Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/JXhF6PfKByL6LVx2-rVwQx0NdkQ.roa
File: JXhF6PfKByL6LVx2-rVwQx0NdkQ.roa (raw, json)
Hash identifier: eoAtu2gonCPumjzXHpVsiPR6NcBV02CnWIIP5yHzIVo=
Subject key identifier: 25:78:45:E8:F7:CA:07:22:FA:2D:5C:76:FA:B5:70:43:1D:0D:76:44
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01835F4D2BB14DCEEA8A2FC122B35450F873
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/JXhF6PfKByL6LVx2-rVwQx0NdkQ.roa
Signing time: Wed 21 Sep 2022 09:07:16 +0000
ROA not before: Wed 21 Sep 2022 09:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35600
IP address blocks: 45.84.112.0/22 maxlen: 22
185.56.176.0/22 maxlen: 22
31.193.240.0/21 maxlen: 24
91.221.92.0/23 maxlen: 23
91.221.106.0/23 maxlen: 23
194.117.246.0/23 maxlen: 23
185.48.132.0/22 maxlen: 22
2001:67c:184c::/48 maxlen: 48
2a02:5520::/32 maxlen: 32
2a00:4780::/32 maxlen: 32
2a0e:ac80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:4d:2b:b1:4d:ce:ea:8a:2f:c1:22:b3:54:50:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 21 09:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257845e8f7ca0722fa2d5c76fab570431d0d7644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:6d:9c:0a:18:f6:2d:8d:55:a2:4c:f1:79:
9a:64:3b:b5:39:fc:c4:f2:5b:97:7a:02:d8:28:20:
ee:24:30:3b:e7:7e:79:15:5c:49:cc:fc:7d:f7:35:
16:26:9b:8f:54:0b:0a:10:b6:11:82:cf:25:4b:25:
e4:25:56:27:ea:88:8c:be:7d:42:04:ee:d6:07:44:
77:3d:bd:13:1e:3d:91:d2:d2:c5:71:95:f4:ac:df:
f0:bb:09:f9:01:24:cc:84:ef:08:b9:87:af:c8:54:
9e:68:bf:b4:6b:f1:40:83:9a:02:5e:55:5b:1f:a7:
23:1c:18:fb:dd:7d:60:fa:c6:25:87:68:c0:3c:f2:
b0:1a:7a:40:59:7d:1e:2f:51:c2:bc:1a:10:8d:d1:
16:ed:1e:47:fb:01:6e:23:5b:e8:74:24:37:21:bb:
c1:55:b7:e6:8e:4b:0f:14:90:68:ec:43:9e:bd:dc:
e0:3c:e8:43:e4:25:49:c7:f4:c8:bb:5b:fb:f6:c2:
fb:a1:d2:52:b8:3e:a0:53:c3:29:2e:35:54:00:d3:
11:1a:54:2b:f5:7c:f6:91:d9:f0:4c:d4:e2:ca:45:
8d:df:aa:3d:34:8b:8d:22:d1:a7:29:f9:a3:d4:43:
03:79:5d:e7:36:37:7c:b6:44:83:ae:67:6a:6e:70:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:45:E8:F7:CA:07:22:FA:2D:5C:76:FA:B5:70:43:1D:0D:76:44
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/JXhF6PfKByL6LVx2-rVwQx0NdkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/21
45.84.112.0/22
91.221.92.0/23
91.221.106.0/23
185.48.132.0/22
185.56.176.0/22
194.117.246.0/23
IPv6:
2001:67c:184c::/48
2a00:4780::/32
2a02:5520::/32
2a0e:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
15:f7:86:26:e4:8c:7c:7e:ae:7c:56:60:a4:28:6c:32:c9:0b:
1e:3a:93:e2:0f:e9:b7:1c:8f:ea:99:29:ab:ef:e4:f2:9f:e3:
9d:14:05:1c:a7:54:30:a1:73:50:c9:c8:fa:51:09:d3:e1:f3:
a0:4a:ba:d3:9d:2c:8a:42:84:3d:d4:76:6f:b3:c6:02:15:5b:
63:07:4b:6b:73:6d:f7:ec:cf:f7:c1:ec:12:7d:b8:d5:b6:83:
6c:b6:fe:8d:50:b9:44:49:35:50:da:30:85:ee:d5:ec:b9:51:
4f:af:4c:b2:5e:ab:33:6b:fd:61:fd:13:eb:d2:3c:ba:c9:10:
f4:aa:44:2e:32:c1:36:6e:ca:9e:2d:85:31:bf:19:39:c6:ac:
9f:0c:80:7a:0f:92:61:29:75:b1:c7:61:84:62:3a:d5:38:cf:
47:3b:95:21:71:6b:e6:f3:f6:25:4d:c0:9c:68:5c:69:45:28:
9c:e6:39:1c:60:13:f2:43:be:e4:f0:06:97:32:c6:6f:9f:1d:
34:0b:c8:ee:39:9c:3e:ac:81:f2:6e:81:16:e5:f5:25:5d:ac:
bf:a3:fa:e0:28:3c:fe:52:3a:e0:4e:62:95:09:ea:fd:5b:3a:
e3:53:99:71:38:ad:ae:d6:02:aa:70:d2:c5:5c:a8:17:a6:26:
f8:4b:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org