Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jw-u6jAwnvNpgMKW4trayYJ-bXI.roa
File: jw-u6jAwnvNpgMKW4trayYJ-bXI.roa (raw, json)
Hash identifier: K7HjiSqibul+aO50hjVTgLcR9R0epogcybeC3xrM9xk=
Subject key identifier: 8F:0F:AE:EA:30:30:9E:F3:69:80:C2:96:E2:DA:DA:C9:82:7E:6D:72
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188E3AD2C0619A8AB6868DC16C0739479F7
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jw-u6jAwnvNpgMKW4trayYJ-bXI.roa
Signing time: Thu 22 Jun 2023 15:15:56 +0000
ROA not before: Thu 22 Jun 2023 15:15:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.147.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:ad:2c:06:19:a8:ab:68:68:dc:16:c0:73:94:79:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 22 15:15:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f0faeea30309ef36980c296e2dadac9827e6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:d8:47:95:6f:47:99:09:29:d6:d8:d4:f4:
1e:d3:dd:96:a6:e5:72:b4:44:c5:21:ea:5b:63:a5:
95:12:f2:1a:64:f4:6d:41:60:2f:cf:10:75:7b:a5:
24:86:1c:4c:6c:15:89:65:53:63:e0:6a:60:c9:c6:
6a:0c:ee:cb:13:21:0f:8a:80:2c:2c:a5:62:e9:bc:
39:db:ad:fb:5d:ca:ce:16:fd:15:a8:b6:5b:84:9b:
d3:bc:3b:f6:00:57:9e:f7:41:7a:be:39:69:cf:15:
23:ed:ab:14:a0:42:c8:6d:77:81:5c:25:36:25:d8:
29:ae:c5:5a:c5:33:ef:b0:ef:be:4c:76:8a:83:ca:
dc:13:1f:be:34:ad:5c:65:6f:13:20:a3:3c:b5:09:
f7:99:c4:21:7e:7d:81:7f:fc:c1:59:31:e1:36:bc:
fc:50:4a:07:6f:b3:03:ff:ab:a5:26:fc:7a:17:20:
5f:e1:64:fe:5c:2d:03:de:16:48:49:b9:64:c4:3f:
a2:7f:c5:aa:b5:46:0b:c3:42:83:9b:34:8f:c0:86:
d4:93:fc:42:53:93:09:d9:b1:ef:5e:38:69:45:59:
a5:dc:57:7f:1c:0f:43:fe:7a:8e:e9:1c:9a:db:c2:
fe:df:6b:1d:2a:2b:68:d5:41:6e:9a:d1:2e:61:72:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0F:AE:EA:30:30:9E:F3:69:80:C2:96:E2:DA:DA:C9:82:7E:6D:72
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jw-u6jAwnvNpgMKW4trayYJ-bXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:b9:c5:d7:e8:50:79:7f:05:e2:28:23:5b:86:36:61:b3:72:
ef:47:c6:55:da:c1:17:74:f3:0d:99:5d:d4:ce:1e:09:4f:e0:
ed:58:ae:2f:0a:b0:b9:0c:9d:53:d7:7f:9e:10:63:2d:a4:5f:
3b:b2:07:21:2c:dc:92:2f:4b:d4:e6:a8:fd:a0:6b:48:41:b3:
81:3d:bb:da:9a:df:2e:36:4a:60:18:9e:28:46:65:ba:92:9b:
7b:f0:69:32:55:1c:2d:10:2b:a4:7a:53:74:ea:f6:d3:13:99:
c5:05:cc:0c:86:d2:f0:e5:3e:ff:12:18:b6:58:e4:66:4b:2e:
2f:66:4f:05:c5:66:6a:d9:27:77:7e:18:00:da:1c:c1:42:7e:
c7:f8:4b:94:d2:fd:50:4b:7d:e0:17:9a:53:68:10:1f:4a:c3:
48:92:b6:be:73:25:cc:80:64:44:de:bc:7d:b8:eb:45:1c:6f:
26:d0:2e:75:fa:dd:37:5c:a9:f0:e3:6c:cd:23:0b:3d:31:79:
23:89:63:16:05:e8:f6:be:b3:56:e9:70:1f:d5:c7:e7:47:f2:
bf:45:6c:c1:b7:98:6a:85:c8:a5:b0:a5:38:34:01:4f:8a:f7:
f7:be:9a:26:f4:2f:07:80:c8:94:87:30:74:a6:8f:de:96:b5:
b3:3b:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:02 2025 by rpki-client