Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JVT765hy1Lhd7WF7nlKA6D1hiM4.roa
File: JVT765hy1Lhd7WF7nlKA6D1hiM4.roa (raw, json)
Hash identifier: YeFwNzqj9hxGPrWr35MEXIp23c0ely9sPxVJQ9JPP5g=
Subject key identifier: 25:54:FB:EB:98:72:D4:B8:5D:ED:61:7B:9E:52:80:E8:3D:61:88:CE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13C1FA2F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JVT765hy1Lhd7WF7nlKA6D1hiM4.roa
Signing time: Wed 16 Feb 2022 12:14:27 +0000
ROA not before: Wed 16 Feb 2022 12:14:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2386
IP address blocks: 82.115.2.0/23 maxlen: 23
82.115.4.0/23 maxlen: 23
82.115.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331479599 (0x13c1fa2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 16 12:14:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2554fbeb9872d4b85ded617b9e5280e83d6188ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:dc:d3:e5:9a:ec:8e:05:80:14:4f:f5:38:
05:05:1a:65:73:7e:ae:c8:81:58:a0:ea:db:d4:b3:
61:ca:8c:7e:c0:38:15:a4:ea:91:e1:52:45:c4:2e:
5f:47:10:9d:45:8a:2f:b1:49:b5:3f:c0:9d:c1:00:
68:5d:a0:c0:44:5b:ac:8a:f4:a5:56:3a:26:db:a7:
fe:30:e1:a9:1a:21:82:c6:49:95:63:89:9f:62:9c:
40:19:d7:90:04:ef:5b:0e:3d:1c:32:1d:59:93:15:
16:52:66:d2:e7:b7:0b:ed:30:11:de:27:33:c0:4c:
94:90:ab:cb:e9:ed:cb:01:c1:00:90:30:c8:bb:1f:
69:31:56:7f:e8:6a:f6:e4:b3:e6:e9:5a:f5:97:49:
1a:88:06:0c:06:ae:97:88:33:f4:4a:83:1c:9c:57:
f0:19:32:5a:cc:6c:67:5c:5a:81:6b:08:48:3e:25:
56:ce:0a:eb:7a:4c:e5:3f:ef:95:09:69:93:05:56:
18:10:71:02:e9:94:65:45:74:d8:02:52:0d:a2:65:
56:4d:ac:35:fa:9b:86:50:06:fc:05:25:81:f4:ec:
02:e1:68:15:12:a9:c7:3e:38:af:27:d8:cc:9a:fc:
29:1b:5c:13:b4:1b:b4:39:4e:8b:d4:69:d9:cd:8a:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:FB:EB:98:72:D4:B8:5D:ED:61:7B:9E:52:80:E8:3D:61:88:CE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JVT765hy1Lhd7WF7nlKA6D1hiM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.2.0-82.115.7.255
Signature Algorithm: sha256WithRSAEncryption
d0:7a:38:bc:e3:58:89:b6:16:60:40:14:4e:0f:25:b0:8d:49:
25:9c:0a:80:4f:46:fc:ba:e4:b9:cb:57:7d:3c:63:1a:b8:8f:
cb:00:51:40:9d:d7:1e:5d:2b:54:0c:97:d7:a9:4b:ef:b9:dc:
fc:51:a6:d2:3f:42:1b:21:57:1b:d2:a8:bb:e8:eb:d7:13:4b:
f2:74:a8:ad:aa:96:8d:00:9e:2f:a6:0f:52:16:6d:3d:63:55:
09:99:a2:3b:d6:9a:9e:0b:b1:8d:6d:3a:fb:f9:72:6a:99:be:
27:dc:a9:8e:ee:87:a1:e5:73:d9:1a:ce:de:d1:9c:10:04:bb:
3c:62:72:e9:2c:62:3c:04:af:43:03:41:c0:0f:41:46:1a:b3:
ca:83:33:36:6d:24:1d:7e:4f:5c:5c:ce:78:1d:15:a0:08:36:
c4:db:e2:cc:8d:50:07:25:04:b3:ef:28:97:f6:17:ff:2a:cf:
c1:cf:e7:34:09:db:ee:03:48:a9:33:ab:71:60:10:b7:92:77:
aa:66:53:11:dd:41:5e:8a:a1:28:ec:7a:b2:33:74:be:52:f2:
c2:7c:8d:5c:16:4f:dc:48:c8:15:37:02:12:50:32:79:98:27:
04:83:01:e3:8c:e9:bc:24:b3:01:33:6c:76:25:d3:3c:29:23:
22:6f:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org