Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/jRoItMMc4BxSBZYTuVm6DKIyE7Q.roa
File: jRoItMMc4BxSBZYTuVm6DKIyE7Q.roa (raw, json)
Hash identifier: W1V/iGD4oI+HkMMRrYvmLofpwES6DLe3yhwJ5EBLdZA=
Subject key identifier: 8D:1A:08:B4:C3:1C:E0:1C:52:05:96:13:B9:59:BA:0C:A2:32:13:B4
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 08A57C1F
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/jRoItMMc4BxSBZYTuVm6DKIyE7Q.roa
Signing time: Sat 01 Jan 2022 05:58:53 +0000
ROA not before: Sat 01 Jan 2022 05:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201085
IP address blocks: 157.97.136.0/21 maxlen: 21
185.86.168.0/22 maxlen: 22
2a03:77a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145062943 (0x8a57c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Jan 1 05:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d1a08b4c31ce01c52059613b959ba0ca23213b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:83:a1:78:fd:08:6f:d6:4e:6c:5d:53:71:
b8:df:66:15:e7:40:65:1d:7e:29:8f:1d:12:af:f4:
05:d3:83:1f:91:bc:11:a6:18:f2:f3:17:88:38:10:
d5:ee:d5:6e:15:d2:af:3b:6d:42:93:cc:8e:a0:f9:
ff:d7:30:99:ad:b9:b7:83:22:29:fd:67:43:aa:d2:
9a:db:8a:2d:95:f0:cb:c1:d8:89:ff:e8:e4:df:1b:
8a:51:2b:71:af:f0:bb:e5:ee:7c:11:5e:04:11:4b:
72:f3:74:dc:ac:1a:ea:8d:4a:ac:8f:fe:de:70:de:
60:38:ba:2f:35:8e:97:b1:f7:3b:3b:71:09:62:c6:
77:4f:c5:a3:d0:52:23:f6:ff:13:37:e6:b1:cc:69:
59:df:38:d6:a1:a3:14:38:57:5a:dc:c2:4f:37:c8:
2a:57:1d:ba:02:27:54:ca:81:38:88:4f:41:23:e3:
bc:d0:ca:e9:24:25:8b:4c:e9:c4:e7:3f:d7:b3:a2:
0b:5c:43:49:21:6b:80:5b:9b:d2:71:0c:03:78:ba:
5c:08:67:ef:3b:ca:4b:46:5d:ca:68:59:19:1f:33:
7e:19:db:ad:e8:7c:84:0c:06:36:b6:02:63:2b:26:
57:23:5b:b5:a8:cd:d9:2e:8b:fb:f3:19:dc:36:60:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:08:B4:C3:1C:E0:1C:52:05:96:13:B9:59:BA:0C:A2:32:13:B4
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/jRoItMMc4BxSBZYTuVm6DKIyE7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.136.0/21
185.86.168.0/22
IPv6:
2a03:77a0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:08:bd:dd:cb:eb:6e:c7:05:4a:2b:9a:86:86:6c:40:0e:64:
42:87:93:6f:4a:16:9f:b3:1e:ac:d2:4b:00:ea:60:28:df:c6:
74:d7:bd:b8:62:71:d1:78:09:07:b6:ed:6a:ad:f5:ba:c5:d8:
0d:69:60:ab:ee:0c:95:0b:e9:30:d6:fd:0b:a1:1d:85:74:fa:
89:39:72:c7:fa:97:71:da:0d:d5:9d:98:d6:13:5e:ef:8e:83:
30:cf:4b:0d:55:aa:bb:cc:bc:0c:32:72:76:55:db:40:c9:c2:
8d:21:76:bc:7f:5a:27:9a:2a:e3:b5:d8:84:77:d8:12:84:d1:
f8:f3:d9:71:34:8e:a9:6d:91:fb:49:73:4b:44:f9:80:d3:2a:
45:0a:e7:59:9e:1d:6b:19:10:0e:82:8c:cf:a9:6c:16:47:c7:
e6:01:9e:d1:86:f4:0e:fb:20:45:3f:85:23:07:af:10:80:57:
b3:f0:59:83:15:f6:ba:7e:b0:76:11:fc:ca:54:0a:0f:af:61:
aa:88:dc:21:22:05:4a:5b:55:03:ac:4f:f1:fd:cc:e1:ba:d3:
c2:fd:7a:83:a0:fc:ee:78:5c:91:19:2c:69:dc:06:77:15:2c:
22:8f:f5:de:df:f2:68:1b:12:9a:50:cd:8b:7c:c8:23:10:40:
3e:9c:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:02 2024 by rpki-client on console-fra.rpki-client.org