Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JcDXPR_Q25CgECl110FmpgpzQJw.roa
File: JcDXPR_Q25CgECl110FmpgpzQJw.roa (raw, json)
Hash identifier: syFrykHrO3qVjcr6J3FpllIZiBCBwAyHoJ5CnxbiKqM=
Subject key identifier: 25:C0:D7:3D:1F:D0:DB:90:A0:10:29:75:D7:41:66:A6:0A:73:40:9C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 187AA633
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JcDXPR_Q25CgECl110FmpgpzQJw.roa
Signing time: Fri 03 Jun 2022 08:59:20 +0000
ROA not before: Fri 03 Jun 2022 08:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49200
IP address blocks: 46.243.213.0/24 maxlen: 24
46.243.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410691123 (0x187aa633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 3 08:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25c0d73d1fd0db90a0102975d74166a60a73409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:ad:68:56:6e:57:cb:bc:15:e5:74:36:c3:
52:e9:4f:d4:41:de:80:70:f1:5a:29:45:14:23:20:
2a:91:56:1e:e7:f8:62:74:f7:a5:b7:22:0b:fb:3c:
14:e3:0a:79:96:2c:08:96:8c:a4:b5:28:cd:0a:9e:
a9:58:28:fb:45:da:67:cd:4f:80:0c:1b:68:37:2e:
b4:ec:2d:8c:39:fc:72:33:22:d0:f5:93:61:14:5e:
b7:b8:29:05:a5:18:cc:4b:f9:43:03:b8:c1:e1:47:
72:73:78:40:36:a8:4f:99:15:76:8a:f7:3e:21:3f:
64:28:c0:d8:73:86:72:4b:c5:f9:e3:4a:4e:83:a1:
06:a3:e7:6e:70:d9:24:84:7a:6c:0e:e1:f2:d6:30:
1d:1e:af:bf:a4:f0:fc:e6:1a:20:96:47:15:bc:69:
8c:06:1d:4d:cb:d6:1f:bd:1c:a4:a9:91:1d:2b:31:
3a:ed:24:b3:5b:1c:08:cc:77:bf:19:68:70:1e:54:
be:d3:d8:a0:ba:c9:fb:a7:a4:a3:ab:24:2b:84:22:
82:98:d2:8b:1e:41:ea:34:ae:34:fc:a1:d9:20:13:
03:e7:ac:86:5c:9c:93:6d:25:fc:ac:de:18:82:8f:
06:e1:1e:83:16:5d:9f:d7:d0:6a:83:a6:43:ed:81:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:D7:3D:1F:D0:DB:90:A0:10:29:75:D7:41:66:A6:0A:73:40:9C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JcDXPR_Q25CgECl110FmpgpzQJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.207.0/24
46.243.213.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:71:31:ba:3d:d8:79:b0:3d:5e:76:89:38:77:de:cc:25:b1:
a6:c7:22:ff:6b:67:70:0b:7b:a5:90:93:e6:89:be:80:6f:76:
60:34:84:24:f5:66:0f:63:53:ae:b1:c8:3a:87:f4:c9:1e:48:
55:ac:11:60:f9:95:c9:32:66:f5:8c:7d:00:d4:7a:08:c9:81:
9b:94:00:51:57:64:8a:03:fd:e3:ef:82:36:91:89:aa:f8:c6:
12:dd:53:75:21:f4:9d:5e:bb:d5:7f:50:26:b5:12:50:08:47:
73:ee:7c:fd:01:e1:dc:12:93:cc:0a:87:d4:1d:86:53:ac:01:
f8:06:3a:73:73:83:02:25:56:a2:0c:73:53:0c:50:d9:7c:ce:
31:c4:b6:17:e6:ad:cd:c5:6a:e3:cf:ca:e0:e5:59:5c:df:24:
a6:60:12:05:73:8f:52:99:09:1a:7a:60:66:e4:fa:7d:19:48:
53:94:cb:22:78:24:be:87:de:34:ba:13:4e:ac:f2:65:5d:b0:
90:d7:f8:63:98:8c:3d:26:60:63:4d:34:f0:f8:4c:fb:bf:9b:
4b:56:c2:bd:f5:0f:f9:b2:39:c7:19:3c:7c:12:76:73:2e:10:
da:88:b8:6b:1b:83:51:83:58:4c:b7:72:50:84:cf:22:e2:2c:
44:fa:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org