Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/JUcMg6CxxE3fiq4R88IzsO107UU.roa
File: JUcMg6CxxE3fiq4R88IzsO107UU.roa (raw, json)
Hash identifier: x59ppOG8Ar1eMJkLsSF9jGsf7RxoqgTw1XrxeB6oD2M=
Subject key identifier: 25:47:0C:83:A0:B1:C4:4D:DF:8A:AE:11:F3:C2:33:B0:ED:74:ED:45
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 089F5FE0
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/JUcMg6CxxE3fiq4R88IzsO107UU.roa
Signing time: Sat 01 Jan 2022 08:05:59 +0000
ROA not before: Sat 01 Jan 2022 08:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42923
IP address blocks: 217.79.144.0/23 maxlen: 23
217.79.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144662496 (0x89f5fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 1 08:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25470c83a0b1c44ddf8aae11f3c233b0ed74ed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:6a:f6:51:c2:32:02:25:b7:d8:14:31:c2:
60:7e:90:8a:94:28:bb:8a:5c:b2:7e:2a:fe:16:92:
d7:41:ee:f5:3d:22:58:f5:45:8f:13:23:04:d8:a4:
07:c1:f9:ba:43:94:d8:e6:1c:f4:5c:3c:86:dc:6b:
e5:c6:e6:d5:59:9c:d4:ea:00:18:5f:21:49:bb:1f:
60:99:7b:ec:c0:4e:c1:b2:ee:95:87:0e:ed:fb:37:
7d:4d:4a:52:fd:d8:fd:73:3a:8d:1e:1d:a4:48:a6:
46:8a:c9:82:29:8f:2e:86:18:4a:0c:a6:c9:2b:a4:
9c:5e:5a:1d:51:b4:97:de:ee:3c:55:e2:19:31:e8:
3c:2d:6f:54:50:27:59:c0:30:91:4c:f2:39:e0:2b:
27:8e:a5:be:85:24:1e:e8:93:f3:40:38:fa:4a:71:
4a:39:cb:9e:41:cf:ae:be:08:cf:01:ff:e6:69:34:
79:36:a1:03:ff:0a:c6:e3:57:51:3a:39:d2:f2:51:
94:4a:61:1a:aa:5c:65:4e:2c:1b:21:19:8b:53:ba:
e3:7d:b3:f0:6d:51:02:e8:42:f4:ba:fe:eb:01:83:
54:90:5d:db:1c:d5:da:12:31:83:f3:e7:f8:70:93:
ab:27:bf:37:49:04:01:6f:f4:70:01:4f:04:b3:f1:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:0C:83:A0:B1:C4:4D:DF:8A:AE:11:F3:C2:33:B0:ED:74:ED:45
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/JUcMg6CxxE3fiq4R88IzsO107UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:76:39:82:6a:41:99:b7:e2:42:fd:9e:b1:dd:b5:84:a4:35:
95:a9:1a:4d:3b:2a:2e:ce:bc:cb:86:be:73:81:a5:d9:d2:1a:
5f:2c:e9:98:0f:39:ca:fd:3c:3d:a0:7d:51:21:25:d4:18:ac:
33:ad:80:15:41:1a:cc:a2:2b:fe:2f:ba:40:f8:8a:5b:a9:a0:
b1:1e:c0:b5:05:f3:d8:40:f5:d6:5e:7c:33:29:3b:14:e6:96:
a6:6f:25:ad:3b:45:34:a4:f0:50:cf:ba:63:54:45:36:b5:ac:
34:9c:e4:19:a8:5d:bd:9d:ec:25:11:29:67:36:62:74:4c:ed:
41:4d:f6:89:ab:0d:41:76:2e:59:fb:e0:e3:1a:be:ed:91:e5:
b9:3f:9b:fd:dc:bf:02:4e:97:b3:54:eb:d4:45:c8:dc:8d:21:
0a:d1:f3:a3:fc:38:ef:82:70:8b:47:31:f6:fc:3f:b4:16:5a:
a6:81:63:9b:72:f0:f5:7d:05:4c:94:ca:84:88:51:91:f4:99:
4c:b3:ea:6e:e2:03:29:49:02:28:47:8e:aa:e0:35:39:e2:61:
c2:40:79:79:69:cc:ed:5c:ff:28:36:18:ac:92:b0:b0:97:2b:
26:26:0c:e5:ec:cb:bd:f7:8a:74:d6:6e:c8:39:e1:f3:f1:de:
ea:65:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:06 2024 by rpki-client on console-ams.rpki-client.org