Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/JR7jb0vDLbraflApyV-3VUh8rZU.roa
File: JR7jb0vDLbraflApyV-3VUh8rZU.roa (raw, json)
Hash identifier: Cw9jB7+sr0cLcRoV+ZG6QP4gYYb2bKUVtGRNAialn3A=
Subject key identifier: 25:1E:E3:6F:4B:C3:2D:BA:DA:7E:50:29:C9:5F:B7:55:48:7C:AD:95
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 134C0CD8
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/JR7jb0vDLbraflApyV-3VUh8rZU.roa
Signing time: Sat 01 Jan 2022 05:54:02 +0000
ROA not before: Sat 01 Jan 2022 05:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8932
IP address blocks: 46.162.220.0/22 maxlen: 24
37.157.216.0/21 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:2::/48 maxlen: 48
2a00:cc40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323751128 (0x134c0cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 05:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=251ee36f4bc32dbada7e5029c95fb755487cad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:d1:4d:02:f0:c8:91:55:a3:a2:25:75:80:
b5:0b:89:f4:16:59:c3:70:d7:55:ea:e7:96:7e:38:
39:f3:1d:ff:41:0f:93:d3:51:4a:fe:ad:dd:57:81:
82:5b:69:5d:d2:2a:84:28:3d:cc:7f:0e:0e:4f:64:
2c:87:63:79:45:e5:46:89:b3:24:9b:3c:53:d6:7c:
26:6c:e6:65:61:e1:03:7c:58:6b:7f:a6:24:16:fc:
b2:1a:87:db:69:25:d0:9b:e9:15:02:2e:77:e9:24:
a4:a1:eb:ae:6f:8a:df:24:60:48:8b:74:27:2a:16:
ba:79:c8:3f:34:cd:ac:32:c9:1b:c6:9d:af:ff:b4:
80:43:b7:ef:c0:65:37:b6:8a:8b:ab:a5:27:a5:52:
f9:36:f2:5d:f6:34:f3:c0:26:ee:4a:be:7d:8c:ad:
2d:88:20:39:80:fb:60:72:eb:2b:88:5d:4a:cc:66:
af:89:a6:7f:2c:2a:db:d9:01:46:34:b1:e2:b6:52:
5c:37:28:99:da:7c:a8:fd:61:1c:3c:d3:51:58:c5:
bb:a9:15:84:95:d9:9f:05:40:7b:be:2d:dd:71:00:
f4:5a:9a:84:1b:87:2c:81:df:38:22:0d:41:f3:6f:
a1:7e:9e:96:ac:c5:0b:30:19:7d:d8:d0:fb:e9:f3:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:E3:6F:4B:C3:2D:BA:DA:7E:50:29:C9:5F:B7:55:48:7C:AD:95
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/JR7jb0vDLbraflApyV-3VUh8rZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.216.0/21
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:a5:30:19:dc:19:20:2f:b8:7c:14:3e:1f:56:f9:9f:65:57:
38:63:0e:a8:60:f5:57:74:ff:ed:b8:c0:e7:2a:d6:11:0c:6b:
4a:08:0b:64:3a:34:a4:30:04:12:e9:15:cd:c5:c1:ee:a6:0c:
f7:c6:4a:0b:e3:69:c0:b3:81:96:cf:d4:79:db:9c:ca:bc:c5:
d2:17:df:d3:54:fa:64:8a:29:33:20:96:ec:fc:ba:0e:88:60:
9c:51:b4:b9:55:44:ab:7a:41:51:e2:46:1c:88:c7:2f:39:af:
f9:39:f2:f4:4c:92:fb:c3:66:03:35:61:ce:58:2d:d6:18:09:
20:44:1e:53:a1:00:2d:83:2f:42:c0:d2:06:4f:b8:30:10:bd:
f6:ef:dc:e8:d6:12:2d:81:ed:f0:e6:3b:e0:12:11:99:10:1a:
6f:48:9b:53:d4:99:f4:d2:2a:e4:20:57:3d:9f:0a:9f:a9:8b:
0a:ac:b6:68:b0:7a:17:26:81:ff:c9:a6:18:79:50:92:53:5d:
7e:0f:5a:48:cf:41:e6:4f:74:f0:3f:48:95:07:d4:54:5d:05:
b5:a2:30:71:c7:f9:73:6e:2d:3e:52:ff:b9:b8:3b:fd:5b:29:
67:a7:d9:0e:44:c8:32:d9:78:e3:f5:c0:dc:24:e9:35:2f:f1:
c6:5b:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-ams.rpki-client.org