Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/JUApLVw34NLysLnl5ltsMQFqxpU.roa
File: JUApLVw34NLysLnl5ltsMQFqxpU.roa (raw, json)
Hash identifier: i1us5oA4z9HyRxzoVoKrymccdo5i/OvF8Ln7RMnKCAw=
Subject key identifier: 25:40:29:2D:5C:37:E0:D2:F2:B0:B9:E5:E6:5B:6C:31:01:6A:C6:95
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 0CF73FAB
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/JUApLVw34NLysLnl5ltsMQFqxpU.roa
Signing time: Fri 14 Jan 2022 08:35:26 +0000
ROA not before: Fri 14 Jan 2022 08:35:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203724
IP address blocks: 185.212.107.0/24 maxlen: 24
185.212.106.0/24 maxlen: 24
185.212.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217530283 (0xcf73fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 14 08:35:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2540292d5c37e0d2f2b0b9e5e65b6c31016ac695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:7d:14:97:9c:22:93:3c:8a:5a:49:3a:4f:
c3:1c:c5:85:8d:5a:d0:eb:fe:9a:8b:e7:2c:44:d8:
b7:49:4a:1e:bc:3b:57:b4:b6:38:90:a2:8f:f2:b6:
16:02:1b:79:5b:be:e6:05:57:89:b5:47:f7:9b:d2:
dd:e8:18:0c:4f:14:54:8c:ca:7b:24:75:26:9a:ed:
07:52:b8:29:09:e9:39:b2:e6:d2:ff:35:9f:b7:83:
c4:9e:b9:f1:ce:3e:2b:cc:bd:c4:d2:f4:05:27:b7:
78:8b:e7:a6:a0:9b:9d:fc:26:df:4b:b6:43:ab:8e:
e5:1d:59:c2:9c:f7:25:ba:03:a5:8a:ba:f3:a0:ad:
31:66:93:e0:04:cd:5f:31:b4:1e:e0:e4:e6:ff:0c:
e8:d2:ab:44:ef:58:15:f8:02:fa:1a:de:c4:ea:02:
6a:e5:2b:56:e3:0f:64:4e:32:c2:29:10:b2:1d:12:
0b:2d:f6:0d:2f:23:ea:94:65:f9:fd:7b:df:bd:25:
86:b0:8c:03:3a:f3:e1:da:9f:cc:df:4f:b6:b9:18:
fb:80:ff:50:e5:04:d5:6d:f4:a9:21:89:8f:85:71:
46:ec:05:3a:75:88:d6:7a:a1:6e:a3:a3:d7:08:11:
ae:de:fe:a1:5f:7b:b2:45:40:37:c1:95:9a:de:a5:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:29:2D:5C:37:E0:D2:F2:B0:B9:E5:E6:5B:6C:31:01:6A:C6:95
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/JUApLVw34NLysLnl5ltsMQFqxpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.104.0/24
185.212.106.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:60:c4:a4:6e:c4:67:8e:8e:31:ac:4a:9b:7f:84:50:11:cb:
19:24:1d:a0:f6:29:60:07:25:31:a3:a9:bc:df:27:8f:4f:fb:
d8:11:01:a9:97:03:96:40:d5:d0:bc:6c:b5:21:f4:f4:03:18:
4d:a8:af:58:cf:ee:ec:05:ae:16:e2:50:e0:c0:fe:e7:1d:1b:
80:c2:10:b4:17:57:67:59:da:0d:7d:d7:4d:71:d3:28:82:2c:
0e:67:a3:11:37:8d:fc:5d:3c:49:80:ba:d4:53:97:f5:79:01:
ab:30:24:7a:92:b6:02:1b:01:fd:87:0f:1c:23:a2:df:88:64:
39:b5:46:f7:07:16:40:97:3a:f9:92:35:a8:b0:bd:b3:aa:56:
aa:81:83:32:db:a5:16:6a:0d:f9:98:82:a3:45:80:6a:3a:f0:
23:bd:9c:22:b3:dd:43:ed:af:2c:41:23:8d:f7:4a:99:52:90:
42:e4:bc:c6:bf:0a:91:a5:38:dd:a8:83:e7:bb:74:a1:b2:2a:
24:b7:a4:4a:86:f6:da:10:cb:75:2f:7f:d1:63:bb:32:1e:28:
fe:52:0d:62:4d:14:4d:11:90:ee:4b:4b:f0:ad:f0:7a:9d:8a:
c1:88:51:e1:ea:8d:31:b6:57:6c:b2:5c:02:3d:9d:9c:79:01:
76:dd:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-fra.rpki-client.org