Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/JPNg420fEWRpjRF-BWGAE8ME1Ik.roa
File: JPNg420fEWRpjRF-BWGAE8ME1Ik.roa (raw, json)
Hash identifier: PjOfzjiYc2f1SeqdRQGGnHMrYR64VNQL05KYo668/NA=
Subject key identifier: 24:F3:60:E3:6D:1F:11:64:69:8D:11:7E:05:61:80:13:C3:04:D4:89
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 02CDDD1C
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/JPNg420fEWRpjRF-BWGAE8ME1Ik.roa
Signing time: Sat 01 Jan 2022 09:54:22 +0000
ROA not before: Sat 01 Jan 2022 09:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.255.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47045916 (0x2cddd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 09:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24f360e36d1f1164698d117e05618013c304d489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:2f:e9:52:28:eb:c5:dc:d2:6e:b8:dd:39:
c2:ac:d1:29:a2:f4:5d:48:41:02:38:2b:eb:b6:48:
84:ad:3b:8e:91:2a:f5:01:d4:a4:cc:e9:e7:f1:df:
51:cc:17:ad:01:6e:77:87:aa:a2:2a:38:98:1f:95:
75:68:d7:18:ce:fc:fe:78:0d:9f:4c:84:2d:e2:d2:
30:df:98:73:ad:8c:13:9d:fe:f0:c2:6a:9b:b3:6e:
7f:68:d2:8c:18:f7:18:e3:6e:b4:e9:e5:61:cf:29:
f3:28:1f:85:76:9e:c7:fa:5d:3b:31:a8:03:53:2e:
4c:68:e4:5a:fe:65:ae:c1:ce:fe:84:71:e1:74:40:
51:76:62:d0:e3:a1:5f:19:1d:d4:85:ba:d0:24:f1:
5b:b9:5e:a2:fe:52:1f:2f:dc:8a:cd:c5:d5:43:1b:
99:db:0f:76:67:bf:50:61:b6:02:d7:7a:0f:67:48:
b9:8a:44:d8:f0:8f:a2:d4:24:7b:1a:b6:e1:77:6a:
e9:73:e7:bd:95:cf:42:f1:1f:48:56:83:41:a2:05:
e8:42:11:b1:8b:aa:0c:1a:a4:41:e1:0b:3d:7d:6a:
2c:02:3a:9d:3e:d4:91:1d:9b:32:e4:9c:bb:a3:dd:
1c:24:04:58:ca:e9:28:5b:24:f8:d4:1f:35:75:43:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:60:E3:6D:1F:11:64:69:8D:11:7E:05:61:80:13:C3:04:D4:89
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/JPNg420fEWRpjRF-BWGAE8ME1Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:d2:17:ee:bc:12:76:6c:f9:73:1d:cd:b7:8d:79:c6:81:c7:
61:2c:cf:84:86:22:06:b5:63:42:44:d0:fe:17:ee:ae:d2:ad:
48:5a:ca:37:ad:f2:76:8d:22:4f:6f:f8:11:7a:1b:d7:5e:33:
e5:46:7f:e2:8f:fd:ab:c8:88:b4:51:8d:10:1f:73:08:b4:bb:
91:d9:f7:66:a5:69:0d:f5:af:06:17:29:2c:d6:2b:7e:00:a5:
66:4d:42:9e:6a:47:f8:32:a0:33:2a:52:07:a8:df:24:fa:24:
5a:58:bf:26:16:0b:e6:bd:d3:e7:25:69:c9:52:2e:d4:02:a2:
16:9a:8d:15:0a:1d:9e:af:9f:e4:e1:e2:f4:de:83:c4:ec:73:
5a:b5:ed:8d:5b:7b:fe:a1:d4:03:d3:c1:e9:ad:30:af:96:2d:
53:1d:1e:65:20:19:c0:65:22:5d:49:c8:9b:b1:95:68:23:c2:
62:4c:77:73:28:7e:85:cc:b6:a4:3f:21:c5:03:6e:1b:b5:5b:
3d:e4:37:18:a8:61:d3:d4:c9:ba:96:a6:91:05:6e:0b:d5:d7:
7e:28:c5:3f:a7:2f:9b:9a:3b:91:d9:64:06:4d:f1:a9:be:14:
57:16:12:53:7f:1b:2e:b4:7a:e4:8c:20:fe:10:d8:17:d8:f5:
98:37:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org