Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/JTjN_69Ty_UcQdglMz8KasbTgj8.roa
File: JTjN_69Ty_UcQdglMz8KasbTgj8.roa (raw, json)
Hash identifier: 4vf4TedSrDRcLw7f5hx8GmMs4UYtaTgjJDIlaBpCFWk=
Subject key identifier: 25:38:CD:FF:AF:53:CB:F5:1C:41:D8:25:33:3F:0A:6A:C6:D3:82:3F
Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial: 01CBCFFC
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/JTjN_69Ty_UcQdglMz8KasbTgj8.roa
Signing time: Sat 01 Jan 2022 08:53:49 +0000
ROA not before: Sat 01 Jan 2022 08:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211219
IP address blocks: 194.31.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30134268 (0x1cbcffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Validity
Not Before: Jan 1 08:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2538cdffaf53cbf51c41d825333f0a6ac6d3823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:06:a8:05:41:ac:f0:ee:df:e1:9d:69:58:
ba:29:8b:b9:b9:7f:a0:c3:22:4d:97:a5:5f:f5:70:
36:11:ae:48:ee:99:13:39:85:c5:42:33:f8:ab:29:
95:53:82:95:46:38:b4:b4:e2:2d:db:f3:9a:4e:f5:
5f:57:07:1e:90:1d:21:29:67:1b:e0:d7:c9:13:21:
eb:ba:8c:77:45:e6:54:58:ec:da:ec:52:1f:88:08:
7a:8c:16:3d:ad:f7:e4:ca:d8:56:1b:4c:32:f2:5d:
14:19:01:18:39:03:fc:9e:26:71:5c:db:bd:ce:a6:
bb:88:93:89:8a:fd:1f:4b:b4:82:4b:6f:55:ed:2c:
2c:06:31:9a:14:b6:ff:6d:be:43:ba:51:ff:d2:13:
97:b7:2d:a9:77:d0:05:4d:14:b7:c4:ec:6e:a0:9c:
af:01:40:89:e1:60:5f:cb:3b:dc:21:75:be:b0:1f:
c3:69:48:47:ee:e9:3f:1d:8e:00:58:e3:42:e8:68:
5f:26:e6:a9:34:cf:34:1a:c1:a7:bd:92:c1:33:fb:
22:da:af:55:64:eb:9b:46:12:c3:ac:f2:3b:6b:8c:
a9:be:15:35:8d:1c:e0:73:e2:30:84:00:3f:0e:c0:
2e:54:b9:9d:b6:76:89:97:aa:3e:ad:26:3d:ec:bd:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:CD:FF:AF:53:CB:F5:1C:41:D8:25:33:3F:0A:6A:C6:D3:82:3F
X509v3 Authority Key Identifier:
keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/JTjN_69Ty_UcQdglMz8KasbTgj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.253.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f4:ef:a8:37:77:84:b5:a1:5d:59:f6:29:5a:e2:d3:d6:81:
61:6c:cc:5e:4e:80:5b:43:52:63:3c:17:3b:c2:05:6f:11:47:
68:d6:44:fb:81:30:a8:03:71:70:b8:04:c3:9c:12:f4:d5:55:
12:ca:df:b7:a3:aa:fe:45:99:9f:94:0f:75:40:25:03:a2:5b:
ce:30:4d:65:66:b0:6d:e1:ad:76:66:45:cf:8f:53:9b:8d:26:
9a:c3:07:a8:93:86:c5:84:ae:32:08:e5:77:dc:60:9b:2d:0f:
ea:2a:5f:76:1f:6b:52:f6:e2:65:37:ef:b3:e1:0c:73:fc:e1:
77:a3:81:2a:64:e1:87:20:a4:cf:ee:0f:75:42:c2:50:2f:b8:
d0:64:64:d0:c4:70:4e:b1:3e:f5:55:07:60:e8:e3:86:a8:ba:
29:23:21:cc:7b:4d:83:03:0d:42:b4:03:21:31:38:cc:04:bd:
cd:61:2d:7a:cf:66:c9:33:af:2b:7b:ca:a2:4b:0b:07:9d:a1:
0e:e4:23:a0:17:05:93:a4:c4:dc:45:ee:0a:df:0f:27:d2:9a:
ff:78:12:19:e8:92:7c:b8:57:31:00:5c:9b:dc:25:fc:c8:5d:
57:54:25:15:a2:9a:89:c7:7a:99:c4:e9:32:d0:9e:06:55:80:
eb:82:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:12 2024 by rpki-client on console-ams.rpki-client.org