Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JMCmPi56bhznbfK4bGFcso30zeg.roa
File: JMCmPi56bhznbfK4bGFcso30zeg.roa (raw, json)
Hash identifier: P+7LxXINJJk1h5dTcxw81zpEzDDEvv7+hSJji3Gz4Yw=
Subject key identifier: 24:C0:A6:3E:2E:7A:6E:1C:E7:6D:F2:B8:6C:61:5C:B2:8D:F4:CD:E8
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06CDDB60
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JMCmPi56bhznbfK4bGFcso30zeg.roa
Signing time: Sun 03 Apr 2022 21:23:49 +0000
ROA not before: Sun 03 Apr 2022 21:23:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 94.137.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114154336 (0x6cddb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 3 21:23:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24c0a63e2e7a6e1ce76df2b86c615cb28df4cde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:5e:e7:2a:11:26:a4:3b:d3:10:20:ac:dd:
4f:ac:74:ee:ca:aa:92:12:fb:46:6c:4d:2d:36:63:
90:3e:5a:10:5a:8f:2c:14:6b:9f:cd:3e:6b:e9:e3:
36:ab:2a:a3:e7:d9:87:35:6b:72:f2:e9:10:e5:8d:
d4:3d:a5:48:a5:d6:8e:b0:bd:01:05:73:e5:21:f0:
85:46:05:71:b4:7d:78:cc:33:86:be:88:3e:02:ca:
4c:9f:94:7b:bf:e8:a5:64:0d:c8:e0:38:8c:fe:7e:
c2:01:f1:9c:96:dd:2b:c4:53:d9:3c:5a:83:0f:99:
5f:a6:7b:b3:37:4a:7c:04:8e:72:d9:30:98:87:90:
d6:f5:0d:5b:fb:4e:1a:f5:e6:7b:11:54:aa:1f:81:
e1:2d:2c:e6:28:f7:5b:3e:74:84:b2:e9:dd:79:ee:
a4:c0:68:d0:82:87:b4:2a:ae:cb:6d:bd:e2:de:4c:
3b:fa:63:27:1d:c2:53:dd:7a:53:b3:a7:25:02:c1:
3f:8a:4a:6f:4e:98:61:59:ec:23:53:0e:45:bf:ce:
3b:0d:93:81:5d:27:4d:31:64:43:76:d9:ca:d4:82:
0e:71:f7:b3:b2:2c:2e:0c:5c:66:82:e5:36:83:5b:
0c:8c:ea:09:22:24:90:19:e0:61:8a:b6:0e:30:91:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:A6:3E:2E:7A:6E:1C:E7:6D:F2:B8:6C:61:5C:B2:8D:F4:CD:E8
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/JMCmPi56bhznbfK4bGFcso30zeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.75.0/24
Signature Algorithm: sha256WithRSAEncryption
73:aa:4b:96:dc:89:99:44:fe:a7:28:8a:bc:02:60:b7:f1:14:
80:6a:55:ab:de:22:42:0a:df:d5:0c:af:ce:1b:d3:0e:38:49:
61:01:7f:3f:10:24:b3:ab:2c:f1:8c:13:e1:3b:72:47:8d:16:
5f:8f:c2:1c:ce:d4:1f:25:d3:12:1a:4f:fc:6d:b5:13:76:13:
1a:60:c9:3c:d6:a2:c2:04:22:03:66:f4:c4:1e:a3:e4:dc:3d:
a1:26:fc:d3:7d:41:df:b8:1b:db:16:cc:ca:02:b1:6e:73:e5:
bb:b4:26:00:0d:af:3e:2f:7a:5c:7f:96:94:d4:f2:07:9a:03:
2e:6b:f8:c2:fc:3f:f9:20:88:3f:b5:87:47:e1:0b:9c:a8:be:
71:f4:7f:e4:5c:0d:69:f4:03:86:87:6a:d6:ea:f1:e5:ea:19:
89:24:ca:d8:f2:1c:68:19:fd:47:8d:01:62:96:9b:1d:d1:9e:
16:ff:f4:3c:ae:dd:f5:63:7d:4b:b7:a7:01:cf:e0:66:d9:c2:
e9:90:03:d2:b3:af:da:6c:9c:cb:83:2a:cb:dc:09:7c:05:b7:
10:af:de:5f:a4:64:fe:96:2e:31:b6:2a:8c:a9:c4:69:41:b6:
d4:f5:0d:08:e1:aa:51:30:46:c9:57:b4:a6:c9:d1:09:f3:79:
bf:32:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org