Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/JlhQl200ywHonKvk0YpI4N0s0uk.roa
File: JlhQl200ywHonKvk0YpI4N0s0uk.roa (raw, json)
Hash identifier: eebovGBOesIRwOkCY+wuFnKW2+x1fdyhxeLxbrLAoaE=
Subject key identifier: 26:58:50:97:6D:34:CB:01:E8:9C:AB:E4:D1:8A:48:E0:DD:2C:D2:E9
Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial: 4237A6D7
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/JlhQl200ywHonKvk0YpI4N0s0uk.roa
Signing time: Sat 01 Jan 2022 07:02:35 +0000
ROA not before: Sat 01 Jan 2022 07:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57507
IP address blocks: 158.255.192.0/20 maxlen: 24
185.152.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110943447 (0x4237a6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
Validity
Not Before: Jan 1 07:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265850976d34cb01e89cabe4d18a48e0dd2cd2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:19:6a:68:ec:28:33:d8:8b:46:34:c5:2d:
4f:65:9b:28:60:16:b2:6d:d5:04:ab:00:27:80:36:
74:d4:f8:b3:13:c5:1a:f4:ff:fc:88:6c:27:ea:3c:
5f:0c:df:d0:41:65:df:8b:26:6d:a6:d4:24:54:02:
1c:74:43:3e:30:6e:bc:62:9c:91:6a:b1:87:09:f6:
72:8c:a1:80:46:15:7e:49:d8:a1:a1:50:7c:20:d7:
e5:3b:dd:e1:26:4d:b4:cc:f6:b2:55:07:0e:6c:f6:
59:3a:c5:af:6f:75:dd:9f:98:e7:84:ef:ea:8e:aa:
ce:6f:32:c9:bd:2b:f6:fd:45:eb:f5:10:79:ab:3d:
84:15:0d:79:22:0a:cc:27:d9:a6:25:8f:fb:60:70:
86:81:1d:88:7a:ba:68:5b:c3:1d:3c:c1:b5:5e:de:
8d:fc:20:f8:cc:c9:e0:d5:b2:c1:8c:d9:c8:2b:f7:
ff:39:82:12:f3:0c:78:f9:00:c8:cd:e5:5c:4a:a3:
f4:a7:29:ef:23:ec:d7:49:cb:a8:ae:f1:9d:60:55:
4d:cb:ab:ad:af:f0:6f:af:5b:ba:b7:40:b7:2d:95:
89:38:49:01:df:bf:44:a9:b3:1e:ec:89:5d:ac:33:
0a:5f:0c:6d:7d:65:eb:80:3d:41:32:6b:c8:05:38:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:50:97:6D:34:CB:01:E8:9C:AB:E4:D1:8A:48:E0:DD:2C:D2:E9
X509v3 Authority Key Identifier:
keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/JlhQl200ywHonKvk0YpI4N0s0uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.192.0/20
185.152.40.0/22
Signature Algorithm: sha256WithRSAEncryption
18:fc:34:67:de:62:12:f8:06:95:1d:67:31:31:c9:70:ea:da:
73:e7:57:cc:23:e4:37:a9:5f:c2:05:e7:9e:44:03:45:2b:d1:
da:a8:d0:f7:c1:c4:46:d4:38:02:70:28:f9:89:b7:17:ec:32:
d0:31:bd:89:7e:e8:84:7b:34:2e:f6:ae:9c:77:11:a9:fb:57:
31:f1:a6:e8:20:dc:00:a1:3a:a8:f7:24:ce:ca:f9:95:2c:de:
e4:d9:45:1b:ba:51:e8:4b:64:8a:b3:fb:cb:35:61:8c:c8:17:
80:21:24:a3:95:b3:41:c4:18:d1:4e:4b:a9:bb:dd:e2:b0:09:
81:1d:a3:59:54:c6:0e:4c:a4:85:52:9e:38:80:44:63:b8:52:
d1:8c:80:72:50:e4:8c:fc:1b:ff:c1:8a:fc:3c:12:f3:5e:4f:
67:c6:f0:07:e0:e4:27:0b:bf:9c:59:ee:36:11:3f:cd:da:a4:
cc:57:85:f2:d8:24:12:bd:ea:a6:d2:1c:a3:16:c3:6e:4a:99:
dd:c4:11:1f:b8:72:5b:46:af:51:a8:9a:b2:e1:fe:8b:a5:dd:
a2:b5:7c:d5:27:03:57:cc:c4:b2:91:65:12:ba:13:80:fc:97:
fb:57:12:36:82:ee:be:93:1a:29:f1:f4:0d:69:78:dd:40:88:
77:32:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:41 2023 by rpki-client on console-fra.rpki-client.org