Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/JLrqn-yKaiQFDfzGr_-Z58i8FTY.roa
File: JLrqn-yKaiQFDfzGr_-Z58i8FTY.roa (raw, json)
Hash identifier: dMBCXQKT4E0DPYDmEZ4NBWqRUzZyukZgKDHadKOxIdY=
Subject key identifier: 24:BA:EA:9F:EC:8A:6A:24:05:0D:FC:C6:AF:FF:99:E7:C8:BC:15:36
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0F6FDCB3
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/JLrqn-yKaiQFDfzGr_-Z58i8FTY.roa
Signing time: Sat 01 Jan 2022 01:52:08 +0000
ROA not before: Sat 01 Jan 2022 01:52:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 141.37.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258989235 (0xf6fdcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jan 1 01:52:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24baea9fec8a6a24050dfcc6afff99e7c8bc1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:77:64:48:24:df:3d:b3:bc:0a:4b:3d:19:
d9:30:25:4b:92:58:4b:c3:43:14:1c:d1:13:3e:a5:
02:5b:ab:7b:1b:67:cd:66:d2:bd:10:cd:e4:a7:00:
f8:0b:f0:09:df:ac:50:b5:19:ab:9d:b3:55:80:c1:
76:95:2a:c0:9e:c4:64:ba:44:61:60:77:49:c2:aa:
ba:40:d9:fc:f8:6e:3f:c9:f0:02:ea:07:be:44:24:
ca:2a:f0:8d:6d:aa:63:38:d5:08:43:79:22:b7:d6:
6f:2f:54:71:0c:3d:3f:cc:29:c2:60:25:77:4e:eb:
71:84:da:b2:2b:2c:74:dc:97:8d:4b:35:96:7e:d5:
fa:d4:e8:ac:db:7c:2a:e4:0d:c7:cc:fa:26:96:c6:
57:ef:01:f3:df:7a:c4:21:f0:53:58:30:53:07:7d:
47:c6:52:1d:5a:38:e6:bf:5d:d2:f3:ee:d3:7c:04:
af:e8:9f:d9:82:ad:cd:05:a1:8a:d9:28:cb:6e:5b:
a5:22:e9:e9:81:6b:8f:e6:68:c1:e5:db:69:ef:8b:
a4:97:d7:f8:9e:1e:cd:36:fb:5a:80:3d:53:51:b0:
d9:09:48:2e:b0:15:57:fd:1d:fe:f2:f7:ae:ef:ec:
d0:93:6a:61:05:95:f1:31:d1:38:7c:77:0c:ce:96:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:EA:9F:EC:8A:6A:24:05:0D:FC:C6:AF:FF:99:E7:C8:BC:15:36
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/JLrqn-yKaiQFDfzGr_-Z58i8FTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:25:6c:02:14:84:4b:d4:14:e9:13:c1:67:b7:0f:f1:cb:a9:
d9:36:05:55:08:4e:b7:f3:e5:73:9f:69:d3:0b:94:57:6c:e9:
2a:ed:eb:9e:50:fd:30:18:0f:b6:f0:29:56:83:23:ea:67:56:
f7:c2:b8:c1:c3:57:52:1d:19:69:16:44:32:91:b3:a6:0f:c2:
c8:6c:d6:f3:2d:6d:ee:9f:3b:15:83:cb:22:ce:59:e1:53:e0:
cd:22:ae:3f:26:1e:19:ca:b2:71:49:22:db:4c:af:f7:e7:d0:
b3:2b:8c:62:f3:d7:87:79:68:c6:03:f2:c0:0f:e3:25:74:29:
53:ae:ee:ec:1f:ac:54:f2:a6:5f:e0:2e:79:ba:08:94:54:c9:
44:66:3a:8d:a7:4c:68:10:40:cc:20:bd:64:7a:73:b3:7e:43:
12:6f:c7:d8:df:5d:58:8d:e1:6c:dc:be:78:31:9d:4e:64:99:
09:c4:5b:b8:b8:80:27:5f:76:d0:dc:d4:62:c0:c4:a0:46:04:
ff:b6:94:ab:31:4a:69:8a:c7:f8:bb:4c:af:57:d2:38:56:ad:
c9:2a:2e:fb:89:78:6b:96:22:38:52:e1:ee:99:0f:8e:1c:2c:
a7:cc:24:1a:c7:44:a8:55:d8:59:50:ca:6c:b9:39:92:57:5d:
69:ae:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:26 2024 by rpki-client on console-fra.rpki-client.org