Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JkronTYl3KvP_Yc9UIUlTVoYzJU.roa
File: JkronTYl3KvP_Yc9UIUlTVoYzJU.roa (raw, json)
Hash identifier: L30xst4cpjcJtlmINoxQofP2bAxLJBH40B9ZHrMY5zw=
Subject key identifier: 26:4A:E8:9D:36:25:DC:AB:CF:FD:87:3D:50:85:25:4D:5A:18:CC:95
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0184945A4B9D384B9EF13D346C4F043AE0E1
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JkronTYl3KvP_Yc9UIUlTVoYzJU.roa
Signing time: Sun 20 Nov 2022 09:24:16 +0000
ROA not before: Sun 20 Nov 2022 09:24:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 148.222.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:94:5a:4b:9d:38:4b:9e:f1:3d:34:6c:4f:04:3a:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Nov 20 09:24:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=264ae89d3625dcabcffd873d5085254d5a18cc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:6d:90:71:37:4a:2f:83:7d:96:34:f9:b7:
24:ac:70:72:62:1b:7b:bc:1d:b3:22:21:ac:67:00:
ca:8a:71:8a:b8:02:89:4a:f1:3c:a8:16:39:c9:93:
10:45:22:9f:54:d8:ac:f7:9e:65:4b:6e:83:92:cd:
01:f3:1a:12:b2:05:e9:76:2d:c2:fb:f7:17:f8:ef:
26:99:44:3a:8c:c4:45:f6:6a:b8:6f:8b:72:b5:a7:
3f:66:ce:67:b6:1c:5d:3a:28:57:d8:2e:1b:17:49:
b8:08:4c:42:29:f7:0d:84:b7:fb:18:4a:e2:06:63:
fa:12:6e:45:ef:7f:25:ab:46:d8:8e:60:24:fa:5d:
59:d1:d7:97:60:94:5d:3b:a0:09:b9:70:cf:b0:eb:
d4:fe:93:1b:c4:f5:45:49:32:9b:6f:07:a7:71:aa:
2e:3b:c7:a2:a4:8c:43:82:ea:a8:82:87:fb:f2:95:
8f:88:19:6c:19:c9:e8:db:a8:ee:88:f7:67:69:47:
b1:04:09:7b:74:e6:01:b2:ff:e9:2c:0e:b2:b1:a7:
79:db:3d:d7:33:6e:8e:cf:00:6c:b4:f0:44:ff:f4:
c0:1c:f7:f4:8d:07:83:66:2f:01:5e:81:e4:52:59:
b1:98:aa:c6:bd:2c:e3:1a:c4:14:5e:8d:9f:43:f1:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:E8:9D:36:25:DC:AB:CF:FD:87:3D:50:85:25:4D:5A:18:CC:95
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JkronTYl3KvP_Yc9UIUlTVoYzJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:40:66:ec:8b:a6:3d:af:bd:23:04:24:d1:8a:06:3e:66:92:
30:d0:fd:3c:58:75:37:ac:6a:0f:1b:08:e2:ec:01:4c:64:c6:
a6:05:07:da:69:da:a2:73:58:7b:60:6d:59:31:b7:7c:a2:f3:
f0:0e:7a:25:8c:6b:07:81:c9:fc:ce:52:5d:ba:d9:50:6f:74:
00:ab:f1:4d:f1:e0:50:bd:58:9c:5a:14:c8:cd:81:6b:80:f3:
90:74:d5:68:d8:61:6d:09:12:e6:aa:50:6c:33:26:31:cc:ce:
ea:c5:f3:ef:f6:df:54:e9:cd:45:dd:fb:82:e6:6a:ab:32:71:
e6:29:15:dd:c1:f4:c9:62:a4:e7:53:b4:81:81:18:81:27:cf:
1a:14:7e:37:c1:5d:83:35:98:a0:50:12:38:00:1b:90:39:b8:
e0:d2:d0:b8:44:f3:7d:22:a6:67:8c:a3:86:39:26:da:11:9f:
98:c8:d7:86:30:03:bd:46:26:cf:57:98:5e:b2:12:e0:3f:d8:
ca:cf:30:90:e8:9b:bc:7d:55:44:64:d2:ce:31:01:e1:71:29:
1d:37:5a:08:3e:0f:f8:07:df:fa:dd:02:e5:99:f7:eb:aa:69:
d0:a6:1c:e9:31:2b:cd:d6:f1:a8:18:15:45:c4:65:68:f1:09:
b0:86:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org