Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JRxG-DaM3X58VO8dUxOdaui0kpQ.roa
File: JRxG-DaM3X58VO8dUxOdaui0kpQ.roa (raw, json)
Hash identifier: jyLzYxA0loWIaDrNzX2OMXJ5VHR22g4eFBkL6Ufi0sg=
Subject key identifier: 25:1C:46:F8:36:8C:DD:7E:7C:54:EF:1D:53:13:9D:6A:E8:B4:92:94
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 075971C8
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JRxG-DaM3X58VO8dUxOdaui0kpQ.roa
Signing time: Sat 01 Jan 2022 03:51:27 +0000
ROA not before: Sat 01 Jan 2022 03:51:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 45.150.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123302344 (0x75971c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 03:51:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=251c46f8368cdd7e7c54ef1d53139d6ae8b49294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:73:bd:95:77:99:b0:42:d6:35:08:10:e2:
9e:e8:1b:6a:2a:65:a1:55:60:ff:25:f6:8b:fa:7c:
c6:69:38:42:3a:50:d7:9e:bc:8a:9a:9d:58:88:80:
fc:6b:18:68:3a:15:07:f1:17:58:26:84:2d:77:35:
10:5b:92:66:36:c1:6a:bc:74:c2:5e:8c:17:57:8c:
09:88:1d:97:5f:0c:fd:10:ec:fd:a5:61:b9:4b:f5:
57:25:d5:d9:8f:46:77:4a:7d:77:65:42:c3:18:93:
27:42:60:c1:fd:ee:fd:0c:4f:96:97:8c:8e:ea:e8:
70:b9:d0:d9:41:a7:00:34:bf:00:4c:fc:9d:65:99:
a5:66:4f:54:49:1f:8b:94:19:00:38:41:d1:c5:5e:
1b:2b:35:74:a2:d8:7a:cf:7f:66:52:4b:0c:f1:5f:
52:53:e8:ee:4d:9b:88:3f:cf:08:46:60:19:0b:44:
eb:70:d3:93:b8:d8:af:6c:cf:01:30:fe:1d:b3:b6:
4d:3e:cc:24:f5:06:ae:68:c0:6f:59:d1:5d:79:23:
a3:2f:d1:41:ea:91:73:bd:b2:14:15:92:a6:05:c5:
37:a9:a4:69:83:81:6e:be:5e:17:c3:7e:d0:7e:84:
b6:fa:e9:6d:46:35:e3:c8:72:7b:52:b1:61:2d:15:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:46:F8:36:8C:DD:7E:7C:54:EF:1D:53:13:9D:6A:E8:B4:92:94
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/JRxG-DaM3X58VO8dUxOdaui0kpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:94:1d:3f:77:0a:e1:2a:ba:11:bc:12:ad:1b:79:20:13:7d:
17:a7:60:9b:2a:69:7c:df:7d:3d:4a:0b:d4:d0:22:c9:25:e3:
77:fe:87:37:f8:67:9f:5a:e0:45:75:8d:ce:12:1f:a1:f2:aa:
dc:05:b1:3f:98:c0:f7:13:29:74:f9:3e:b5:96:f3:b7:51:8f:
57:d3:6a:87:62:b0:72:ac:65:1d:84:3f:5c:69:62:52:81:5f:
97:cb:ee:83:c8:99:89:c4:e8:28:14:e2:b3:72:2f:d6:9f:93:
81:c6:a0:0f:67:92:b8:a8:b1:0a:c4:2e:d6:c8:8b:d0:b9:3a:
6d:67:44:34:c2:86:a8:2d:47:bc:2a:b3:81:de:4e:e3:be:dc:
7b:20:20:5b:f5:46:de:f3:46:1c:75:9f:b6:22:01:1b:07:3b:
ac:87:89:ca:2e:84:e6:fb:61:a2:22:8f:22:e9:97:58:a4:b7:
5c:6c:1d:f0:0b:46:8b:5d:3e:4d:5c:55:c4:e6:37:50:7d:5c:
35:85:ac:7e:0a:d5:ef:e6:40:7e:ab:9e:1e:ec:f4:c3:a1:f1:
18:5d:89:1c:dc:4f:58:f5:48:2c:f7:6f:84:5a:57:d9:3a:fb:
1e:a9:2b:62:d9:c6:cc:c8:23:d2:b1:2b:a4:b4:2d:3a:ad:56:
c8:0f:33:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org