Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/JlyqpwUb9R4dJ_yFMPSvnjQ3LQ8.roa
File: JlyqpwUb9R4dJ_yFMPSvnjQ3LQ8.roa (raw, json)
Hash identifier: 9IX4PHuyt+g4qTUn/7l4Q5Av2A0PsFDtobeVrVIKW5Y=
Subject key identifier: 26:5C:AA:A7:05:1B:F5:1E:1D:27:FC:85:30:F4:AF:9E:34:37:2D:0F
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 08805A44
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/JlyqpwUb9R4dJ_yFMPSvnjQ3LQ8.roa
Signing time: Wed 01 Jun 2022 15:08:21 +0000
ROA not before: Wed 01 Jun 2022 15:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.84.112.0/22 maxlen: 24
91.221.92.0/23 maxlen: 24
91.221.106.0/23 maxlen: 24
185.48.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142629444 (0x8805a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 1 15:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265caaa7051bf51e1d27fc8530f4af9e34372d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:de:17:67:a9:4a:1e:cc:9a:0f:81:a8:7a:
14:05:7f:24:e7:b0:a9:49:44:5e:1d:67:69:83:75:
fa:0a:4a:07:ac:86:00:e2:d2:0e:b7:e0:92:23:ca:
16:35:87:9d:20:62:6d:ae:64:16:f1:08:ba:34:b7:
59:7a:49:86:26:ca:0a:3d:74:65:3d:4e:9e:97:e4:
cf:af:2e:71:d2:d6:62:96:80:c5:b0:4a:af:55:f0:
89:59:47:21:5a:8e:bb:ed:d4:ce:49:33:80:2c:3d:
2d:c1:67:f7:86:e4:fc:cd:fa:01:e3:09:67:54:c0:
c0:90:59:ca:e3:6a:78:d4:d1:31:df:a7:13:b2:31:
3d:c1:1f:a6:24:d7:c3:5c:91:4b:4d:1b:1b:64:5b:
42:2a:d7:ac:88:c5:57:0d:8b:0a:fa:5c:bb:63:66:
06:a3:e3:1b:9b:56:2e:fe:06:88:c8:98:f2:e9:4b:
d8:b4:89:8d:f3:1f:d9:43:32:36:77:b0:2e:b8:d4:
71:27:04:86:ff:85:59:02:74:5e:cf:4e:a4:cc:37:
aa:51:c7:0e:96:3d:9c:65:38:e5:86:f4:3a:0a:92:
62:41:25:d9:16:cf:3b:fd:f1:32:e2:90:be:73:ee:
43:7f:0d:65:0e:85:0e:91:25:8c:c9:1a:60:f7:9f:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5C:AA:A7:05:1B:F5:1E:1D:27:FC:85:30:F4:AF:9E:34:37:2D:0F
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/JlyqpwUb9R4dJ_yFMPSvnjQ3LQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.112.0/22
91.221.92.0/23
91.221.106.0/23
185.48.132.0/22
Signature Algorithm: sha256WithRSAEncryption
00:15:27:a0:d9:ea:16:5a:54:ca:3a:2b:d5:75:b6:6c:41:94:
3d:07:59:d7:c7:d1:b2:6e:80:7c:2c:42:76:c2:32:ea:fb:2e:
b7:c6:1c:54:9e:4c:4c:28:03:e8:ad:b4:cb:f9:eb:78:51:ea:
da:f9:5c:be:bc:22:48:eb:21:07:59:fb:79:a8:33:89:24:2b:
25:d5:3a:44:50:9d:6c:2a:b0:d1:8b:c0:47:98:ca:d8:b2:41:
75:bc:bc:4d:c7:54:c1:be:20:6a:69:36:96:af:5a:5a:50:b2:
4e:b2:a2:48:26:b4:19:c2:7a:81:94:38:84:5f:1c:90:72:ce:
45:10:89:fe:28:ee:5d:27:ae:e5:27:d1:04:6d:42:cc:6d:d2:
19:90:77:e4:d9:88:87:0d:d4:17:f6:cb:9f:d5:1c:b8:58:b8:
aa:c7:92:a0:c4:a6:2c:a7:48:8a:52:fc:d1:6e:a1:22:f1:5c:
59:e8:59:c2:d6:3f:7c:a3:b6:b7:d4:12:c8:1c:74:0f:9b:10:
e5:f4:ee:cc:76:1d:4a:ad:0c:e7:6b:1e:a7:47:21:7e:bd:21:
8a:b3:c6:57:af:5a:fe:a0:12:66:62:41:71:e2:fd:09:69:be:
43:d5:12:0a:1b:ae:74:24:a9:2e:eb:4b:5b:a1:ce:01:a8:9b:
0f:7b:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org