2d:d1:01:e7:e5:d9:d9:a6:4f:63:56:2d:90:48:67:32:a1:
0b:e1:32:e3:47:9e:c9:2b:f5:aa:60:ad:78:cc:f4:dd:0c:12:
d6:0d:3c:c8:81:4b:75:2d:db:09:3e:20:1f:ba:b0:f6:d0:85:
1c:8f:e4:f1:50:ff:80:c8:4f:bd:0b:dc:86:9d:20:9b:55:17:
40:93:46:a8:df:a5:a5:e7:02:99:aa:ce:6d:70:d0:7a:11:fc:
64:b6:d4:26:35:54:63:8b:37:61:6b:10:5e:4c:3f:2f:f9:bb:
52:fd:a7:fd:db:54:25:6c:98:f9:bf:a0:07:f7:d8:18:4e:90:
44:eb:10:80:af:04:f4:fb:bb:1f:c6:1d:14:f5:e5:10:ab:e8:
37:db:aa:6f:91:a6:bd:dc:df:02:87:f8:68:02:47:99:a1:ef:
f6:ae:c9:56:b7:37:41:ad:87:6e:0a:7d:95:4d:29:28:bb:dc:
95:81:e4:03
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECRfBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTE2OGQwNjJhMGMyZTYxNjZhODI2MmM0ZDcyOThkNzZkZWRkMDRmMB4XDTIyMDEw
MTAxNTkwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjRkNDhiZmQwZmE5
ODFiNmYzYWFmMjg5MmUwYjU1ODhkNjU1MTI0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXoKb8mg5KprHb5HT7eEFNb8zgZ5PVMVmHbpawhpr/Nf4P/
d/oPhqXZvjR9EhqswPMATe3/uHm8J+kXUEbUh/bk09Yx3jJd3SW+QjMp+XGAxcz1
T5CF0jZd7S/f41NLk7fi/EawtHrj8hN4Bk3TWzLvrUSxnmj+NlqvuAb5RwsA1OOI
6aKB/snTbmBhzDHLl1QHN6zc231tDhfaKb0Ed/+q6u9heq5NLCeEE5srzMlQ5Myr
Dkvaz9QzJznjT7Z4kvBoRfHsmuMOUmfXYI1ZXRXnGnaTyi3b04nicUdMwfrn2HFo
OJ/9qR3gzw7Pl9ChXbnDYcU0Df5UNuJudgo/y6sCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQk1Iv9D6mBtvOq8okuC1WI1lUSQDAfBgNVHSMEGDAWgBSxFo0GKgwuYWao
JixNcpjXbe3QTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NSYU5CaW9NTG1GbXFDWXNUWEtZMTIzdDBFOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNjc0YWJiLTIyMWEtNDQ1NC1hY2ZjLTk2NWEzNDE4MDEzNi8x
L0pOU0xfUS1wZ2JienF2S0pMZ3RWaU5aVkVrQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
Njc0YWJiLTIyMWEtNDQ1NC1hY2ZjLTk2NWEzNDE4MDEzNi8xL3NSYU5CaW9NTG1G
bXFDWXNUWEtZMTIzdDBFOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAblD0AMEAblm0AMEALlm0zANBgkq
hkiG9w0BAQsFAAOCAQEAjNiLgM8CCDCfy45hxCbIE8Nc0KJGXLgRiYzZrUgXp7aj
TxqTPzUfLzmNcRA3IjUrI/z+E2cb5ugUb/pUZbBdDKnm9C8tfOzamS3RAefl2dmm
T2NWLZBIZzKhC+Ey40eeySv1qmCteMz03QwS1g08yIFLdS3bCT4gH7qw9tCFHI/k
8VD/gMhPvQvchp0gm1UXQJNGqN+lpecCmarObXDQehH8ZLbUJjVUY4s3YWsQXkw/
L/m7Uv2n/dtUJWyY+b+gB/fYGE6QROsQgK8E9Pu7H8YdFPXlEKvoN9uqb5Gmvdzf
Aof4aAJHmaHv9q7JVrc3Qa2Hbgp9lU0pKLvclYHkAw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:07 2025 by rpki-client