Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/JufS13N-8iUsctcEM_w0eWlDETA.roa
File: JufS13N-8iUsctcEM_w0eWlDETA.roa (raw, json)
Hash identifier: /ZcioajBQy/5WK1lMaLOVlNhp04MkbmPuumguANjYHk=
Subject key identifier: 26:E7:D2:D7:73:7E:F2:25:2C:72:D7:04:33:FC:34:79:69:43:11:30
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 03937422
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/JufS13N-8iUsctcEM_w0eWlDETA.roa
Signing time: Sat 01 Jan 2022 12:04:26 +0000
ROA not before: Sat 01 Jan 2022 12:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212367
IP address blocks: 194.8.58.0/24 maxlen: 24
2a0b:cfc0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59995170 (0x3937422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Jan 1 12:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26e7d2d7737ef2252c72d70433fc347969431130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:35:c4:a5:d3:c1:40:a0:45:c1:5b:dc:31:
f6:52:1b:67:12:67:70:e4:a7:cd:df:06:4a:18:0f:
b0:a9:43:9c:e1:1e:2a:15:44:ea:38:68:fb:9b:3e:
87:fc:3a:c4:2d:b8:02:19:d4:c7:0d:b0:0f:83:b3:
61:45:8f:41:80:f7:28:90:32:7a:37:7b:71:ec:1c:
3d:8d:d5:a4:9d:7e:9a:0a:f3:44:6d:7f:d3:4b:e5:
74:63:ba:d5:3c:8a:4c:18:bd:f9:4c:12:5d:23:4f:
7f:4f:35:20:e9:36:1a:aa:e9:ad:28:c9:c5:d5:9c:
02:00:e3:1c:27:42:02:1c:a7:ec:ba:a2:19:cf:e3:
a2:c3:3b:7c:52:0b:34:af:f8:58:c2:db:59:6b:de:
42:7c:c8:2c:31:22:32:97:6a:d9:c8:5a:29:5b:c8:
1d:bb:bf:72:6b:4f:9b:48:6e:29:e7:6f:65:f9:7f:
ab:b1:cb:35:b4:0f:6c:58:6e:a6:e3:a7:33:c2:c6:
bb:53:d8:bd:4c:80:8f:84:33:56:c6:37:b9:17:e7:
65:ac:50:b1:71:35:b8:1d:2d:dc:7b:9e:17:55:08:
ac:e7:5f:ea:d0:65:eb:f9:e2:17:ab:76:e8:f8:3e:
48:de:10:8a:98:e8:e7:ed:3f:bf:28:2a:a2:eb:8e:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E7:D2:D7:73:7E:F2:25:2C:72:D7:04:33:FC:34:79:69:43:11:30
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/JufS13N-8iUsctcEM_w0eWlDETA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.58.0/24
IPv6:
2a0b:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:26:30:b5:3a:40:6b:01:c4:07:46:7d:c9:e7:42:14:bb:e8:
7c:47:5a:2d:5b:1a:5a:97:5d:f1:a0:d2:b5:6c:4a:9d:e1:f6:
0a:60:29:14:e1:f9:ff:59:a8:a2:82:87:55:c7:3f:9f:0c:7f:
04:d7:cc:00:d7:04:1e:d5:05:e5:49:a1:a4:65:0a:58:4b:23:
af:21:d1:ca:76:6b:2e:02:d8:65:e4:be:48:22:78:8d:f3:ab:
11:fd:31:22:0e:3a:0c:20:46:a6:71:f2:9a:29:12:72:f0:b6:
ba:02:e9:bf:27:94:76:ce:20:d3:3a:19:20:5a:4d:8f:79:7d:
76:d3:a8:ad:df:6a:5c:76:55:f4:ff:b4:3e:da:98:05:05:3c:
27:28:0b:1c:f8:c1:7f:92:c9:e7:cd:9d:c4:91:4c:0c:2b:98:
b8:df:0d:12:9b:ce:f2:32:57:3b:c6:c6:de:54:05:e8:8d:00:
79:e4:2a:d3:23:49:0d:ec:51:62:1d:40:c8:11:52:a6:b9:2d:
8f:c8:1d:e1:7a:48:52:6b:38:fc:e7:cf:e9:d2:cf:3c:46:a2:
3a:e4:38:59:57:9f:2a:0e:f7:cc:21:aa:2f:10:7e:d8:85:28:
02:18:ad:63:a3:66:52:c5:9d:c6:1d:e7:bd:ee:51:91:07:3e:
99:79:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:17 2025 by rpki-client