Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/Jfqw1uzX6pTgNN-YtuGaD_7Xtrw.roa
File: Jfqw1uzX6pTgNN-YtuGaD_7Xtrw.roa (raw, json)
Hash identifier: powIs6bXFAtXjcAcPLSUbrUTGW7Ez5tg1D2fNUcGIz8=
Subject key identifier: 25:FA:B0:D6:EC:D7:EA:94:E0:34:DF:98:B6:E1:9A:0F:FE:D7:B6:BC
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 384F5A87
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/Jfqw1uzX6pTgNN-YtuGaD_7Xtrw.roa
Signing time: Sat 01 Jan 2022 16:10:54 +0000
ROA not before: Sat 01 Jan 2022 16:10:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20701
IP address blocks: 193.17.47.0/24 maxlen: 24
185.43.135.0/24 maxlen: 24
2001:148f:fffe::/48 maxlen: 48
2001:148f:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944724615 (0x384f5a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jan 1 16:10:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25fab0d6ecd7ea94e034df98b6e19a0ffed7b6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:46:91:d9:7a:1c:39:e2:49:4e:99:44:00:
98:aa:e1:ba:e0:45:de:76:1e:91:50:79:e5:62:a7:
e3:a6:4f:25:c9:a2:4f:47:9d:4c:2b:1a:e8:b8:ae:
3e:1f:90:2a:08:85:70:c4:ee:55:71:84:ef:ce:79:
d4:94:31:b3:9d:15:8a:e9:9a:f8:d9:68:07:0d:eb:
36:47:d7:8f:92:c8:b8:8a:b7:d7:d7:19:64:a5:41:
27:ac:1c:7f:1f:ca:26:60:00:49:ed:4c:b2:e8:0b:
de:32:18:4e:e4:68:8d:b2:a4:f8:7f:d4:6a:0a:f4:
e0:8e:b1:30:35:48:51:03:20:70:6c:23:d3:ec:6d:
92:9f:ef:d5:69:14:bb:8d:44:12:d8:77:b6:b2:0e:
7b:cc:36:01:f1:65:8e:28:8f:95:a4:3c:2e:77:0f:
b5:2a:32:45:17:d5:e9:79:8d:c1:e9:88:0e:ee:96:
2a:ec:8e:cc:ff:49:ff:ba:14:ec:83:c1:46:45:b3:
0f:1c:f7:bc:d9:1d:09:e1:19:c5:16:2e:05:ec:f6:
2d:7a:56:8e:5b:ab:28:9f:e4:44:b8:bc:1a:12:81:
4e:34:55:c8:a2:f1:a3:cb:1f:64:78:62:16:6e:90:
b2:3a:e6:a8:f8:01:0b:41:79:d4:04:b3:a7:68:58:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:B0:D6:EC:D7:EA:94:E0:34:DF:98:B6:E1:9A:0F:FE:D7:B6:BC
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/Jfqw1uzX6pTgNN-YtuGaD_7Xtrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.135.0/24
193.17.47.0/24
IPv6:
2001:148f:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
45:bb:9f:d0:99:65:1b:a9:48:65:e9:f0:70:7f:10:a2:00:84:
ec:e6:b1:aa:19:2e:a8:d9:24:15:70:20:bf:15:97:54:4c:f6:
21:fa:06:5e:9c:df:16:f9:99:f1:cc:06:51:0f:b6:56:c0:d1:
96:fd:94:1d:a5:c0:f6:c4:ac:fc:3f:68:53:b3:79:e8:f8:50:
fa:1a:d2:f5:8d:3c:41:51:ff:a8:7e:aa:49:9b:2d:e4:25:c8:
ab:5a:83:38:ef:ba:48:19:1b:5e:ef:25:06:55:b8:23:e4:8d:
75:a0:e9:8a:f3:ae:d1:eb:79:b5:0b:d2:e5:58:ef:74:03:df:
6e:09:8b:2f:6e:5a:a6:7d:b6:7d:6f:05:59:90:52:16:01:3a:
54:22:e0:61:98:e5:95:25:bb:4a:cf:c6:76:2b:6c:d2:05:dc:
25:11:96:9c:c5:31:d2:1c:22:e7:6b:f4:8e:7e:4b:00:21:30:
85:90:3b:bf:74:a1:c8:e7:ec:bf:2b:51:d9:4c:b5:ba:fe:07:
5d:c9:03:19:c9:a7:23:d5:9a:67:78:c3:6c:32:a3:ac:df:6e:
c4:3c:6d:63:46:2c:2c:2e:91:13:f7:c1:87:d3:05:f1:20:a9:
25:c2:3a:af:45:94:3c:56:51:18:d5:1a:68:37:ab:78:97:05:
bd:83:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:54 2024 by rpki-client on console-ams.rpki-client.org