Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/JUlQank3Ib7G-oH5m94JK-ZQW3U.roa
File: JUlQank3Ib7G-oH5m94JK-ZQW3U.roa (raw, json)
Hash identifier: HSZ03eTgA1JXADSj5ohIzlh3XwLcgXNqjkAZbkoUu6M=
Subject key identifier: 25:49:50:6A:79:37:21:BE:C6:FA:81:F9:9B:DE:09:2B:E6:50:5B:75
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 01834DA0CB71D34904FAD4C6641243FB5C85
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/JUlQank3Ib7G-oH5m94JK-ZQW3U.roa
Signing time: Sat 17 Sep 2022 22:45:26 +0000
ROA not before: Sat 17 Sep 2022 22:45:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20253
IP address blocks: 146.19.181.0/24 maxlen: 26
217.20.49.0/24 maxlen: 24
217.20.48.0/24 maxlen: 24
217.20.50.0/24 maxlen: 24
2a12:45c7:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4d:a0:cb:71:d3:49:04:fa:d4:c6:64:12:43:fb:5c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Sep 17 22:45:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2549506a793721bec6fa81f99bde092be6505b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:5a:bd:4a:6f:7f:66:a6:46:e7:8c:55:6c:
eb:e5:94:53:05:f4:d2:93:a1:5a:94:e7:6e:7f:7f:
56:ac:dc:39:76:c0:69:50:28:76:1d:e5:e5:6b:31:
54:d0:ca:8b:ae:62:a4:af:d8:b5:f4:96:b5:93:ea:
49:a5:ec:d2:16:4f:4c:0e:b0:c0:30:7d:d8:84:80:
fd:f1:dc:19:7a:7f:d9:54:34:bf:2b:64:e4:f7:ad:
a1:bf:fe:d7:5c:b6:1a:a9:1c:82:6c:7c:78:24:af:
5f:a1:5c:75:f6:60:ea:61:45:1a:61:35:5e:3d:f2:
e1:67:0c:d8:0e:25:5c:f4:ba:da:50:c5:a0:16:ba:
f1:9f:80:e9:72:76:db:a8:23:82:7e:58:80:b5:c8:
98:c5:6f:f7:4d:ca:52:d0:58:0d:39:a2:89:81:b4:
83:11:db:86:e0:19:11:ce:f6:89:68:66:d1:de:c9:
57:f2:39:9e:f2:4a:3b:7f:7a:36:c3:17:d9:66:2a:
d8:c3:05:23:c1:d8:df:35:f2:4c:5e:f2:7e:f5:cf:
ef:3e:52:34:01:fc:da:89:0b:59:f4:8a:41:9c:a8:
17:95:47:12:dd:12:f4:f1:87:74:66:ed:7c:63:24:
72:06:65:90:ac:d8:3b:d1:d1:62:64:f7:aa:cd:26:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:49:50:6A:79:37:21:BE:C6:FA:81:F9:9B:DE:09:2B:E6:50:5B:75
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/JUlQank3Ib7G-oH5m94JK-ZQW3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.181.0/24
217.20.48.0-217.20.50.255
IPv6:
2a12:45c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
7d:5a:71:22:af:33:b9:36:bd:d6:2f:02:57:25:d8:88:4d:a8:
53:99:ef:68:61:87:ef:c8:02:0b:20:b2:87:27:88:d8:c8:04:
21:a1:74:40:e7:94:63:a6:b9:0d:1f:c3:87:2a:8b:41:a1:39:
12:1c:00:50:1f:81:cc:88:8b:51:cc:47:56:06:a7:3b:4d:05:
59:5a:25:d5:49:a2:40:c7:28:aa:5b:8b:ab:70:2d:16:cc:5e:
cd:73:a1:66:fb:38:d6:a1:6c:9a:7d:e6:e6:81:2d:9a:59:e2:
97:9a:18:4f:90:d9:eb:d2:de:88:a6:94:4a:91:67:3d:1e:a7:
bd:a0:9f:93:78:37:b3:1c:77:2c:73:bb:f9:fb:21:f8:15:f2:
1c:42:24:77:d5:94:1d:15:b7:9e:f9:e4:a9:8d:aa:6c:9e:5f:
74:c3:ed:01:14:e7:5f:08:5b:e4:e4:00:c1:c4:08:43:c7:53:
27:5f:46:96:69:99:ae:3d:b5:82:97:fa:87:8f:5c:d4:cb:1d:
02:6d:01:8d:fa:62:3c:ec:43:c3:e8:9f:3a:1e:ea:d7:06:40:
55:39:11:59:fc:53:2f:66:ef:a5:c5:57:2e:65:d3:8a:21:e3:
14:c8:b0:cb:b7:ee:9d:99:ce:60:49:10:c5:4c:2f:6c:55:a1:
21:34:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:57 2024 by rpki-client on console-ams.rpki-client.org