Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/JZHCOMlRKrs_c2PkTOjyVsHnjng.roa
File: JZHCOMlRKrs_c2PkTOjyVsHnjng.roa (raw, json)
Hash identifier: UCAzHR7oKKveoYCeghzbtmTvOyh3Ppx7U04w8rvn5Cs=
Subject key identifier: 25:91:C2:38:C9:51:2A:BB:3F:73:63:E4:4C:E8:F2:56:C1:E7:8E:78
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 05D43BF7
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/JZHCOMlRKrs_c2PkTOjyVsHnjng.roa
Signing time: Sat 01 Jan 2022 05:53:58 +0000
ROA not before: Sat 01 Jan 2022 05:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49250
IP address blocks: 91.233.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97795063 (0x5d43bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jan 1 05:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2591c238c9512abb3f7363e44ce8f256c1e78e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:92:4c:ff:16:77:9d:b2:e1:83:50:fb:da:49:
fd:22:a3:a4:de:69:65:32:56:18:7a:2e:ec:cf:81:
f2:a9:4d:82:03:8c:54:fb:27:58:f2:0e:b8:80:d4:
0c:bb:86:f1:b0:1b:19:57:1e:5f:73:b9:76:3b:21:
58:5f:58:66:5c:ce:9d:8c:81:f5:af:ad:bf:4b:14:
73:ec:77:83:1d:f3:9b:1b:08:d0:8b:8e:13:65:13:
c3:77:1d:37:19:6c:1a:f4:51:42:8f:e7:6e:41:d1:
bd:1c:6d:93:70:33:90:52:20:8c:82:de:e3:1f:b6:
25:33:a0:ce:d8:b1:38:d8:72:6a:8b:df:89:7f:a6:
be:74:8d:1c:03:c1:ba:b0:af:e8:ad:be:99:a6:ee:
2d:0d:07:8e:2d:0b:45:3e:12:8f:de:fc:fa:d5:fa:
cd:31:f8:b5:b9:17:22:70:e5:f4:5f:68:24:9e:df:
1e:fc:9d:f0:cf:98:e1:75:96:54:6a:46:df:d5:7d:
0c:dc:7b:c7:bd:24:58:1a:b0:41:5f:be:9d:b1:4c:
43:cf:5a:65:7b:8f:3c:7c:b8:72:21:52:dc:14:55:
df:cc:82:bb:5d:b6:f3:ee:fc:d9:92:ea:ca:1b:a0:
c7:95:ee:e6:8e:a6:40:90:89:6b:23:04:f9:04:3f:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:C2:38:C9:51:2A:BB:3F:73:63:E4:4C:E8:F2:56:C1:E7:8E:78
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/JZHCOMlRKrs_c2PkTOjyVsHnjng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.67.0/24
Signature Algorithm: sha256WithRSAEncryption
38:55:5e:b4:66:ac:4d:b4:a0:38:24:08:e9:c6:11:0e:6e:8e:
ba:24:83:e0:ed:f8:08:eb:21:8a:6c:dc:98:06:f0:c0:54:a4:
3b:85:83:dc:c3:39:da:42:68:3f:ba:56:e5:35:48:3b:3e:7b:
09:a4:57:3f:5e:41:7a:0e:48:3e:a0:be:ac:16:48:66:00:3f:
8c:31:9b:93:8b:cb:0d:2f:4c:76:e6:56:aa:a8:17:d4:46:5d:
cd:86:7e:25:3d:58:0c:ff:df:0b:57:13:84:e4:dd:ef:16:88:
f0:bc:87:bd:e3:f6:01:e3:24:ed:8f:a1:d8:c3:eb:fe:5a:e2:
be:25:b6:63:09:b4:04:76:fb:95:1b:d3:65:39:21:b2:9b:67:
0d:74:78:86:15:6e:76:d9:71:60:1f:0c:0b:40:d5:31:bc:15:
5b:d7:6a:4b:9b:27:61:b5:62:31:32:14:1f:5e:de:4d:30:9e:
fe:8a:d9:36:2f:f8:66:74:0f:cf:16:ec:50:bd:ef:da:17:ca:
2a:ea:b2:a0:f9:9d:05:95:43:5e:97:c5:da:16:36:e0:03:84:
a2:09:fd:a1:a3:1d:0c:5c:16:db:3c:42:36:ef:a5:2a:16:f4:
82:18:08:2b:8f:6d:28:f3:55:e3:db:1e:58:aa:68:b4:eb:64:
0e:c8:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:07 2024 by rpki-client on console-ams.rpki-client.org