Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/JJnTWeEAjoF1mbSD8ZmEeMCF_6w.roa
File: JJnTWeEAjoF1mbSD8ZmEeMCF_6w.roa (raw, json)
Hash identifier: XFKoXeWaGN7JeHDpe3OYEVV4/dZnnglkB69C3MJ/E/Q=
Subject key identifier: 24:99:D3:59:E1:00:8E:81:75:99:B4:83:F1:99:84:78:C0:85:FF:AC
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01824E789B6B53F72664CAE016B4AF936A1B
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/JJnTWeEAjoF1mbSD8ZmEeMCF_6w.roa
Signing time: Sat 30 Jul 2022 09:38:23 +0000
ROA not before: Sat 30 Jul 2022 09:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 185.220.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4e:78:9b:6b:53:f7:26:64:ca:e0:16:b4:af:93:6a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jul 30 09:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2499d359e1008e817599b483f1998478c085ffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:0a:43:54:ea:ee:9a:49:41:a5:a0:b3:77:
77:1c:e7:0a:c0:3b:f2:86:bf:e6:88:7c:b8:c3:a5:
5d:3d:af:b4:16:08:81:ab:a8:59:58:17:ea:70:97:
19:e2:af:b6:72:4a:74:77:6f:99:2b:3a:78:10:b4:
4c:f0:fd:c6:fb:41:48:92:16:48:b0:fa:7e:9d:a6:
1f:f8:5f:97:30:fa:e3:a7:3e:a0:b5:92:ba:f5:10:
10:61:84:f5:5c:64:d4:0a:7e:c4:14:fa:65:9d:3a:
3c:6e:c3:2a:77:68:67:12:b2:5e:d6:59:cc:dc:fe:
8f:88:f3:23:5b:bf:ea:a8:af:10:35:91:e1:2d:7d:
a4:12:02:35:80:59:c6:0e:90:f3:18:44:3b:76:f5:
7e:2b:af:6e:55:ae:ac:10:a8:af:e5:56:da:2b:77:
ce:56:d1:26:a7:1e:5b:79:c0:6b:6b:39:a1:d1:6d:
17:23:12:be:ff:4f:bb:9b:90:4f:d1:1f:7e:57:f2:
45:1d:1b:4d:0f:3e:d6:ca:53:08:38:7d:d4:74:56:
36:f9:84:8d:0d:0c:e1:9b:1f:64:08:95:0c:1b:34:
07:ce:77:fb:8f:ce:2f:36:c1:d4:19:1a:a8:f8:6e:
aa:4e:54:d6:38:3e:81:89:f3:10:45:8a:af:94:19:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:D3:59:E1:00:8E:81:75:99:B4:83:F1:99:84:78:C0:85:FF:AC
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/JJnTWeEAjoF1mbSD8ZmEeMCF_6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b0:84:ab:84:f1:ba:2c:a4:46:d2:b5:37:f7:db:17:0a:f3:
1e:58:59:fe:fc:bc:5a:fa:12:fe:b7:32:30:7c:91:d6:db:29:
ee:62:a7:7c:3b:6d:ad:56:e3:5c:3b:87:58:77:8d:fd:92:c0:
9e:c7:f8:50:4f:67:47:71:97:31:00:5e:4d:84:d2:47:ef:d6:
4d:55:b3:12:a1:57:2e:f3:72:c4:0f:80:ff:d8:26:97:2c:a1:
c2:19:36:23:03:b3:db:fe:37:12:c6:5c:e7:33:88:ce:98:00:
30:48:8b:17:11:b5:25:4b:d7:20:df:34:94:36:a3:ec:28:48:
fd:7c:3d:e3:30:1b:ac:31:c7:07:fd:7f:02:2f:37:76:53:2b:
2b:44:04:6f:5f:2d:20:7c:93:75:3d:ec:80:52:36:01:50:35:
b3:da:a0:5c:cb:aa:6f:fe:fb:61:6f:a7:05:92:c5:a2:f0:56:
2b:d3:97:86:92:a7:7b:ea:a9:de:05:1b:7c:6c:fa:9f:34:fe:
68:b9:cc:99:12:82:9b:d4:8e:0d:d4:ec:d0:03:f2:7c:08:6d:
ef:8e:f8:71:6d:f6:1f:53:70:6e:b9:57:8d:47:4e:47:db:17:
ea:84:34:d3:2a:18:1a:fc:66:0b:ae:13:9e:ff:3a:38:f5:be:
98:eb:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:32 2023 by rpki-client on console-ams.rpki-client.org