Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/JkwyXkHXJw8B-dnomQyBHCLqGJY.roa
File: JkwyXkHXJw8B-dnomQyBHCLqGJY.roa (raw, json)
Hash identifier: 3BNLeXAPDEo51jqKclPky+AFQnjiaFzBfY0vO0uyBMA=
Subject key identifier: 26:4C:32:5E:41:D7:27:0F:01:F9:D9:E8:99:0C:81:1C:22:EA:18:96
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 06BED5E8
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/JkwyXkHXJw8B-dnomQyBHCLqGJY.roa
Signing time: Sat 01 Jan 2022 06:52:25 +0000
ROA not before: Sat 01 Jan 2022 06:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10753
IP address blocks: 94.136.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113169896 (0x6bed5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 1 06:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=264c325e41d7270f01f9d9e8990c811c22ea1896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:50:77:fe:8d:1f:7c:83:ee:75:39:8b:93:
c4:1b:51:de:68:00:4f:e4:12:30:c9:f7:3d:d3:d3:
f7:01:f2:6a:d5:c7:69:b5:a7:db:d7:ad:30:d6:8b:
be:f3:8b:56:21:6c:73:1b:31:d9:4e:96:a7:ab:9e:
e5:ad:f2:2a:3f:ac:c1:96:05:37:10:b4:6a:6a:ac:
0d:a7:51:42:1d:fe:90:b1:29:6b:89:68:dc:db:66:
8c:36:a6:fa:99:42:5a:2c:82:a9:46:d5:85:99:e5:
0e:57:27:26:e0:03:dd:c9:8f:c3:48:ad:6b:28:6e:
42:17:e2:1b:71:29:41:ea:a5:9c:36:96:b4:18:67:
10:62:c1:15:29:c5:15:0c:87:b5:f3:81:c0:31:e5:
b9:e0:07:f4:9d:a6:be:bc:b8:bd:46:af:b0:c7:84:
fd:10:2d:53:b9:6b:c9:05:43:1b:0d:f5:d1:e8:70:
6b:2b:1a:20:86:86:6a:91:db:83:be:c3:0a:8e:7a:
e7:0b:2d:cf:d4:89:65:5a:15:2f:f5:e1:ab:2d:17:
1b:ec:df:ca:25:35:28:f0:cf:56:9c:de:b6:77:e6:
ed:53:1a:33:6a:6e:4e:87:95:5f:5b:ab:70:a8:75:
bb:4d:c5:02:16:4a:1b:d2:36:8d:69:5b:c2:78:17:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:32:5E:41:D7:27:0F:01:F9:D9:E8:99:0C:81:1C:22:EA:18:96
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/JkwyXkHXJw8B-dnomQyBHCLqGJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.116.0/24
Signature Algorithm: sha256WithRSAEncryption
19:de:ae:fb:8e:92:2b:30:0d:42:e2:24:7e:59:a6:4e:42:f3:
c0:56:07:f2:bb:a1:8e:65:fc:a7:98:36:02:bd:84:36:19:25:
d6:3a:7c:f2:7b:fb:08:a0:32:b3:a2:5e:42:16:01:2a:62:d4:
c4:95:34:c8:c4:26:9d:17:72:8d:5d:f8:7e:63:98:8f:d6:ce:
eb:ec:b2:8b:cf:2f:be:09:9d:6a:cf:93:02:8c:fe:b0:d0:06:
b0:e3:7f:30:1a:11:f0:10:48:1f:e6:bb:aa:1f:4c:4f:3b:d4:
8c:1d:52:5b:2c:ac:51:7e:e1:7f:98:bd:8e:14:ed:bb:bc:7c:
91:cc:49:e7:7a:97:a8:be:d5:92:e7:4b:ab:ad:6c:02:df:e4:
13:8d:e3:bf:28:d2:cc:0d:08:f0:b4:97:77:1c:02:e0:f3:68:
35:fc:07:ea:15:b6:77:cd:c4:d7:6a:3e:91:22:f3:08:b9:d8:
a9:57:70:4a:85:5d:00:db:6e:7a:a9:1c:e0:37:12:84:59:21:
5a:29:6a:33:4c:4b:2e:48:71:46:15:91:bf:4f:0a:b1:de:91:
67:2c:79:6b:ee:6e:f0:ae:ca:08:e5:3b:9b:e4:76:0d:12:ec:
5c:5c:f0:31:fc:af:d8:5a:01:fd:ef:5a:16:eb:79:0f:71:ba:
3e:bc:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:40 2024 by rpki-client on console-ams.rpki-client.org