Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/jk17kiRN3j_h1DXcuuPWVJQ87OY.roa
File: jk17kiRN3j_h1DXcuuPWVJQ87OY.roa (raw, json)
Hash identifier: 4cvijsmvtLEVTvYQwQYw7Vo5v7l7aSTMuDsrA86KSas=
Subject key identifier: 8E:4D:7B:92:24:4D:DE:3F:E1:D4:35:DC:BA:E3:D6:54:94:3C:EC:E6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 018291A632BB63AD42F7611718654467FA66
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/jk17kiRN3j_h1DXcuuPWVJQ87OY.roa
Signing time: Fri 12 Aug 2022 10:42:44 +0000
ROA not before: Fri 12 Aug 2022 10:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.155.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:a6:32:bb:63:ad:42:f7:61:17:18:65:44:67:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Aug 12 10:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e4d7b92244dde3fe1d435dcbae3d654943cece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:af:52:e1:3e:2f:a9:3a:5a:49:3b:d3:9b:
11:85:cd:1b:ba:d4:19:d2:c6:44:9a:80:60:cb:b6:
bc:f9:4c:8c:ee:70:7f:b8:e3:79:8d:c3:42:63:88:
22:5b:0b:e7:3f:63:e5:05:b3:28:69:2c:ef:a5:31:
a9:bf:66:48:18:ff:d3:7c:9f:b7:25:1d:c3:f5:a3:
ee:78:52:e7:a1:28:a1:73:29:ee:83:1e:ec:8d:36:
f0:4c:96:35:8d:84:8d:30:11:ac:cb:63:aa:e8:45:
60:fe:d6:ae:74:1e:9c:af:12:13:39:8e:9d:7e:55:
4d:5d:c6:3c:62:f5:18:8a:41:ad:06:da:df:1f:6f:
30:a5:98:52:87:8e:e0:ce:32:68:c7:63:90:91:f8:
20:b4:5b:fb:1a:14:be:e6:4b:45:24:9e:d4:24:bd:
9a:75:ce:36:e6:73:d5:b3:c7:5a:e1:9d:a1:f1:f5:
d7:aa:e9:c5:20:cc:30:2f:fd:42:8e:26:41:9f:ce:
fd:fe:4e:bd:80:18:08:9f:16:ae:ac:61:d8:54:ad:
a4:fd:3b:5c:8a:28:a0:aa:b0:c3:fd:6b:a4:d4:23:
0a:9a:8e:9d:62:97:8e:e8:06:be:ba:0d:bd:d4:53:
ac:12:da:7f:02:80:5e:75:59:87:9a:2e:d9:2d:91:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:7B:92:24:4D:DE:3F:E1:D4:35:DC:BA:E3:D6:54:94:3C:EC:E6
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/jk17kiRN3j_h1DXcuuPWVJQ87OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.233.0/24
Signature Algorithm: sha256WithRSAEncryption
33:79:3c:3a:d0:a6:54:3f:c4:51:89:71:19:42:56:28:7f:91:
41:97:c1:07:39:cc:ac:59:42:ff:79:90:a8:d0:b8:31:33:b4:
8e:4b:b8:54:b8:a6:14:12:98:75:c5:db:5a:9b:8d:4a:12:84:
5d:7f:29:c7:ae:99:9b:24:8d:56:55:d1:76:1b:89:db:1a:6a:
37:8c:a8:6f:f4:b8:14:a5:d1:e5:8f:7d:26:e3:31:d5:a3:ad:
19:28:01:41:06:79:7f:45:cc:e3:d6:0b:03:d9:0c:07:a4:cc:
a2:41:cb:af:db:9c:59:0b:5d:14:cd:41:65:7f:03:04:b8:46:
eb:ec:cf:7e:89:5f:1b:1d:2a:b3:31:fb:36:67:09:31:9f:94:
65:71:76:fb:79:46:bd:f6:15:53:e5:30:03:15:79:16:34:db:
39:03:7e:3b:e4:34:11:eb:56:cc:40:ac:b5:47:3b:6b:3a:21:
e1:35:a4:73:de:6d:8a:29:92:e4:f6:89:28:7d:4f:1f:43:9f:
80:13:5f:ef:9e:9b:d8:94:77:db:35:b4:d9:d7:54:09:40:aa:
68:ed:e1:59:2b:58:33:09:4e:e9:0e:5a:ae:45:ed:50:ec:5e:
94:2c:06:11:87:50:f1:ae:5b:bb:f1:56:bb:88:72:52:80:63:
41:d9:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org