Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/JamrNg2Tr_Gf7MMiAl6yPmKgE1w.roa
File: JamrNg2Tr_Gf7MMiAl6yPmKgE1w.roa (raw, json)
Hash identifier: +h7tqXwHy9IaQHZpZrF0lsV6aenj9LKeIK3kzfTPET4=
Subject key identifier: 25:A9:AB:36:0D:93:AF:F1:9F:EC:C3:22:02:5E:B2:3E:62:A0:13:5C
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 7EBE28
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/JamrNg2Tr_Gf7MMiAl6yPmKgE1w.roa
Signing time: Sat 01 Jan 2022 00:58:34 +0000
ROA not before: Sat 01 Jan 2022 00:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57133
IP address blocks: 185.130.137.0/24 maxlen: 24
185.130.139.0/24 maxlen: 24
185.130.136.0/24 maxlen: 24
185.130.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8306216 (0x7ebe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Jan 1 00:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25a9ab360d93aff19fecc322025eb23e62a0135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:01:3c:ee:09:79:7a:08:98:20:1e:d2:66:
4c:c0:f2:50:d3:97:68:2c:1c:4a:b1:68:1a:12:53:
b3:e6:09:85:0a:78:d8:6a:fc:8b:ab:06:c7:eb:1a:
41:23:b2:70:be:c2:c4:a0:0b:09:8d:dd:65:f5:41:
94:6c:a7:2c:f2:a0:b1:5d:02:c3:61:c1:e0:f2:05:
01:a9:4b:2d:28:39:77:28:87:8e:53:ee:4d:52:72:
f7:de:85:19:1c:9b:1c:4d:8f:0c:18:e3:5e:ab:67:
2b:37:73:14:21:98:3f:31:a6:08:42:13:04:54:49:
5d:cf:ac:7e:7c:97:b6:96:52:bb:66:02:c2:ec:1f:
db:5b:2e:bb:ca:37:6a:e2:71:a9:73:d0:c6:f4:8c:
cf:95:18:6b:60:6e:bb:37:bc:4a:2c:4c:de:1f:94:
72:90:84:40:a8:9f:7f:99:41:ef:b7:21:cb:95:7d:
3c:84:cf:54:31:c2:27:36:bb:37:91:66:9c:3d:85:
f2:9b:9d:ea:d0:1c:94:69:70:22:b5:5d:d8:8a:d3:
fd:fc:d3:fd:2f:1a:f9:0a:b8:39:79:b6:92:90:81:
03:be:ec:e6:8a:c3:22:98:b0:64:9b:04:c0:51:ce:
74:db:68:19:cd:7e:4d:79:1e:3c:97:b2:22:06:a2:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:AB:36:0D:93:AF:F1:9F:EC:C3:22:02:5E:B2:3E:62:A0:13:5C
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/JamrNg2Tr_Gf7MMiAl6yPmKgE1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.136.0/22
Signature Algorithm: sha256WithRSAEncryption
59:69:ac:77:52:30:95:94:44:60:bc:49:81:2d:24:f1:7b:11:
66:94:b1:6c:ee:bd:b0:d0:c4:7e:f9:a8:2c:83:8f:25:bd:e2:
b0:51:48:db:5a:ea:18:15:3c:ed:42:64:34:2a:3e:a5:39:98:
d6:53:e9:13:89:7a:cb:37:d0:46:e6:90:68:65:1a:90:6d:d2:
2d:d5:9c:86:17:8b:29:8d:73:39:37:2b:8b:32:b4:70:cb:81:
55:1e:50:cc:33:11:09:37:8c:b7:f3:ae:03:29:51:1d:0f:b1:
54:d9:2d:d4:34:02:1a:7f:ad:aa:f5:33:7e:b2:a2:ff:40:0d:
1f:02:09:dd:75:f0:a7:b8:e3:7c:42:35:bf:22:0d:de:31:f2:
62:d3:11:64:6d:80:71:9f:b0:97:f9:1a:1c:fb:5e:f5:f9:a3:
33:20:88:48:7c:fc:54:0b:6c:ed:79:8d:af:4c:19:4b:14:20:
10:e6:17:ed:b0:a7:d3:85:30:ce:87:d9:1f:fd:0d:63:12:c4:
25:01:89:7e:cb:76:26:61:37:cb:14:ad:85:45:78:56:c2:dd:
83:f0:63:9f:a7:44:10:26:20:a0:8e:63:e3:05:78:b9:0f:9a:
90:01:83:00:a9:2b:d0:8a:c5:d3:72:db:0e:2c:8b:62:a9:8d:
da:da:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:32 2024 by rpki-client on console-fra.rpki-client.org