Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/jKANMk10vVJDjGXxvD6M3xSYCD0.roa
File: jKANMk10vVJDjGXxvD6M3xSYCD0.roa (raw, json)
Hash identifier: maB205KTx3/6yQsBtO+QR6ReEZRdPG9zCnTdK3mlzNI=
Subject key identifier: 8C:A0:0D:32:4D:74:BD:52:43:8C:65:F1:BC:3E:8C:DF:14:98:08:3D
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 057FE990
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/jKANMk10vVJDjGXxvD6M3xSYCD0.roa
Signing time: Sat 01 Jan 2022 03:58:48 +0000
ROA not before: Sat 01 Jan 2022 03:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8255
IP address blocks: 145.226.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92268944 (0x57fe990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Jan 1 03:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca00d324d74bd52438c65f1bc3e8cdf1498083d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:ab:04:6e:ec:b8:87:57:a5:ec:3f:b6:47:
df:81:2b:c3:44:31:cd:b0:87:63:22:c8:86:fd:07:
46:ba:74:19:ea:5f:5a:02:76:0f:ec:b6:e7:fd:9d:
ef:c9:9c:d8:9e:77:c2:81:6f:73:a5:7f:35:f8:d7:
5b:e6:04:5f:67:75:4e:7c:97:88:df:b5:1d:f3:db:
b1:2c:51:3d:d2:72:35:7f:bd:3b:b8:e4:d2:a4:24:
be:64:94:f9:fc:21:ef:bf:a9:75:8a:75:74:4c:90:
a8:41:15:95:9c:d4:d3:9d:aa:5c:76:5c:af:0e:b9:
cb:82:4e:62:60:23:3f:23:35:43:be:70:f0:19:a7:
91:d4:3f:bd:88:2a:54:1e:fe:93:ab:be:ef:0b:3a:
49:54:a2:e1:c7:23:9f:26:87:27:8f:33:a2:0d:97:
e6:2a:33:f5:13:2d:7c:f2:e8:08:43:6e:e8:ed:e2:
da:0a:09:30:38:90:1e:59:f4:f1:ed:77:98:f8:8f:
36:9d:69:ac:5e:fb:97:53:7a:de:f7:2b:40:e2:79:
b7:dd:70:e9:ac:51:b0:59:dd:2a:78:42:c7:5f:f5:
04:67:4a:0e:66:e5:f4:b2:0c:4b:2c:2e:a7:eb:bc:
3e:1c:dd:14:1a:c2:77:06:f8:c2:96:a6:33:56:57:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:0D:32:4D:74:BD:52:43:8C:65:F1:BC:3E:8C:DF:14:98:08:3D
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/jKANMk10vVJDjGXxvD6M3xSYCD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:7a:2b:2a:86:54:f4:00:67:49:8a:3a:65:d4:31:1c:6a:40:
36:ee:64:38:89:cd:7b:b0:19:e7:82:c6:7b:f2:7d:1f:c7:21:
7e:2a:fc:49:aa:54:7a:79:e8:3b:b8:5a:89:b0:1b:07:48:60:
4e:20:32:66:be:68:da:c0:31:61:f4:6c:2a:b5:2e:72:92:5c:
89:8e:47:21:d6:1e:96:ef:51:4a:6c:76:fb:bb:16:44:ee:07:
34:b7:a2:8f:27:f6:a3:29:60:08:b4:b5:d6:36:80:e1:8a:94:
e0:a3:6f:36:53:a8:b3:c0:2b:e9:99:5a:9f:8e:b4:d6:b6:d9:
b5:01:d1:26:e4:a4:e8:f3:b9:e1:ed:bd:b2:24:09:9c:55:bb:
f6:52:85:53:9d:be:90:6a:48:06:40:b2:90:cb:10:74:6c:3a:
d5:40:ae:7f:eb:43:ff:85:a1:34:99:db:99:5a:f5:35:38:01:
9c:6d:ea:7a:41:92:78:ff:69:e9:44:4b:6e:1b:0c:f6:28:24:
0e:cc:17:76:6b:11:a6:bf:63:cb:59:53:c2:ad:c5:1b:60:46:
23:5d:6e:16:ff:1b:ba:f2:4e:d2:f4:00:64:d4:6b:7c:f0:e5:
9f:0e:db:76:0d:30:ec:ff:21:54:0c:c5:f1:64:ab:e2:d8:25:
43:e4:ca:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:02 2024 by rpki-client on console-ams.rpki-client.org