Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/jGoej_fQYkxFsk3t48QK0bFDRbw.roa
File: jGoej_fQYkxFsk3t48QK0bFDRbw.roa (raw, json)
Hash identifier: L9NqNo1HW7I+ivWJHne+D6d6CKOvSrA8TFY/9QNSfQ4=
Subject key identifier: 8C:6A:1E:8F:F7:D0:62:4C:45:B2:4D:ED:E3:C4:0A:D1:B1:43:45:BC
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 062C5B16
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/jGoej_fQYkxFsk3t48QK0bFDRbw.roa
Signing time: Sat 01 Jan 2022 13:06:02 +0000
ROA not before: Sat 01 Jan 2022 13:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48254
IP address blocks: 194.38.52.0/24 maxlen: 24
185.151.30.0/24 maxlen: 24
185.151.29.0/24 maxlen: 24
185.151.31.0/24 maxlen: 24
185.146.166.0/24 maxlen: 24
185.146.165.0/24 maxlen: 24
185.146.164.0/24 maxlen: 24
45.8.226.0/24 maxlen: 24
45.8.225.0/24 maxlen: 24
45.8.224.0/24 maxlen: 24
45.8.227.0/24 maxlen: 24
2a07:7800:9::/48 maxlen: 48
2a07:7800:4::/48 maxlen: 48
2a07:7800:8::/48 maxlen: 48
2a07:7800:3::/48 maxlen: 48
2a07:7800:1::/48 maxlen: 48
2a07:7800::/29 maxlen: 48
2a07:7800:7::/48 maxlen: 48
2a07:7800:2::/48 maxlen: 48
2a07:7800:5::/48 maxlen: 48
2a07:7800:10::/48 maxlen: 48
2a07:7800::/48 maxlen: 48
2a07:7800:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103570198 (0x62c5b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Jan 1 13:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c6a1e8ff7d0624c45b24dede3c40ad1b14345bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:0a:d2:8e:00:76:3b:6b:08:e1:82:7f:40:
16:70:4b:0d:23:b1:e6:42:6a:d8:75:8a:53:87:8e:
22:4f:10:77:62:a8:6f:e2:4f:f1:70:3e:5f:59:7d:
69:47:e5:98:76:8b:1e:5c:48:c1:3a:e6:65:10:b6:
ec:44:2b:19:d6:0d:4a:ba:b6:d5:46:5d:1f:17:96:
3e:9c:02:a5:98:fb:81:9d:97:da:db:c0:c6:a3:9f:
bf:d9:c8:be:e1:d2:02:a1:b9:16:55:54:7f:32:48:
35:4a:d1:c2:b1:68:48:53:eb:52:9b:d2:a2:6b:c5:
c6:24:2f:b2:5a:b4:8a:67:48:cf:9c:99:e9:77:4a:
f8:3d:da:21:ae:89:8d:20:8f:e2:0f:2c:9a:0c:d4:
e0:ba:01:0e:eb:a5:9f:da:77:a0:0a:3a:89:59:0c:
0f:0d:e4:39:99:0e:2e:24:38:4a:24:fe:3a:38:b7:
84:25:21:da:5c:ce:f4:90:ba:da:db:8e:74:a2:9f:
be:c2:86:72:cd:6b:e7:34:49:ec:dc:6a:3e:62:e5:
58:30:d5:77:4a:c6:4e:d3:fc:db:98:c7:af:41:51:
ff:98:0a:47:f5:7f:d8:db:f2:72:3f:6c:4a:4d:e4:
83:6a:da:14:f2:e2:43:4f:f7:ab:49:6c:7f:5d:89:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:1E:8F:F7:D0:62:4C:45:B2:4D:ED:E3:C4:0A:D1:B1:43:45:BC
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/jGoej_fQYkxFsk3t48QK0bFDRbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.224.0/22
185.146.164.0-185.146.166.255
185.151.29.0-185.151.31.255
194.38.52.0/24
IPv6:
2a07:7800::/29
Signature Algorithm: sha256WithRSAEncryption
35:e8:49:6e:49:c6:e0:21:28:75:b7:5d:91:52:e1:15:f1:90:
a1:65:6d:a6:07:73:3f:01:cd:7a:9c:dc:8b:b1:6f:ee:39:01:
c2:f5:d2:fb:96:7d:c0:dc:65:fb:78:a8:f1:ae:8f:66:54:a8:
15:f6:3c:28:d6:9f:d3:35:7d:d6:b4:5c:45:dd:3e:75:2d:aa:
de:a4:15:52:bd:f3:1b:f9:12:65:bf:7f:0a:6d:52:f6:7e:31:
ed:5d:65:7a:a3:b3:6d:9d:50:8d:6c:d7:85:dc:3e:9e:5a:6d:
58:c8:d7:6d:3e:f9:f1:9a:b8:f7:10:11:7b:f9:35:89:82:a5:
91:0b:cf:52:d7:44:d6:50:0e:aa:1b:00:f2:68:56:04:c9:71:
98:4f:d0:f2:be:5a:1b:48:d2:6d:5c:ac:90:67:50:41:0a:a9:
cf:64:22:6d:3c:e4:38:df:b3:ee:a0:9b:a6:c5:6c:e8:a1:85:
65:33:5b:dc:1d:3e:99:0a:79:70:50:c6:9c:1b:6b:1b:8f:79:
88:2d:d7:8d:6e:ca:95:34:cf:0b:2a:1c:93:0a:1a:77:42:fb:
1e:70:6a:96:76:eb:30:b6:aa:3a:de:da:cf:b1:33:d8:61:16:
d5:60:3f:bc:ef:d6:42:d4:59:22:13:0b:72:44:7b:49:4b:f8:
f8:03:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org