Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/JDpkjOgANn2uC9_mWSAZdiG7JyA.roa
File: JDpkjOgANn2uC9_mWSAZdiG7JyA.roa (raw, json)
Hash identifier: WtfIBfXd846aENsu6lPJcEYOf5GSOzIQi5Xgvca1QAI=
Subject key identifier: 24:3A:64:8C:E8:00:36:7D:AE:0B:DF:E6:59:20:19:76:21:BB:27:20
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 05695557
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/JDpkjOgANn2uC9_mWSAZdiG7JyA.roa
Signing time: Sat 01 Jan 2022 07:54:58 +0000
ROA not before: Sat 01 Jan 2022 07:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48769
IP address blocks: 194.153.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90789207 (0x5695557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Jan 1 07:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=243a648ce800367dae0bdfe65920197621bb2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:ff:79:e1:5a:7d:63:1d:7f:96:12:78:95:
69:53:60:c8:41:60:ea:e5:14:2e:18:40:d7:13:25:
d5:9c:92:33:6c:db:f7:e3:f2:18:08:b2:6b:26:7b:
8d:50:01:be:8b:03:eb:10:36:bb:d8:13:2d:57:80:
96:48:05:94:99:5e:2b:b6:a0:82:a4:2b:04:88:fd:
24:d4:ee:49:4b:8c:1b:d6:d3:1a:59:9b:e6:47:79:
0d:ac:ed:7b:6e:74:d2:b7:4d:41:cc:18:25:f9:52:
e5:44:81:7c:78:5f:87:4d:88:cd:a6:d4:69:da:a3:
3c:46:4f:b3:a8:0a:0e:73:62:23:9d:37:3e:c5:49:
15:af:a2:b0:7f:9a:71:ca:44:82:80:a7:ca:35:ed:
6d:47:c9:96:fb:5f:27:d3:2e:f3:38:94:d5:4e:93:
6d:67:7e:6f:cf:51:9c:a7:6a:54:d6:d2:f3:ca:b1:
8d:63:e7:67:f0:85:3f:9a:3b:bd:c8:94:e2:10:94:
fb:0d:24:aa:f4:e3:54:fb:36:a1:a8:b1:c7:40:01:
ec:3d:eb:6e:f0:30:7c:9c:3d:d2:3a:cf:3b:2a:2d:
4a:6a:dc:9d:e2:1e:a9:af:5c:17:fd:05:4b:f8:eb:
76:01:a4:ef:c6:d6:86:a0:22:15:9a:a4:63:be:17:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:64:8C:E8:00:36:7D:AE:0B:DF:E6:59:20:19:76:21:BB:27:20
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/JDpkjOgANn2uC9_mWSAZdiG7JyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.187.0/24
Signature Algorithm: sha256WithRSAEncryption
58:dc:1b:89:0c:7a:81:6d:5d:7c:15:c5:fa:85:70:fe:8b:cd:
9d:85:c6:db:64:e7:e1:4b:52:77:d7:15:b0:db:eb:50:c8:a6:
75:4f:0e:20:32:a2:ef:24:67:1a:44:74:15:ca:13:6b:0f:dd:
6a:8c:47:db:ee:17:9b:d0:84:ef:d4:3d:87:61:18:29:17:cd:
61:16:56:0f:75:c4:2c:34:34:83:02:5f:6e:0f:13:17:b9:7b:
ff:2c:3c:89:d3:3f:6c:23:b1:98:2f:c5:dc:a0:ac:54:88:46:
a5:75:b4:9e:5e:e3:d9:89:35:bb:0d:a2:b0:14:29:69:9a:0e:
3b:db:f4:d1:d1:d5:bd:3d:a1:46:70:c9:37:88:39:38:b1:f6:
b6:f2:68:5d:2f:c1:7a:e1:05:81:c7:97:44:17:bf:09:e2:2d:
c3:de:67:6b:e6:b4:12:3a:9a:24:32:e1:c6:76:42:5d:f0:cd:
78:25:63:e8:cb:19:7b:1c:c0:cd:8c:bc:d5:95:41:bf:06:0c:
62:41:9a:75:69:60:15:e7:0b:44:3a:a0:a5:f2:ee:80:74:47:
82:f4:67:61:34:26:fa:61:07:2f:a8:a3:55:bd:5d:19:81:e0:
2a:51:25:50:6c:e5:67:46:84:e1:1f:80:45:70:94:52:18:5c:
84:c5:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:19 2025 by rpki-client