Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/JsTkQIGNsGAI5fTxCYYUsvB8yR0.roa
File: JsTkQIGNsGAI5fTxCYYUsvB8yR0.roa (raw, json)
Hash identifier: ucT55C/lJ6rX70xrh5W/STjr3b1iBWjvI2hHKljrIWU=
Subject key identifier: 26:C4:E4:40:81:8D:B0:60:08:E5:F4:F1:09:86:14:B2:F0:7C:C9:1D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 0188AEC517913722FABAABCEC52EBD48BDDE
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/JsTkQIGNsGAI5fTxCYYUsvB8yR0.roa
Signing time: Mon 12 Jun 2023 08:42:12 +0000
ROA not before: Mon 12 Jun 2023 08:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202940
IP address blocks: 84.108.143.0/24 maxlen: 24
84.108.142.0/24 maxlen: 24
84.108.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:c5:17:91:37:22:fa:ba:ab:ce:c5:2e:bd:48:bd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 12 08:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c4e440818db06008e5f4f1098614b2f07cc91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:b0:17:bb:f8:b9:f5:07:17:84:bc:6d:bc:
49:be:3d:e5:cf:7a:21:f4:20:e4:da:b8:86:c3:27:
62:46:42:93:36:3c:a6:8d:d6:b7:ba:77:72:9a:49:
fa:71:a8:45:b6:5b:c5:98:b1:43:28:28:ef:94:48:
3b:c1:6e:a8:6f:08:57:6c:e7:f0:91:85:97:91:d9:
0a:d3:71:51:c7:fa:22:09:55:b9:57:67:a1:3e:75:
f2:4f:a4:93:d1:9b:98:fa:12:dd:bd:86:cb:df:63:
c0:22:73:f2:dd:3b:6c:d1:00:10:6c:88:ee:d3:da:
85:8a:ee:77:6b:9d:75:d1:47:59:ec:4a:2d:2b:a1:
35:a6:51:53:f3:a4:13:e0:09:fd:70:b6:71:3e:91:
bf:27:cd:41:df:d5:d6:6b:f2:e1:ee:2b:a3:9a:1a:
39:67:0c:77:4a:4c:56:70:7e:a1:2d:ae:e6:d4:0b:
0d:0e:c6:c5:84:fd:ec:7e:cb:0c:12:fd:ef:c1:db:
00:de:ea:49:ab:d7:48:fb:88:2f:59:f9:2c:11:ec:
f7:63:d9:3b:2f:83:9e:8b:25:f1:25:d1:0b:27:52:
a8:21:a8:7c:7f:97:05:4d:ee:f1:dd:d3:54:dc:ef:
a4:c8:09:a4:4b:1e:e9:3b:d0:f2:24:a7:f4:60:fd:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:E4:40:81:8D:B0:60:08:E5:F4:F1:09:86:14:B2:F0:7C:C9:1D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/JsTkQIGNsGAI5fTxCYYUsvB8yR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.142.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:6a:39:02:18:b4:36:69:6e:7e:93:c7:c4:c2:d5:ab:22:1b:
b8:9a:68:d1:a1:03:d2:a8:d2:6a:59:db:3e:04:9a:c2:d9:c0:
15:c6:97:9a:e7:fa:a0:80:ca:b6:87:19:fc:dc:63:a0:a9:7d:
9a:7e:9f:f9:41:a7:90:44:a3:57:0b:d5:25:96:b8:18:18:4e:
37:d8:8f:8a:61:f1:df:9c:d7:ec:e7:98:71:5c:10:2f:c0:40:
20:e6:14:1f:61:9a:13:34:04:40:a1:6b:48:61:e0:d6:07:3e:
52:38:ac:75:7b:d3:63:52:23:89:d4:9d:cd:fe:ec:66:d6:79:
1c:14:e8:15:e9:56:3a:6a:75:19:89:36:53:d3:13:90:0b:37:
14:36:4a:9d:60:5d:c5:7f:4d:16:d8:3a:bb:cd:02:38:c1:95:
ea:90:aa:59:21:9e:3b:3c:0f:4c:c6:61:e3:a4:73:aa:12:6f:
d3:37:59:f6:a8:69:f6:45:6a:6e:d8:da:43:1d:b0:d3:4b:59:
ac:70:50:93:61:d9:1d:db:65:54:30:a9:da:d8:07:d6:c3:e7:
d4:2e:42:e6:f0:57:8b:06:d4:af:3a:56:0d:99:2a:88:d9:78:
b5:be:df:ef:fa:b3:b2:59:bc:d6:47:58:d5:7e:74:27:a1:ee:
86:f5:57:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:03 2025 by rpki-client