Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/JC-fm-p3S2cHvw_qWPFt96ww_zc.roa
File: JC-fm-p3S2cHvw_qWPFt96ww_zc.roa (raw, json)
Hash identifier: cCHIWEZj9RboutqtbGI7L2uWWB7pvUSZovBZ3tuMBgE=
Subject key identifier: 24:2F:9F:9B:EA:77:4B:67:07:BF:0F:EA:58:F1:6D:F7:AC:30:FF:37
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 01840F7675FE4BF10727807B99DCA0E5D053
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/JC-fm-p3S2cHvw_qWPFt96ww_zc.roa
Signing time: Tue 25 Oct 2022 14:05:32 +0000
ROA not before: Tue 25 Oct 2022 14:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 178.249.140.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:76:75:fe:4b:f1:07:27:80:7b:99:dc:a0:e5:d0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Oct 25 14:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242f9f9bea774b6707bf0fea58f16df7ac30ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:cc:de:ed:9b:7c:6d:93:83:41:9e:73:62:
fb:92:43:ae:22:65:db:00:dc:29:2e:55:74:7d:72:
f4:cc:d5:3b:6d:31:ba:ef:ef:b2:db:cb:a2:f3:e5:
a8:1e:78:89:2d:cd:14:49:3c:91:4d:46:81:8f:f4:
95:ca:90:c5:09:d9:ee:a4:29:93:9c:9e:ef:4c:1b:
04:9e:09:b0:ee:86:da:d1:23:e1:d4:42:55:76:fb:
22:8e:fd:59:0e:20:0c:c0:3d:c4:31:d9:b6:c1:fb:
b3:13:27:d8:1d:84:09:b5:7e:94:b3:c5:9b:52:eb:
c4:24:60:03:cd:13:13:09:61:a7:e7:22:b7:25:b2:
44:b8:b0:93:9c:37:b6:9a:80:a9:f8:65:5b:18:13:
a9:95:86:43:e5:1b:76:49:8a:f8:10:45:6c:bd:a4:
ff:81:2f:bf:a2:da:c3:c5:c5:02:ae:3f:0d:f9:6e:
65:d9:c0:cd:ca:a8:ed:0a:3e:2f:b2:f6:9e:2d:74:
0a:d5:3f:d8:21:00:99:fe:09:ac:b1:5a:3a:6a:08:
5d:ae:55:3c:ad:e6:75:4d:28:3d:a1:b4:f3:df:fe:
7d:81:9e:f1:8f:c3:6c:ee:37:16:30:b6:76:f1:a0:
27:87:51:75:da:7a:34:ad:7a:d5:ed:93:db:95:20:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2F:9F:9B:EA:77:4B:67:07:BF:0F:EA:58:F1:6D:F7:AC:30:FF:37
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/JC-fm-p3S2cHvw_qWPFt96ww_zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.140.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:2a:53:53:0d:39:6a:47:86:e1:bb:6e:e2:16:67:3e:d3:e4:
d4:01:cf:c5:6c:51:9d:f2:86:6c:55:a0:d8:2b:b1:b2:62:59:
98:77:b3:18:a5:42:d7:19:17:c9:42:e1:7f:1b:6b:dd:69:69:
71:4a:16:80:46:fa:7f:56:ef:3f:b2:8c:3d:5f:1d:b1:3b:85:
1b:c8:a8:56:9b:4c:48:46:f4:76:01:ca:48:65:7e:46:9d:34:
5f:09:7b:2b:ca:b4:d2:65:40:49:d6:31:bd:5d:ea:1c:02:c0:
06:1d:e8:3c:37:35:cd:4d:fa:78:96:be:75:a2:cd:55:72:ce:
01:af:e3:ab:50:1f:91:d3:c5:a8:c1:5d:59:e4:1c:fd:94:76:
af:7f:cc:4c:87:ca:dd:e6:a1:a4:6b:a1:92:1d:32:70:d2:37:
17:5d:a4:8a:55:64:d3:08:56:9a:04:78:d6:9d:d6:d5:9d:54:
ef:ae:0f:af:ba:7b:70:15:05:84:d0:49:19:3d:c8:17:10:87:
2f:b1:e0:01:b8:11:83:cd:28:03:db:f8:5c:c1:7b:b3:21:d6:
e6:53:7c:8f:09:99:8c:70:03:a5:ce:b9:ae:ef:7d:33:46:0a:
66:62:37:1b:c1:4c:b5:85:b5:01:a0:9a:64:f0:a4:0f:b5:50:
9a:19:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:15 2024 by rpki-client on console-ams.rpki-client.org