Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/jd-ZoHCfES2j6qo2pOEgyq-e9qc.roa
File: jd-ZoHCfES2j6qo2pOEgyq-e9qc.roa (raw, json)
Hash identifier: +0FowvSbZNwvF2VNuXXOYEpcY9zCChgk+IZL/mXgbso=
Subject key identifier: 8D:DF:99:A0:70:9F:11:2D:A3:EA:AA:36:A4:E1:20:CA:AF:9E:F6:A7
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 46CF02
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/jd-ZoHCfES2j6qo2pOEgyq-e9qc.roa
Signing time: Thu 24 Mar 2022 03:44:32 +0000
ROA not before: Thu 24 Mar 2022 03:44:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 159.60.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4640514 (0x46cf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Mar 24 03:44:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ddf99a0709f112da3eaaa36a4e120caaf9ef6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:e8:15:99:4a:54:7d:56:20:1e:48:61:36:
fb:a8:c5:ba:4d:5a:b0:5c:48:a8:a1:b7:f7:39:d3:
94:9b:26:02:55:d0:be:8d:56:b8:c3:e6:73:b2:10:
a0:a4:15:a7:f3:1a:e4:f7:94:fb:c3:33:4b:e7:0b:
b4:8a:97:fe:f7:eb:05:24:70:e2:9b:41:4b:d2:90:
c3:3b:c4:56:d9:01:19:18:ef:4f:bb:26:f3:02:66:
af:c4:5b:4d:63:a0:3e:6a:66:d9:12:c4:f6:1d:e9:
9d:3d:b8:a5:cb:34:4c:d6:7c:4a:3c:f4:74:b5:ee:
86:ad:95:e6:da:f9:25:3b:25:0c:09:65:be:ec:98:
7f:fd:5d:29:d4:f1:0c:df:6c:19:8e:bb:96:e5:e5:
8b:d1:af:72:3e:49:75:08:69:78:c2:7a:ee:b7:c3:
00:56:6e:96:f1:47:eb:14:09:c1:21:63:ba:53:19:
19:ba:a6:51:3e:75:76:0c:17:b0:21:b7:82:fb:db:
b8:07:07:ed:c3:c5:9c:35:7f:0d:37:ab:89:c7:2f:
df:4e:1a:51:fb:ae:bb:13:b4:6a:d0:a6:8d:44:d7:
4e:a9:f7:bb:68:ac:8a:a1:4b:9f:66:13:e2:a4:91:
5a:a8:34:74:93:58:12:41:9f:a3:98:f4:82:b0:b0:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DF:99:A0:70:9F:11:2D:A3:EA:AA:36:A4:E1:20:CA:AF:9E:F6:A7
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/jd-ZoHCfES2j6qo2pOEgyq-e9qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:e5:f1:b1:18:04:d8:a0:83:5e:31:01:ba:bd:1e:fc:33:68:
29:45:ce:7b:c6:4a:95:29:32:9a:6c:bb:da:da:9f:ae:3e:f9:
f3:62:4e:1f:ba:e9:ca:31:89:b2:d3:d7:a8:1c:d0:91:4f:0a:
6f:13:3b:93:97:14:57:99:5a:d2:32:ae:ce:cd:33:ed:9f:b5:
e9:54:17:56:5a:08:36:ec:bb:55:88:78:79:72:ab:1e:e5:1b:
91:02:46:6f:4d:42:26:d2:31:93:a3:06:69:b7:cf:20:cb:53:
8f:86:b2:5b:28:8e:c1:73:2a:9d:96:c7:30:f0:c9:f0:d8:e4:
a2:b8:62:19:8e:83:d3:e7:f9:7a:f2:66:cd:8d:95:0d:c0:ed:
4c:6a:ea:33:59:ff:fa:5a:94:44:c6:3e:bd:a1:85:14:16:3a:
e9:03:bb:4b:ca:94:cf:72:a7:d3:21:e7:d5:87:f1:04:3a:a8:
44:d7:36:16:7f:55:6a:65:bf:25:3c:bb:6f:26:40:a7:0e:9d:
b1:6d:0f:c0:f0:03:34:2c:c0:76:09:63:37:a0:25:f1:ca:fe:
a9:fb:49:5d:63:76:86:5b:59:c1:f5:7a:54:5b:32:16:df:cf:
2b:38:39:af:ad:53:3e:66:64:25:95:79:8e:d8:33:66:52:6a:
d7:5d:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:15 2024 by rpki-client on console-ams.rpki-client.org