Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/1-jpbBEut_NgZN-S1siI07b9jarE.roa
File: 1-jpbBEut_NgZN-S1siI07b9jarE.roa (raw, json)
Hash identifier: v5V3k+E0yNoejXilBQtMQNBt9dgXeEChnbCo+/TKj8Q=
Subject key identifier: FA:3A:5B:04:4B:AD:FC:D8:19:37:E4:B5:B2:22:34:ED:BF:63:6A:B1
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 05641EBF
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/1-jpbBEut_NgZN-S1siI07b9jarE.roa
Signing time: Sat 01 Jan 2022 08:57:57 +0000
ROA not before: Sat 01 Jan 2022 08:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202829
IP address blocks: 194.11.83.0/24 maxlen: 24
194.11.16.0/24 maxlen: 24
194.11.19.0/24 maxlen: 24
194.11.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90447551 (0x5641ebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jan 1 08:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa3a5b044badfcd81937e4b5b22234edbf636ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:63:02:56:4e:e7:ec:b6:ea:b4:2c:31:eb:f2:
01:5d:c4:3a:6e:e1:5c:79:16:f2:e9:f5:ad:3b:03:
40:82:1e:23:71:1f:45:25:0e:e5:59:93:8d:fd:6d:
6f:66:93:ee:dd:07:9f:4f:5c:16:09:a7:1b:65:42:
d7:f0:3e:e3:28:92:57:88:4d:1a:7a:cb:24:86:5e:
cc:cf:73:60:dd:41:6b:a5:a8:c1:62:7c:3e:65:95:
24:3d:9e:26:20:08:6d:bc:3d:bb:29:d3:4a:db:04:
69:cf:e5:7b:ac:97:82:8b:c2:04:cc:0f:e2:00:20:
35:b7:d2:dd:35:71:f9:81:bf:12:0b:60:f4:9d:b4:
26:44:57:df:82:9f:18:ec:fa:5c:30:7a:6d:49:1a:
7c:fd:15:f5:ec:87:bb:e8:63:bb:b2:d3:30:e2:a3:
05:a0:7f:8e:c6:e6:ad:c9:ec:65:56:a2:aa:3c:c3:
7c:e3:bd:98:60:26:b9:0a:16:7c:4e:4a:89:d1:a2:
51:a3:20:26:57:1c:d1:ad:6d:17:c5:b9:9a:db:ea:
62:d7:be:b4:a9:9e:48:29:04:6d:6c:03:8e:bd:32:
85:d2:61:4a:19:7c:bd:2a:1f:f7:54:bd:7f:ce:35:
a6:8f:a0:6d:9f:c3:2b:a0:cd:b6:74:6f:8c:8b:93:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:5B:04:4B:AD:FC:D8:19:37:E4:B5:B2:22:34:ED:BF:63:6A:B1
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/1-jpbBEut_NgZN-S1siI07b9jarE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.16.0/24
194.11.19.0/24
194.11.25.0/24
194.11.83.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c1:90:b8:ae:1d:51:0e:67:58:ca:15:0f:2e:e5:3b:38:26:
fd:c1:67:86:47:c0:bd:bd:72:c9:d9:7f:4f:dc:37:f1:8e:f5:
c7:59:af:89:b4:53:a5:0a:b6:4b:41:59:09:85:3f:88:b2:93:
3e:be:46:89:fc:c4:c5:23:88:da:7e:42:b7:f1:d3:f9:84:f5:
eb:ed:8f:6e:f6:29:9c:98:aa:bc:92:3d:35:21:92:e7:43:32:
53:f0:62:0a:ab:b0:75:38:f3:ca:8a:3b:f8:f5:c7:68:de:1c:
7b:41:5b:ba:2a:f2:e2:22:0b:07:f7:93:05:86:02:0a:34:fc:
ee:87:44:57:53:5b:04:e2:38:78:06:2f:3e:ab:c2:70:8f:78:
ed:eb:58:ff:01:13:70:cd:4d:80:ae:dc:bc:79:c1:7b:dc:41:
82:c4:d6:d6:5e:d0:49:0f:2d:b2:0c:99:5f:3b:69:c7:9f:d9:
46:f7:d6:68:07:04:52:0b:08:2d:12:33:3d:d4:8b:66:39:b0:
3f:e0:b7:79:c5:e2:d3:f8:5b:d6:28:5f:52:c8:a1:2b:3e:30:
33:88:49:b0:67:7b:19:4a:0d:39:f5:1e:20:d9:a1:c9:e4:05:
d4:49:e0:0d:d9:e8:ba:19:45:62:b7:c8:f8:7a:8f:65:3a:ae:
b9:6f:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org