Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/JRJqnQ4ZqPS4XiQOFJV8RUTJDC8.roa
File: JRJqnQ4ZqPS4XiQOFJV8RUTJDC8.roa (raw, json)
Hash identifier: NfJmQZooohDSGI5btc4ZWttrEC+A8M95P/beijZ6v6Y=
Subject key identifier: 25:12:6A:9D:0E:19:A8:F4:B8:5E:24:0E:14:95:7C:45:44:C9:0C:2F
Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial: 9ADEBE
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/JRJqnQ4ZqPS4XiQOFJV8RUTJDC8.roa
Signing time: Sat 01 Jan 2022 05:02:43 +0000
ROA not before: Sat 01 Jan 2022 05:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43183
IP address blocks: 193.246.170.0/23 maxlen: 32
91.194.146.0/23 maxlen: 23
2001:67c:8ac::/48 maxlen: 128
2001:678:fbc::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10149566 (0x9adebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Validity
Not Before: Jan 1 05:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25126a9d0e19a8f4b85e240e14957c4544c90c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:5e:92:f0:1e:53:9f:fd:8c:e5:5f:c4:76:
5a:c0:d4:d4:08:f3:e6:fe:4e:db:75:50:1d:f2:a9:
7e:56:ac:7a:61:ef:cb:21:82:53:ca:45:28:b0:9b:
8a:8e:64:7a:12:eb:af:c0:a6:cb:10:47:a1:04:f5:
72:88:dd:99:40:e7:c3:a5:16:3a:d9:cf:0f:69:18:
89:7c:11:88:48:a6:ff:c9:b3:6e:cd:22:3e:de:32:
22:b3:27:8a:7f:58:69:05:e5:43:a0:94:66:a1:ed:
8c:53:05:45:c6:98:bc:e7:ea:49:4d:d6:20:7f:68:
e4:74:a4:cf:0c:21:a3:ce:c6:8a:73:4d:c4:d6:fc:
9e:48:3b:31:a0:cc:89:75:93:22:43:f9:2c:92:66:
24:2c:8a:a7:53:6c:f9:25:fd:49:eb:7b:ac:6b:88:
2e:19:2e:60:d0:ae:f9:c9:0b:16:c5:37:6c:67:a8:
00:1d:8f:2a:c7:26:18:77:72:06:43:25:6e:4a:24:
88:54:6c:71:08:58:16:57:ab:5e:57:e5:b8:23:65:
b3:54:21:23:50:4d:68:b3:da:cf:8d:a8:d4:39:f0:
e2:9d:42:2a:a0:2f:16:7a:c2:6f:34:69:86:ec:ca:
1f:77:43:e0:b9:4b:c9:56:1d:8e:1c:6f:e2:89:a0:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:6A:9D:0E:19:A8:F4:B8:5E:24:0E:14:95:7C:45:44:C9:0C:2F
X509v3 Authority Key Identifier:
keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/JRJqnQ4ZqPS4XiQOFJV8RUTJDC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.146.0/23
193.246.170.0/23
IPv6:
2001:678:fbc::/48
2001:67c:8ac::/48
Signature Algorithm: sha256WithRSAEncryption
d1:56:ac:d7:62:db:72:6e:96:6c:1d:38:50:b8:4f:85:ce:38:
6f:42:35:e3:e4:88:4b:75:1d:b5:87:f1:04:38:6d:8c:e6:cc:
00:ff:bb:54:35:85:1d:4f:c1:34:1f:8f:56:6c:92:92:47:7b:
94:a5:bc:04:56:7c:b6:fa:65:a0:0d:8c:6f:d6:2f:72:9b:9e:
30:45:98:86:41:f1:4f:91:eb:d3:b9:a9:22:9a:01:0e:b8:ab:
4c:40:1a:01:8c:44:c9:a9:f1:34:61:4d:34:d0:fe:b4:5c:11:
d5:6e:d2:9f:fc:a8:ee:ca:bb:3b:3d:d6:6d:c3:dc:e4:2c:c4:
a3:ee:70:19:53:9e:79:a0:16:eb:c0:d4:1e:f7:55:63:07:93:
4e:4c:05:ae:2a:8d:47:bb:ac:eb:3c:dc:39:fb:9c:2a:8f:18:
da:e9:f0:06:22:86:4f:06:3c:41:f8:df:12:46:5a:a2:a7:d1:
4a:8b:c4:6a:d3:27:9f:24:bd:d0:78:2b:80:7d:a5:60:c8:56:
5a:c0:cf:56:a7:d2:84:fe:12:65:ce:ac:69:b7:ec:03:aa:eb:
82:80:27:19:87:63:db:31:81:b5:5f:9b:5b:2b:c8:34:5b:2f:
57:ab:cb:36:d4:9f:c9:fc:b5:8f:ea:94:9b:4a:6f:a1:d9:7e:
92:6c:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-fra.rpki-client.org