Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/jnUGX1wYzSa-37falXvPDfaaspw.roa
File: jnUGX1wYzSa-37falXvPDfaaspw.roa (raw, json)
Hash identifier: e3j0worJsM6LScIZ1qJ9xf0hiNDadoCV5E7nPv8upuU=
Subject key identifier: 8E:75:06:5F:5C:18:CD:26:BE:DF:B7:DA:95:7B:CF:0D:F6:9A:B2:9C
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018552C6DA39998722F888B4A54732CC6349
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/jnUGX1wYzSa-37falXvPDfaaspw.roa
Signing time: Tue 27 Dec 2022 08:50:41 +0000
ROA not before: Tue 27 Dec 2022 08:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197467
IP address blocks: 82.179.48.0/22 maxlen: 22
2001:b08:19::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:c6:da:39:99:87:22:f8:88:b4:a5:47:32:cc:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 27 08:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e75065f5c18cd26bedfb7da957bcf0df69ab29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:a0:4c:cc:3e:65:c2:02:9f:d2:40:4a:85:
91:e9:5e:34:2e:d2:8e:fe:ba:67:6a:54:3e:ff:64:
ce:c5:b7:c7:8b:9b:8b:d7:6d:4d:d2:b6:2a:20:cd:
8d:d6:eb:70:af:e3:b3:99:b1:ff:b8:6b:3c:21:2d:
22:9c:7a:f3:4c:43:8a:fc:9f:7b:d3:7e:6a:1a:2e:
63:2c:c4:9c:ef:c7:2a:c0:ce:96:2d:77:07:1d:cf:
25:93:4d:a0:14:a7:18:93:f1:65:2e:8a:44:5b:a2:
71:d1:af:4f:68:b0:1b:c5:4a:4d:4f:53:50:bc:61:
43:74:8b:d8:ad:27:d0:09:53:d7:4a:78:3d:20:63:
62:1f:06:81:e2:cf:16:9b:e4:11:8f:8b:87:e6:a5:
6b:f5:27:ad:49:d7:ae:e5:8b:9e:d4:96:31:cd:1a:
90:1c:c7:44:34:18:d2:87:c3:47:89:e8:7a:56:b6:
a1:05:f8:4a:27:a6:dc:6f:65:19:fe:b8:96:69:70:
8d:1b:a6:37:91:b3:fe:b0:bb:fa:9f:01:04:94:3d:
4a:a8:c1:15:d4:d6:ee:f9:d2:67:ad:f6:c5:01:ef:
81:15:36:39:06:f9:3d:f3:47:11:e3:f0:c8:32:7e:
dc:3d:c5:41:21:8e:42:fb:89:1e:77:10:fe:ab:84:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:06:5F:5C:18:CD:26:BE:DF:B7:DA:95:7B:CF:0D:F6:9A:B2:9C
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/jnUGX1wYzSa-37falXvPDfaaspw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.48.0/22
IPv6:
2001:b08:19::/48
Signature Algorithm: sha256WithRSAEncryption
7a:9c:4f:80:aa:d8:3b:7a:34:b1:46:47:be:d8:6b:b6:07:52:
42:fc:d8:8e:a0:1f:8d:f4:b6:c6:06:72:cc:89:cd:86:c1:d2:
b8:30:b9:88:60:ee:67:6d:a5:88:f1:f8:8b:86:93:a1:35:40:
1f:7a:f8:f8:35:6a:a8:ae:bc:56:a6:25:ac:3e:3e:ff:49:cb:
16:26:4c:63:12:d6:22:f4:4b:5d:2f:7f:a8:7c:44:0d:a3:43:
c6:9c:ff:de:44:ba:b1:16:dc:86:76:56:a3:f4:0f:e3:c2:e7:
6b:26:a3:5f:90:23:48:bc:34:17:01:2b:45:32:91:72:fc:48:
d5:0b:0e:fc:a0:74:b0:61:33:0d:87:df:9f:f1:88:95:32:25:
f1:21:a6:c5:bb:11:0a:b0:89:af:98:e5:51:f2:cb:40:b2:e5:
ff:27:83:15:10:b2:7d:54:6d:31:e8:c5:1e:d0:60:a1:58:3c:
96:58:96:43:31:75:88:af:63:e2:3e:2d:56:fe:41:1a:c5:2c:
d4:25:6c:64:ae:74:1d:19:f1:9c:fd:16:62:71:e4:12:3c:33:
59:1a:b8:2c:51:08:4e:c9:8e:1f:49:85:28:72:a8:23:9a:6e:
79:ed:28:48:32:6e:1d:f3:12:92:c6:6e:08:a1:96:ec:3c:db:
9d:d2:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org