Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/jXNK6UNTP-w4UJc-X4AElOF0Pss.roa
File: jXNK6UNTP-w4UJc-X4AElOF0Pss.roa (raw, json)
Hash identifier: cFnbdpg1h5/snWB9YBqDS3bHPifDs0OostkOs0GILEE=
Subject key identifier: 8D:73:4A:E9:43:53:3F:EC:38:50:97:3E:5F:80:04:94:E1:74:3E:CB
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 07128083
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/jXNK6UNTP-w4UJc-X4AElOF0Pss.roa
Signing time: Sat 01 Jan 2022 11:54:00 +0000
ROA not before: Sat 01 Jan 2022 11:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202672
IP address blocks: 92.119.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118653059 (0x7128083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 11:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d734ae943533fec3850973e5f800494e1743ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:4d:17:1d:f4:aa:78:bf:d8:9d:c8:55:a2:
77:a9:d0:80:16:de:42:d1:34:20:7c:a1:01:78:0b:
93:2c:d0:31:c8:a1:9a:a4:87:0a:68:d0:b9:b5:56:
45:9d:89:91:16:ac:18:58:45:e3:29:82:e5:6f:55:
c6:66:da:39:1d:15:6b:74:ee:41:94:af:b5:0a:9b:
0e:ca:ea:e9:bd:55:e3:17:b9:cc:c1:d3:01:c4:81:
f9:fc:2f:81:1e:56:09:77:f6:ac:19:a4:2e:f7:c7:
26:5a:dc:3f:80:7b:3d:ed:e0:03:20:85:3d:73:d8:
c4:43:cc:64:37:5c:75:f4:34:c6:de:04:73:6d:48:
1b:40:39:a5:d4:e1:bc:8c:75:4b:12:e8:4b:1f:85:
60:b1:d1:c8:de:04:d1:ea:14:69:66:b1:25:e8:11:
23:7a:c7:a0:f1:8c:6f:80:6e:bf:a1:03:45:bd:34:
46:0c:dc:eb:d8:b5:34:cd:0d:54:ee:fe:97:b7:da:
a5:18:62:8b:02:ba:89:e0:87:b5:2e:11:76:45:e5:
22:ad:43:1f:5f:32:87:8a:e3:b3:c2:8b:8c:90:ed:
48:1d:58:62:ad:c1:bd:7d:92:e0:ef:49:89:9c:cb:
02:e6:f9:72:6d:c3:92:94:f0:0d:16:9c:e4:a2:5c:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:4A:E9:43:53:3F:EC:38:50:97:3E:5F:80:04:94:E1:74:3E:CB
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/jXNK6UNTP-w4UJc-X4AElOF0Pss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:95:58:bd:27:c5:67:d6:07:37:1c:ce:9f:f8:49:2b:39:95:
69:45:8f:fa:6d:26:20:70:66:32:a0:5c:72:b6:71:98:b1:fc:
27:82:57:3f:5d:da:68:b9:09:74:cd:08:ad:cb:f8:23:8f:7c:
ec:c2:2e:a7:9c:41:4a:9f:f6:08:e5:36:4e:bc:43:fa:90:e3:
c9:a8:ae:5e:ab:37:54:20:1b:1e:72:46:77:b4:c9:5f:79:ac:
04:10:75:90:06:3d:b1:bc:59:f5:93:4e:d9:d1:a2:65:8b:f0:
da:37:3e:9e:27:ea:36:bb:22:37:f3:d9:f3:7d:eb:d4:64:e4:
c6:0f:16:fa:1b:96:48:81:81:14:3f:60:6f:f9:91:d8:85:ee:
03:fa:88:93:cc:73:0d:71:94:00:55:ff:a9:a0:0d:84:07:e8:
cc:6c:ff:b1:8c:e9:ee:ad:6d:73:54:ad:6a:75:b6:da:01:90:
46:19:5c:d4:dd:c6:03:22:6a:5a:67:65:2f:14:90:b7:5c:dc:
40:62:98:b4:e8:c3:51:f1:7a:00:48:05:f9:16:6d:68:17:1e:
c4:3e:63:71:f2:b7:d3:6a:fb:9f:c1:ce:df:66:54:58:bf:d4:
de:c8:8d:77:b9:d0:5f:8a:3a:03:09:64:a7:7b:19:13:ce:34:
7d:29:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org