Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/j-RON-4RChMZhAdGArCx-1_DgDU.roa
File: j-RON-4RChMZhAdGArCx-1_DgDU.roa (raw, json)
Hash identifier: Gl+OQY0ZlrSXWSDW2fxmKJkp0i9HFbnMJcoTg/4vGWM=
Subject key identifier: 8F:E4:4E:37:EE:11:0A:13:19:84:07:46:02:B0:B1:FB:5F:C3:80:35
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 01828E1909A392CDD8DB8EC64C228C5A66C8
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/j-RON-4RChMZhAdGArCx-1_DgDU.roa
Signing time: Thu 11 Aug 2022 18:09:41 +0000
ROA not before: Thu 11 Aug 2022 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33843
IP address blocks: 194.11.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:19:09:a3:92:cd:d8:db:8e:c6:4c:22:8c:5a:66:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Aug 11 18:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fe44e37ee110a131984074602b0b1fb5fc38035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:67:7d:df:47:fa:45:c8:32:5c:98:d0:38:
4c:b6:fc:6b:62:d4:d7:31:48:1b:90:9f:00:c3:a5:
6d:77:95:d8:f9:e5:eb:0b:b1:f7:25:23:e8:aa:b6:
a8:55:dc:d6:75:36:ce:cf:6d:c4:1b:4b:6c:1b:c2:
4b:65:a7:56:39:d8:7b:20:b7:9a:b5:14:ed:36:9c:
8d:b8:4f:38:86:5d:4b:c3:25:77:ba:18:f3:d3:98:
04:46:c3:81:eb:59:f5:0f:55:31:11:3a:89:ae:a8:
97:04:e6:6f:37:61:ab:e6:b6:e8:4a:67:6f:60:34:
83:cc:38:be:2a:c3:34:d0:da:21:ca:20:8c:50:5a:
f7:6a:9c:d8:dd:2b:7c:6b:3d:e0:bb:65:c6:47:8b:
bf:1b:b1:e2:d0:70:10:65:62:62:83:3d:5e:18:25:
c7:a6:03:78:ec:4e:90:fb:41:3d:78:0f:e2:d4:16:
f5:e7:ff:95:dd:cb:c1:82:57:57:38:70:a6:91:e5:
c4:b0:c1:fb:37:2b:aa:92:9b:7b:65:0e:bb:72:e1:
fa:a7:a6:b9:11:04:ae:e3:a4:fe:4a:f3:e1:19:eb:
e3:93:39:e5:72:d7:97:39:df:cb:09:94:b1:b2:32:
b0:2d:f1:ff:26:1d:75:a0:74:aa:f8:77:8c:7d:9c:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:4E:37:EE:11:0A:13:19:84:07:46:02:B0:B1:FB:5F:C3:80:35
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/j-RON-4RChMZhAdGArCx-1_DgDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:64:79:cb:2b:00:0b:1a:fc:c0:a7:d0:5f:2a:7c:ec:4f:08:
e0:78:b1:4f:6a:0d:ae:5b:f6:f3:41:83:f5:96:8c:89:5a:76:
bc:46:e6:79:e2:a7:dc:24:93:4f:15:f3:c9:75:7e:4e:aa:c6:
99:68:67:0b:67:82:79:93:f9:78:34:d9:8a:79:a4:e9:cb:c6:
37:39:9f:6a:2e:3e:21:d0:15:68:61:f5:19:43:78:89:ad:67:
f9:50:7c:fc:1f:de:c0:6f:86:b8:5f:a1:89:42:8d:46:ca:69:
56:96:72:d7:6b:c0:d5:78:7d:3f:6e:39:7e:f8:2e:b5:af:52:
f2:71:b7:8a:e5:8b:ba:85:5b:46:14:7d:b0:50:ad:77:82:bf:
ff:e2:44:d6:a1:9f:63:c0:2a:69:70:08:f8:08:51:04:15:cb:
6e:56:b9:0b:78:eb:6d:85:d1:e0:b2:46:7e:30:d3:1e:23:66:
93:e4:bb:dc:73:6d:7c:0c:b4:23:54:13:be:23:ff:71:9f:8f:
19:47:89:1b:12:27:69:63:79:69:06:a8:f9:8c:90:c1:8c:8b:
7a:d8:42:cb:fa:b4:82:26:d4:ae:a4:58:68:d4:5a:72:db:aa:
ce:71:1a:18:18:26:2d:61:30:71:c7:82:47:29:e6:2a:0d:0c:
9f:3e:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:41 2023 by rpki-client on console-ams.rpki-client.org