Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/jv_KzXq6gExNsf-s4gWJ8NweQE8.roa
File: jv_KzXq6gExNsf-s4gWJ8NweQE8.roa (raw, json)
Hash identifier: OWSfQ5At3L7brKBgYU4u/7vmdeQprjDvIz8KCQgP4cc=
Subject key identifier: 8E:FF:CA:CD:7A:BA:80:4C:4D:B1:FF:AC:E2:05:89:F0:DC:1E:40:4F
Certificate issuer: /CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Certificate serial: 010493B4
Authority key identifier: 7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/jv_KzXq6gExNsf-s4gWJ8NweQE8.roa
Signing time: Mon 07 Mar 2022 17:31:17 +0000
ROA not before: Mon 07 Mar 2022 17:31:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17077172 (0x10493b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Validity
Not Before: Mar 7 17:31:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8effcacd7aba804c4db1fface20589f0dc1e404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:c9:6f:c8:3f:47:e9:ca:45:ac:8e:f1:4e:
b9:3c:87:6d:fd:92:69:5a:3a:46:3b:7a:47:4d:8e:
69:a0:2e:ff:be:9d:80:f8:46:14:6e:5e:6f:e2:e7:
01:dc:1b:27:ce:21:a3:93:f3:b6:6e:f7:e2:cb:72:
07:ef:ad:f2:06:2c:f9:bd:e1:b9:db:52:0f:7b:79:
d6:c5:44:3d:92:a0:a5:ed:87:53:0f:d1:89:a5:25:
c3:78:49:28:3b:45:25:3a:d2:ab:8c:87:e2:17:85:
e4:8e:9f:32:8d:87:a5:84:19:f9:20:7f:f6:80:8a:
2e:fa:ff:67:a2:46:b7:a5:6e:b7:88:6a:0b:2b:50:
8b:74:ec:9a:75:03:fd:8e:27:f0:20:eb:fb:78:09:
c3:62:cd:cc:8a:c0:d2:a4:f5:ee:eb:fe:de:05:d3:
83:42:d6:e4:80:a3:b4:db:ba:23:13:5d:c0:1d:19:
e7:33:e1:ea:b3:89:31:ee:2a:8b:7e:7c:00:e2:94:
35:f9:62:9c:50:17:1e:b0:40:22:dd:c0:5a:ee:ca:
c7:86:9f:fd:ac:d8:74:04:ec:63:34:9c:75:3c:b5:
e9:41:8d:01:94:fe:d3:35:2e:78:63:dc:fb:84:c3:
14:19:5b:33:d5:ea:8b:42:35:37:cc:da:d7:76:34:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FF:CA:CD:7A:BA:80:4C:4D:B1:FF:AC:E2:05:89:F0:DC:1E:40:4F
X509v3 Authority Key Identifier:
keyid:7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/jv_KzXq6gExNsf-s4gWJ8NweQE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.184.0/24
Signature Algorithm: sha256WithRSAEncryption
59:55:b2:ec:f9:64:e9:dc:d7:54:23:b3:df:6a:aa:fe:a0:92:
1d:49:2c:2e:97:b8:b7:e4:96:25:40:e9:c9:6d:44:8c:55:98:
da:ad:08:10:39:0d:90:1a:35:7d:17:04:7b:10:2b:c5:55:15:
a0:81:50:28:8e:1d:f2:f2:5f:05:87:c8:3d:85:b5:9c:a2:af:
09:9e:2d:08:51:95:5e:53:97:cd:fe:a5:5c:17:14:b8:51:6d:
df:fd:a6:1c:a5:1c:e7:3c:c1:25:7c:4b:cb:29:65:cd:c1:e7:
ed:5f:ef:b3:23:4c:ff:af:45:77:fd:94:60:90:be:5c:9e:2c:
12:d3:1d:e5:3b:2f:6c:95:ac:d6:d9:1b:ed:ff:d0:f4:0a:5a:
a0:08:70:cc:76:4d:f0:62:38:18:33:07:01:87:f6:5c:cb:81:
38:af:ca:f0:ba:c4:63:ca:b4:91:ac:a7:f8:23:1f:0c:78:ee:
ce:d1:ec:c9:5c:d8:18:64:60:3f:42:59:f0:86:a3:79:c5:5d:
5d:73:50:06:3c:72:36:61:ce:ec:ec:7f:22:87:28:19:7e:a0:
91:c3:9f:26:8e:15:b8:b5:47:11:84:b1:f7:cc:3e:2e:8d:b4:
49:37:11:42:e8:70:47:18:e7:0d:e6:95:e3:62:21:da:0c:e3:
b9:87:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:03 2023 by rpki-client on console-fra.rpki-client.org