Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/JI5SHj6xXMeaEXkZ3n68hVd-jbE.roa
File: JI5SHj6xXMeaEXkZ3n68hVd-jbE.roa (raw, json)
Hash identifier: yK4eIwFYueSZDTYVQTzjTyG886HPc2fjFG3L0Ur7Scw=
Subject key identifier: 24:8E:52:1E:3E:B1:5C:C7:9A:11:79:19:DE:7E:BC:85:57:7E:8D:B1
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 050C1C66
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/JI5SHj6xXMeaEXkZ3n68hVd-jbE.roa
Signing time: Tue 04 Jan 2022 08:52:45 +0000
ROA not before: Tue 04 Jan 2022 08:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 94.126.248.0/21 maxlen: 21
87.237.168.0/21 maxlen: 21
87.237.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84679782 (0x50c1c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Jan 4 08:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=248e521e3eb15cc79a117919de7ebc85577e8db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:4e:1d:27:45:ed:e4:1e:fc:bd:3a:25:95:
09:50:f3:ec:61:5f:8d:3b:eb:1d:b2:12:2e:57:90:
6f:c7:04:eb:3a:db:25:4e:b9:d5:95:4a:d0:1f:e8:
9d:57:3d:45:98:70:27:76:91:4d:5d:0a:99:31:16:
f7:f9:b1:e0:89:7f:7c:4c:40:bf:b9:27:06:e2:04:
53:d9:5b:5d:88:f1:ad:42:7d:b0:e8:cc:b0:29:82:
dc:bd:7e:8b:bd:b6:3f:5a:a3:c7:40:59:dd:a0:be:
ee:04:f1:68:13:2f:ab:a6:76:45:14:28:b8:80:8d:
90:2f:90:9e:c0:28:09:4a:51:31:92:09:77:16:63:
fe:9d:64:68:19:1c:d4:ec:39:f1:61:f4:e8:17:c7:
7a:22:9c:c8:19:78:5d:98:8b:17:5b:50:d5:4c:b2:
1c:72:83:8b:24:8f:ae:0d:36:3c:f2:0a:f7:78:66:
e0:fd:c7:7c:79:94:e1:ca:b3:13:14:0e:a6:54:bc:
f9:ef:1f:8c:f0:bc:9b:57:3f:ed:e7:dd:fa:65:a6:
f2:22:d1:5d:d0:c6:12:02:7b:95:69:e9:ab:8e:e2:
48:c2:72:07:a6:49:15:98:84:74:d8:6e:92:c0:30:
5d:24:cc:18:48:cf:5c:ff:97:13:97:7b:99:38:13:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8E:52:1E:3E:B1:5C:C7:9A:11:79:19:DE:7E:BC:85:57:7E:8D:B1
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/JI5SHj6xXMeaEXkZ3n68hVd-jbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.168.0/21
94.126.248.0/21
Signature Algorithm: sha256WithRSAEncryption
75:25:29:f3:28:33:6d:11:6a:c1:d7:ba:37:c0:11:5b:db:ee:
94:8e:66:0a:61:43:2a:e4:b5:9a:68:e8:5e:a7:10:a2:18:0f:
56:71:45:a9:89:7c:2c:f9:e3:ea:6d:46:31:5f:18:4e:5d:22:
57:9f:31:6c:89:50:e1:a1:57:ee:78:a1:23:98:f2:45:0a:3d:
8f:c4:a3:f9:17:18:eb:13:9b:e2:c0:be:d9:b8:b8:16:64:90:
46:d3:aa:ba:46:30:f1:90:0a:94:7c:86:64:f5:28:88:dc:43:
fe:c8:84:b3:8d:04:d5:3b:73:97:e1:f8:13:13:a6:ae:bc:23:
5a:1d:4f:7e:5f:e7:4f:f8:7a:66:36:3d:a9:1e:3b:ee:31:37:
db:78:7a:f8:34:fc:5a:a8:98:06:92:bd:59:bc:71:ac:51:f8:
11:87:ac:aa:1a:a9:4d:03:e9:d6:36:2a:bc:b4:c3:a4:42:2d:
5c:55:0f:27:23:6c:5b:ab:84:73:ff:2a:77:a5:75:8f:cd:83:
eb:9b:9a:58:d1:77:6d:cc:5a:f7:d6:e9:78:37:1c:3d:e8:51:
41:5e:e9:e9:16:30:42:9e:54:51:5b:e6:3b:6b:19:b4:a2:42:
b3:cc:aa:2a:02:9e:60:b9:56:f5:31:6e:05:68:f7:44:27:ab:
cd:44:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:12 2024 by rpki-client on console-fra.rpki-client.org