Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1JnwzcqRTnR_50ZTs--b0I9dUk8.roa
File: 1JnwzcqRTnR_50ZTs--b0I9dUk8.roa (raw, json)
Hash identifier: X3gm0l/ZEhdiW3wJApzS2A++rFkqdm+BiAi1h3fPDhQ=
Subject key identifier: D4:99:F0:CD:CA:91:4E:74:7F:E7:46:53:B3:EF:9B:D0:8F:5D:52:4F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 090A259E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1JnwzcqRTnR_50ZTs--b0I9dUk8.roa
Signing time: Tue 18 Jan 2022 08:34:35 +0000
ROA not before: Tue 18 Jan 2022 08:34:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328867
IP address blocks: 185.243.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151659934 (0x90a259e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 18 08:34:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d499f0cdca914e747fe74653b3ef9bd08f5d524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:79:0a:fe:b5:0d:36:19:5d:c6:83:62:a0:
06:5c:65:6e:03:5f:c4:33:0a:a7:54:a3:f0:b0:de:
aa:25:83:82:53:b9:48:e6:61:b0:ba:ef:a2:57:0e:
ad:b6:31:60:b4:8e:02:55:31:2c:45:0f:5a:97:79:
d3:11:e9:08:bb:0c:a8:04:62:2f:73:31:94:f1:24:
01:e4:e5:bc:ee:a1:37:a5:47:54:f9:20:f1:55:56:
ba:5f:e4:ad:f5:c2:63:e0:a6:a9:6e:db:f5:10:59:
85:4a:a1:6c:7a:c0:74:06:69:11:eb:dd:b7:44:b6:
1a:10:06:66:ad:23:98:17:b6:0b:95:85:1e:83:13:
61:46:d2:8e:2d:4a:fa:74:4e:34:59:01:db:27:24:
59:3f:f4:1f:1f:9a:28:b3:35:67:2c:89:84:4c:e0:
d2:eb:59:19:8a:d6:5d:23:4b:18:34:28:be:f2:d6:
e2:47:02:3c:be:65:b0:b4:4d:81:31:cb:bc:48:b8:
d2:44:ee:b9:26:be:33:fe:36:dd:a7:c3:95:79:38:
c8:fc:1a:40:a3:3c:bc:6c:bc:18:90:b0:be:ce:04:
0e:d5:1e:02:7a:52:fb:97:89:eb:9f:3c:0d:7a:03:
93:53:ed:ec:d4:6d:6f:ba:42:81:3b:ac:2e:ec:5a:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:F0:CD:CA:91:4E:74:7F:E7:46:53:B3:EF:9B:D0:8F:5D:52:4F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1JnwzcqRTnR_50ZTs--b0I9dUk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6c:ce:a0:a4:c3:86:80:31:eb:a3:82:50:2c:7b:86:6c:e7:
98:e6:f8:89:6d:63:4a:5e:ba:c0:39:9a:59:4c:f0:04:9b:64:
ed:54:fb:3a:96:db:e0:0d:26:19:46:21:08:b5:c5:41:4a:b3:
c4:c3:94:45:a8:d3:56:d8:6c:0f:23:b6:07:97:cb:2d:88:0c:
7a:a3:7a:d4:38:0c:42:c4:a7:18:c6:06:cf:97:4e:dc:d3:7d:
0a:0d:88:ea:59:c2:e6:7c:f3:1e:25:b4:c5:77:51:79:84:bc:
44:ce:1b:e7:54:c0:83:b1:62:1f:d4:63:e2:fa:72:89:81:38:
97:7c:ce:1e:0d:4b:d7:62:5c:28:0d:02:ff:97:51:d7:08:09:
e7:8e:7d:1f:c2:6f:40:a8:45:1c:7b:dc:32:2c:ae:e5:37:32:
3c:12:bb:00:a8:ac:b5:05:ea:62:9a:36:bb:df:b5:87:8e:a4:
d4:78:77:71:48:5b:52:26:2f:9a:6d:50:bc:7e:5f:87:63:4a:
90:4c:00:2d:fa:a6:52:68:59:cf:1c:44:af:9e:91:fb:75:aa:
f7:91:eb:fe:74:d0:62:81:8c:80:1f:19:f8:f0:c3:75:95:84:
21:2e:54:ab:66:66:6a:3a:a8:64:55:44:f9:ee:47:ef:3c:80:
ce:87:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org