Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/u-JnxExCZZsCYrDIyhEfq4pPd7w.roa
File: u-JnxExCZZsCYrDIyhEfq4pPd7w.roa (raw, json)
Hash identifier: fbPZIuZ0dEH5f2+uBBhLA/XO3qC4kXIUDrQoXMCk+lE=
Subject key identifier: BB:E2:67:C4:4C:42:65:9B:02:62:B0:C8:CA:11:1F:AB:8A:4F:77:BC
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 01833BF8F04B9ED116DC604D3C252945D56F
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/u-JnxExCZZsCYrDIyhEfq4pPd7w.roa
Signing time: Wed 14 Sep 2022 12:28:33 +0000
ROA not before: Wed 14 Sep 2022 12:28:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50975
IP address blocks: 109.75.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:f8:f0:4b:9e:d1:16:dc:60:4d:3c:25:29:45:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Sep 14 12:28:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbe267c44c42659b0262b0c8ca111fab8a4f77bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fc:59:98:1f:87:d0:ea:3c:78:51:da:f8:6a:
82:4e:97:62:e6:a0:ad:6f:44:03:17:5e:68:57:a7:
84:97:68:cf:f0:46:22:8c:b5:ec:20:41:e9:02:5f:
dc:fd:01:5a:d9:c1:66:a2:40:ad:3c:1b:2c:67:ae:
b2:af:41:08:16:6c:df:11:26:a9:03:f6:5f:6d:aa:
ff:64:cb:69:db:ce:7e:39:68:b0:a6:31:35:d9:6f:
ac:05:ff:85:d7:19:75:18:5b:16:f3:f8:8f:56:cd:
8d:fc:1d:15:d6:29:fd:28:c9:30:09:0f:dd:48:a0:
96:e3:8e:60:af:0a:0c:ee:e1:1b:e1:f4:95:98:83:
44:9a:d9:89:94:2a:98:29:6a:8d:04:8e:33:f7:3f:
64:63:cf:d9:0c:a6:69:fd:69:e6:4c:a5:1b:e9:96:
2e:5a:a6:fd:e9:16:66:c7:23:bd:d2:ab:c4:29:bc:
ad:69:a2:19:b8:f3:65:5f:e7:cf:a1:35:51:a8:5e:
4a:b1:9c:87:cc:08:08:c6:d4:37:76:82:b3:93:ca:
37:4d:b4:8c:9e:eb:9c:a0:bf:6c:74:d6:60:ba:a3:
12:9b:47:f6:72:32:f4:be:1f:7b:e4:34:eb:b2:d8:
eb:9b:3b:b6:0e:3f:df:8e:85:da:fc:3f:52:a1:74:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:67:C4:4C:42:65:9B:02:62:B0:C8:CA:11:1F:AB:8A:4F:77:BC
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/u-JnxExCZZsCYrDIyhEfq4pPd7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.0.0/21
Signature Algorithm: sha256WithRSAEncryption
69:fd:17:86:9c:e9:81:78:86:53:d7:5c:e4:42:d8:17:6d:62:
5f:f9:2a:29:b4:35:4f:96:15:fc:94:99:56:38:ca:66:2a:bb:
38:4a:af:89:47:2a:c5:70:b5:ae:4b:4d:06:3c:45:be:c8:fc:
a5:66:e9:be:7e:77:a0:60:57:cc:ac:37:93:bd:ad:1e:8f:5a:
c6:31:87:6f:34:ad:36:73:be:6c:36:20:a4:7f:0f:71:af:70:
07:67:9e:d4:06:25:ae:20:d3:65:a0:27:c2:f7:5b:45:90:2c:
b6:b7:1c:9e:93:e7:b2:7f:d8:ae:23:ac:86:99:d7:84:f5:56:
26:93:ef:d9:97:38:c3:8a:ae:23:52:ce:6c:50:24:ea:59:d8:
09:d2:d8:b0:47:e5:d7:d7:35:ba:9a:7f:ce:a9:0d:12:f6:9a:
6a:f6:d1:de:8e:26:22:bc:fd:98:03:51:40:83:79:56:92:98:
9b:8c:b5:e0:4d:d8:97:79:73:89:4e:cb:27:60:b9:3c:45:ea:
18:aa:ab:12:00:d8:88:f4:21:54:c6:0f:10:0c:b6:9a:8c:4d:
e9:d6:e2:58:cc:dc:31:be:c6:76:dd:fe:71:ce:46:2f:d6:9d:
5c:d8:1d:1b:17:3c:96:0a:d7:3f:a9:08:c5:d0:58:ae:b5:68:
59:b4:11:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org