Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/jVDeCqYQbgOKas05HYjGpI5dwBg.roa
File: jVDeCqYQbgOKas05HYjGpI5dwBg.roa (raw, json)
Hash identifier: ijITaJxcn1Ki2+eN06cttJJmvoyWogElDUJ7CaxCiZo=
Subject key identifier: 8D:50:DE:0A:A6:10:6E:03:8A:6A:CD:39:1D:88:C6:A4:8E:5D:C0:18
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 0183E7CE798150C81CE0EC6FD74FAE74252B
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/jVDeCqYQbgOKas05HYjGpI5dwBg.roa
Signing time: Mon 17 Oct 2022 21:16:51 +0000
ROA not before: Mon 17 Oct 2022 21:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205975
IP address blocks: 212.46.58.0/24 maxlen: 24
147.189.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:ce:79:81:50:c8:1c:e0:ec:6f:d7:4f:ae:74:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Oct 17 21:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d50de0aa6106e038a6acd391d88c6a48e5dc018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:5a:da:8f:40:fb:a6:ec:a6:1a:1b:19:33:
e4:8d:47:6a:96:c6:f0:f5:25:35:8f:8f:85:07:b4:
19:1e:32:1f:4a:98:af:41:39:59:ba:c0:e1:73:31:
f0:e5:ac:78:59:de:d9:4c:12:75:46:66:17:93:29:
1c:bf:4b:7d:3d:a6:38:ea:93:15:61:5f:18:5a:c3:
17:cd:74:44:e3:51:b3:9d:c3:47:11:d1:c9:02:e7:
41:b7:61:63:74:ae:30:cc:06:8c:e8:fe:20:cb:33:
ff:73:7b:cb:07:4f:44:5b:22:e3:a0:0b:00:d1:33:
1b:89:ff:48:6e:83:46:3d:04:62:bf:35:25:62:ed:
7f:af:05:ad:52:0c:ae:61:b7:9a:9f:10:64:35:93:
a9:5b:5e:8e:f5:20:d3:46:8b:64:59:69:4b:c2:38:
80:e9:84:84:87:dc:ee:70:be:62:35:0f:11:f6:c7:
b7:03:37:4b:22:47:d2:e3:d9:b1:11:30:d8:35:42:
97:e3:47:73:71:8a:1c:be:b4:05:6b:93:4c:1a:fb:
c8:c6:96:12:cc:7e:df:0a:99:f3:2f:80:d6:47:34:
5b:06:83:b0:60:46:41:fc:1a:d6:87:0d:63:18:d4:
0e:3f:7b:42:c5:e5:b5:d8:97:07:e0:fa:5c:41:bc:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:DE:0A:A6:10:6E:03:8A:6A:CD:39:1D:88:C6:A4:8E:5D:C0:18
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/jVDeCqYQbgOKas05HYjGpI5dwBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.155.0/24
212.46.58.0/24
Signature Algorithm: sha256WithRSAEncryption
24:be:fc:9e:46:5e:3c:16:b1:7e:0c:d0:53:a2:83:1b:36:ef:
79:e8:14:06:49:3e:60:b5:ab:5e:38:50:4a:60:6e:ab:a3:88:
7b:97:1e:61:0c:d7:01:c5:98:ad:a9:54:48:0c:b3:4d:96:b6:
de:d4:f8:dc:8a:f9:28:a0:54:e4:a9:aa:5f:f2:5f:25:a5:6c:
6d:6c:9e:36:a7:d0:fb:9f:58:7c:20:32:58:7e:83:7b:69:26:
f6:2c:7e:57:0c:86:89:fd:63:4d:4d:8e:3b:9a:de:79:0d:46:
7f:68:3e:12:9e:b7:cb:da:71:b5:93:52:bd:b3:bf:92:62:a1:
96:33:36:ea:15:23:c2:e9:36:ac:99:ed:4a:83:b2:f0:34:e2:
24:38:34:04:51:3c:fa:06:2b:90:44:32:71:cb:15:d9:01:34:
2c:7e:f7:5d:46:ae:e5:64:07:d2:10:14:aa:60:cc:08:fc:40:
11:53:e4:4a:3e:a0:7a:7d:3a:24:b0:58:71:84:2f:d5:1e:ad:
11:e2:63:07:fe:9e:2b:f8:82:77:d6:bd:9f:b1:38:cc:a4:14:
4a:20:a5:33:3a:b3:73:25:54:31:3e:98:ad:40:65:3d:2a:78:
84:f9:7b:77:39:40:03:05:df:92:0e:b1:b7:f0:8b:83:ba:fe:
f7:83:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org