Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/JYglb64SBK-zRlSAIl2UT7WUtUo.roa
File: JYglb64SBK-zRlSAIl2UT7WUtUo.roa (raw, json)
Hash identifier: h1P4YNYj+CC1xduIK3tLWA1HThn0+4OwQ5daGUYvtBs=
Subject key identifier: 25:88:25:6F:AE:12:04:AF:B3:46:54:80:22:5D:94:4F:B5:94:B5:4A
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01835FB36F39C649AD3A7B6F71228C0D4155
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/JYglb64SBK-zRlSAIl2UT7WUtUo.roa
Signing time: Wed 21 Sep 2022 10:58:58 +0000
ROA not before: Wed 21 Sep 2022 10:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 185.104.32.0/24 maxlen: 24
185.104.33.0/24 maxlen: 24
185.104.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:b3:6f:39:c6:49:ad:3a:7b:6f:71:22:8c:0d:41:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Sep 21 10:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2588256fae1204afb3465480225d944fb594b54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:2d:6c:8e:c9:76:d5:ca:6e:b0:39:2c:4a:
90:51:43:88:db:53:51:86:63:a6:bb:3b:71:5f:bb:
ec:bf:ae:c2:2d:00:1c:c0:d6:d5:0d:c1:24:3c:29:
cf:60:e0:c3:2b:30:1c:5b:90:9f:94:e9:3c:8e:c8:
77:2d:d4:55:51:1c:35:6c:5a:cf:82:08:78:1c:64:
3b:d4:dc:96:1e:d6:b5:a0:7f:1f:a3:2b:5f:91:91:
f7:6c:c6:ce:4c:d3:c8:73:8d:2f:de:73:a8:ec:d3:
ee:a5:d0:ef:4c:ec:57:02:32:a1:65:d2:b7:8b:97:
98:f3:52:46:c8:fa:26:b7:79:eb:bf:a5:91:28:74:
73:27:63:95:d2:d7:74:a7:b9:25:4a:0b:a4:15:a2:
11:3e:5f:42:80:b9:a4:61:aa:55:e6:f8:b4:fd:2e:
b4:fb:29:7f:db:5b:4f:fe:13:51:ae:a3:3f:92:ba:
a5:b4:10:b9:41:ea:48:ca:0e:af:ca:39:3c:7b:1f:
38:cf:ca:79:bb:30:e1:c6:2c:a3:02:06:31:b6:3a:
c7:e6:9b:51:c1:30:a7:ac:da:8d:d6:88:e6:18:b4:
2e:e4:54:2e:9b:a2:ca:fe:15:59:45:7a:f0:8b:bb:
2d:03:b4:77:ea:f0:87:2d:a3:5f:6c:e1:dc:c1:ad:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:88:25:6F:AE:12:04:AF:B3:46:54:80:22:5D:94:4F:B5:94:B5:4A
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/JYglb64SBK-zRlSAIl2UT7WUtUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.32.0/23
185.104.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:96:d9:5f:a1:5f:ce:3f:65:f4:02:18:c5:89:84:01:e2:cc:
f7:aa:be:d5:c5:eb:2d:26:95:5d:9d:71:d7:e3:2d:7e:c6:6a:
40:e4:09:e2:e7:aa:df:4c:8b:da:c1:93:c8:fe:b3:be:c6:88:
fc:70:05:94:4e:41:12:2d:03:2f:76:57:a7:e5:8b:0e:cf:66:
5d:2c:9b:67:14:46:c1:92:cd:5a:4b:7f:f5:4e:cd:8c:1b:67:
f9:b4:7d:42:75:b6:01:cc:de:d9:a7:0b:79:1e:1f:87:88:6a:
67:63:67:8b:82:f4:1c:75:30:ae:0b:b0:a4:32:18:91:08:08:
8c:78:18:36:5c:28:57:73:b5:04:51:02:cf:ec:b3:67:59:f0:
22:10:cc:28:51:af:3c:d5:d5:8d:a3:38:52:37:dc:16:a1:98:
ad:9f:8e:eb:7a:ce:8e:f7:7a:02:02:8f:76:87:a0:d3:f0:48:
e4:e5:80:93:5b:48:37:22:7b:87:a7:c7:92:09:7b:34:41:4e:
4a:7a:37:6e:d5:67:82:f6:65:37:fd:1f:00:94:5b:4e:03:ca:
47:55:ec:9f:a1:b8:16:70:a9:e6:6f:03:d9:3a:8c:9b:ed:c0:
83:c2:bb:d7:d5:6c:e7:27:05:f8:54:9e:d5:80:83:8e:e4:0e:
21:f8:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org