Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JHVG_wFMrll_z7kvwJEH83FUoJU.roa
File: JHVG_wFMrll_z7kvwJEH83FUoJU.roa (raw, json)
Hash identifier: M0UgOC+EtLe7zftIj4FbwL3OdaFF9NM8gMruFFcy8a0=
Subject key identifier: 24:75:46:FF:01:4C:AE:59:7F:CF:B9:2F:C0:91:07:F3:71:54:A0:95
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08F3391A
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JHVG_wFMrll_z7kvwJEH83FUoJU.roa
Signing time: Sat 01 Jan 2022 08:05:23 +0000
ROA not before: Sat 01 Jan 2022 08:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199871
IP address blocks: 151.252.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150157594 (0x8f3391a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=247546ff014cae597fcfb92fc09107f37154a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:88:e2:94:62:5e:1f:7d:d4:d6:78:ee:a8:
36:c9:96:41:9b:93:ff:7a:99:f2:91:b2:1b:a1:7a:
94:ec:37:17:79:ad:e7:73:85:2d:9c:9a:6c:53:d4:
7e:79:bc:da:fa:c2:77:f9:fd:ab:e3:59:27:4d:1b:
1d:db:dd:9c:f8:46:88:dc:2c:5a:fe:3d:4d:f5:61:
2c:31:ad:ec:58:61:a7:97:02:3b:b8:b3:0b:ab:89:
4d:18:8b:0a:ce:9a:04:8f:80:a8:59:4e:85:bf:6e:
0b:85:86:cd:5e:76:85:2d:0c:97:d1:67:aa:51:7b:
2a:49:98:50:04:af:d9:07:88:45:07:94:e8:9a:0f:
14:e5:e7:ad:aa:48:77:88:0e:a4:8b:57:62:9d:d1:
0a:f4:f1:f8:02:d2:65:66:2b:50:c9:1f:99:58:ed:
21:6c:3b:33:f0:0f:5d:d3:52:6d:22:b9:4c:e0:1c:
e3:e9:c4:ee:6b:5b:3f:a6:dc:8a:a5:67:3b:13:86:
35:64:83:67:d4:b6:36:4d:30:20:8b:ff:ab:c1:24:
04:4c:6b:0f:8c:38:21:af:cd:26:13:7b:aa:d8:9c:
58:b4:6f:2b:be:bd:35:90:b1:a8:82:f2:bd:19:d6:
25:ec:42:6b:86:6e:32:14:6e:97:84:17:5c:30:01:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:46:FF:01:4C:AE:59:7F:CF:B9:2F:C0:91:07:F3:71:54:A0:95
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JHVG_wFMrll_z7kvwJEH83FUoJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.252.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c3:00:89:26:5d:79:45:a3:c0:8b:58:2c:3b:b1:08:a8:f2:
d3:e1:71:5d:b9:e1:1f:d7:9d:ee:15:f8:cd:9e:33:6b:f7:bb:
ad:b4:d0:cc:71:b8:6f:3b:0f:a3:89:78:3c:cc:27:81:0f:07:
2f:86:15:43:b6:88:01:7b:3f:5c:e3:01:aa:0a:6c:8a:76:0f:
1b:a2:16:12:69:14:93:cc:3c:cb:40:15:35:30:96:50:a7:4a:
a0:32:f6:82:07:6d:a1:37:06:bf:86:77:f9:54:27:16:b4:bb:
ee:ec:5c:94:49:57:bc:d3:06:e6:01:41:d2:14:3a:1b:5b:f1:
75:f4:29:af:e2:55:20:9c:36:f9:d5:07:27:2e:ec:bc:0f:bf:
f1:89:29:3f:3c:2b:87:d6:a8:19:87:41:ca:b3:90:83:5e:4e:
71:c2:72:64:2e:92:9c:b6:d0:61:88:3f:ca:12:b0:df:21:6c:
55:86:19:b9:6f:cb:19:da:cf:95:8e:a5:d9:34:1c:c9:da:de:
3a:d7:5b:3f:10:e8:c5:c2:24:ae:1c:0a:e2:e0:4e:d5:26:e9:
93:09:83:1e:f9:f2:30:92:2f:97:7f:5c:c5:66:69:54:77:c4:
cb:05:fb:60:16:57:2d:1b:38:a0:05:24:8e:e5:0e:d7:04:1e:
09:3a:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org