Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/J8eGem_OCYeWSayCVB5ttfEcI6g.roa
File: J8eGem_OCYeWSayCVB5ttfEcI6g.roa (raw, json)
Hash identifier: jCKKVUsLvUkwX8MSAHe+9HhKBXcs8sRjK4XnynNn6CE=
Subject key identifier: 27:C7:86:7A:6F:CE:09:87:96:49:AC:82:54:1E:6D:B5:F1:1C:23:A8
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 0386D6
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/J8eGem_OCYeWSayCVB5ttfEcI6g.roa
Signing time: Wed 29 Jun 2022 08:54:02 +0000
ROA not before: Wed 29 Jun 2022 08:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44704
IP address blocks: 91.206.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231126 (0x386d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Jun 29 08:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c7867a6fce09879649ac82541e6db5f11c23a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:88:73:cc:66:f1:06:fa:91:6a:be:ba:0d:
8c:dc:58:47:69:6f:98:3a:d7:47:c8:29:54:c5:a7:
24:bd:6b:16:e7:74:98:aa:b4:c4:80:21:9b:a5:42:
0c:02:17:37:27:3e:2e:50:0c:54:b8:1a:83:da:5d:
df:d0:d1:c4:df:39:80:9a:34:ba:a5:0c:fc:f0:2a:
c0:8f:1a:f2:8f:83:97:4d:b5:dd:6e:55:66:4d:12:
e5:3b:0d:7f:0a:87:d7:b3:89:ed:5f:0e:d8:86:33:
ad:49:d8:fb:c3:c0:3a:fe:94:e0:97:cd:1f:de:8e:
a5:02:76:ad:8c:0a:6e:d7:c4:cd:e1:1e:9d:bd:db:
95:20:f2:38:d4:ec:b9:ea:77:c4:bf:54:44:3c:ff:
e7:7d:de:cf:66:06:41:06:44:ef:96:d4:d5:83:60:
e8:6c:6a:c3:52:c1:2b:4a:ee:5f:7f:6b:ae:f2:bf:
bb:fa:2c:f5:9f:bb:fb:50:47:d6:86:93:d3:00:6b:
4a:d3:ac:4f:45:d4:44:8b:ce:27:0e:56:76:96:98:
6f:9c:00:a5:e4:42:11:25:f5:68:c6:97:66:e1:c0:
2c:35:1c:c2:8e:90:2f:4a:e1:76:76:f9:1d:22:94:
f3:45:9d:3b:a2:75:f1:31:fc:21:33:fc:ed:16:8d:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:86:7A:6F:CE:09:87:96:49:AC:82:54:1E:6D:B5:F1:1C:23:A8
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/J8eGem_OCYeWSayCVB5ttfEcI6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.100.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:dd:46:28:1f:20:47:d2:ff:52:08:40:e2:36:b7:c4:36:14:
42:3e:71:89:0e:d2:23:19:8e:51:8c:dd:fe:9d:7f:ff:4b:44:
a5:00:9a:27:b6:17:bc:c7:8d:bb:50:8c:12:da:22:9a:ec:45:
d0:90:83:a5:68:df:19:41:1c:9e:3a:15:26:08:b2:18:1b:38:
01:a0:39:98:6d:80:db:3b:c2:8d:d6:81:d6:8f:97:f1:4d:61:
af:c1:1e:f4:a3:63:16:67:66:5e:60:fc:6a:e9:70:3a:39:df:
74:04:0c:9a:b6:cc:8a:6c:0d:cc:40:2b:3e:43:9d:8d:b3:9e:
07:a9:17:9e:91:9b:f6:7e:4c:35:eb:f9:d4:2b:e3:6a:7d:f0:
bc:d6:88:c5:40:51:15:46:56:5d:61:f4:22:e4:6b:68:f1:4c:
b3:c4:39:84:ed:18:c4:0c:5f:a6:31:55:9d:29:61:f6:5b:99:
8b:27:2f:44:e8:5b:ad:dc:c1:50:87:34:f1:38:6d:4a:79:e6:
39:93:c2:b6:28:4f:5d:24:86:d4:24:94:9c:09:12:a0:d6:ec:
6b:05:40:e4:fc:5d:b8:70:ab:93:c5:8d:4f:d6:4d:4f:eb:ae:
95:2c:8e:08:11:3d:76:0c:1a:2f:90:da:b3:48:19:7e:cf:84:
2a:6e:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org