Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/JiRotwXCoDWYIIFWqiY1yZ_UJPI.roa
File: JiRotwXCoDWYIIFWqiY1yZ_UJPI.roa (raw, json)
Hash identifier: tZQMfuPcfppqdxp126LEJ6MVTFIDOPL4q7BSGQX5cl4=
Subject key identifier: 26:24:68:B7:05:C2:A0:35:98:20:81:56:AA:26:35:C9:9F:D4:24:F2
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 02FDC9F6
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/JiRotwXCoDWYIIFWqiY1yZ_UJPI.roa
Signing time: Sat 01 Jan 2022 01:59:54 +0000
ROA not before: Sat 01 Jan 2022 01:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202709
IP address blocks: 193.25.196.0/24 maxlen: 24
193.25.194.0/24 maxlen: 24
193.24.36.0/24 maxlen: 24
193.25.223.0/24 maxlen: 24
2a0f:76c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50186742 (0x2fdc9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: Jan 1 01:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=262468b705c2a03598208156aa2635c99fd424f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:5a:58:94:5d:a9:a0:c1:7e:d8:a4:94:26:
56:45:25:d3:be:a4:ff:64:5d:7b:45:da:d0:af:31:
7e:2d:e9:40:8b:ea:c8:93:62:7f:3a:23:c5:3c:ba:
cf:16:c8:04:3b:e5:33:b0:10:95:ff:10:3c:7d:7d:
98:80:89:31:6d:88:a9:24:17:86:64:7c:1b:03:33:
6a:ae:50:a8:01:c4:fd:8e:8a:ad:70:8c:77:53:e0:
ea:bb:c9:22:26:0d:78:c2:83:60:c3:6b:21:d8:cf:
dd:b4:ea:73:f6:fc:8f:4b:35:38:1e:7f:d3:a3:4b:
ed:a2:00:8e:93:85:2d:df:aa:2b:71:b1:8d:5e:92:
91:24:0e:23:f7:bd:ca:6a:40:4d:19:a2:31:c1:c3:
85:18:38:80:11:4e:87:3c:a2:1f:36:af:b2:35:2e:
c0:be:4e:de:f3:5c:e0:67:74:f8:ec:28:12:06:44:
d5:b4:e1:c5:ce:9f:2b:fd:09:6a:28:66:f1:d0:ab:
0b:d3:69:a5:0b:a5:ac:2c:18:bb:8d:53:93:9e:84:
67:b5:00:bb:78:2b:62:8c:f6:4e:f3:d2:7c:9c:b2:
f5:a9:33:60:94:02:8d:ea:69:bf:a5:55:a6:fd:2f:
d3:d1:16:0c:91:5b:93:27:0e:d0:25:2d:6b:a0:2c:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:68:B7:05:C2:A0:35:98:20:81:56:AA:26:35:C9:9F:D4:24:F2
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/JiRotwXCoDWYIIFWqiY1yZ_UJPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.36.0/24
193.25.194.0/24
193.25.196.0/24
193.25.223.0/24
IPv6:
2a0f:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:e2:2b:70:a2:b7:66:cd:dc:8e:16:a8:ff:31:0a:ab:87:30:
f2:ce:f2:ef:b3:fe:84:d1:99:b9:18:f9:77:89:e8:d1:1e:d3:
58:95:4d:48:7c:a3:2e:ab:8c:1c:34:69:b4:9b:9e:72:7f:6c:
fa:c0:61:90:df:cf:20:f0:56:85:c1:1c:36:83:20:a3:01:33:
9e:d7:6f:23:c7:99:c4:b1:ae:7c:35:0f:22:a9:dd:bf:c2:ca:
a2:0f:52:34:8a:e4:d6:66:d8:77:97:09:2b:0c:05:43:78:b8:
d3:57:45:82:b0:76:a8:bb:78:d8:68:93:1f:62:2c:d1:ae:87:
8a:c4:1e:24:5d:60:d2:c2:3a:d8:22:c9:27:0c:44:71:0f:03:
11:8c:18:24:19:11:b9:20:cf:1f:45:d6:c2:e4:9d:dd:03:31:
46:2c:7d:f1:9c:11:27:f4:ca:47:36:a5:17:88:e7:32:b8:f8:
2c:6d:eb:56:9c:ea:05:a9:17:df:b6:51:d6:06:8c:98:4b:d1:
2b:c4:36:38:db:e4:50:aa:19:7e:94:c0:d6:65:31:ed:8b:fc:
d5:d8:7e:71:46:07:9d:6b:2a:48:b3:bf:07:c9:5a:cb:e5:d6:
c7:27:e9:c1:f4:d8:38:d4:73:26:a6:c3:28:28:be:b1:e4:1b:
3e:78:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:18 2024 by rpki-client on console-ams.rpki-client.org