Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/JHONgjVWAMiugmPznvkU--KOsXA.roa
File: JHONgjVWAMiugmPznvkU--KOsXA.roa (raw, json)
Hash identifier: r8mPV3WW1G9psVwfnsKa02c5JBVgU6MA4bOI7aJfbGI=
Subject key identifier: 24:73:8D:82:35:56:00:C8:AE:82:63:F3:9E:F9:14:FB:E2:8E:B1:70
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 05BAA5B3
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/JHONgjVWAMiugmPznvkU--KOsXA.roa
Signing time: Sat 01 Jan 2022 13:59:55 +0000
ROA not before: Sat 01 Jan 2022 13:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.113.142.0/24 maxlen: 24
194.113.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96118195 (0x5baa5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Jan 1 13:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24738d82355600c8ae8263f39ef914fbe28eb170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:3f:85:7e:c6:7d:9c:40:7b:15:78:22:07:
a3:a2:16:e2:67:b9:75:6e:03:1f:74:a8:d9:ee:64:
c6:bd:c0:81:9c:d5:f9:a6:0f:19:cb:41:b5:d8:83:
ee:fb:5a:09:2d:1a:16:ef:94:24:aa:bb:37:55:7b:
46:02:09:4b:09:89:f3:c2:a1:46:28:24:8f:a1:21:
17:f4:ec:6d:93:c5:e3:e0:c5:b3:e6:8b:53:46:82:
5e:11:28:07:ae:7f:28:53:91:23:4b:fb:fc:b1:56:
a1:b3:2f:e2:e6:80:59:ba:17:93:1c:d8:f5:38:57:
69:fa:37:0e:d9:77:01:b7:87:53:e5:f4:a4:3b:d1:
00:a6:37:ab:1d:6e:83:61:2d:25:fd:61:fb:c9:6f:
ed:47:56:06:15:08:66:ef:ee:c4:db:a3:17:a6:cc:
93:0c:2d:43:1a:67:53:32:d0:66:60:a8:f5:51:9e:
e5:e9:13:8b:33:c9:f1:8c:4f:65:8c:bf:72:e6:0c:
f6:f5:b1:f4:3c:f3:1f:d4:e5:04:9e:30:9d:d2:ab:
7b:32:30:4e:55:19:a8:b2:de:7b:1c:5d:5c:4e:d0:
13:c7:79:8c:0d:90:7d:b3:c0:30:3d:12:40:cf:32:
ab:39:14:e6:ad:1d:e0:a8:c2:aa:ce:1b:9c:a3:67:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:73:8D:82:35:56:00:C8:AE:82:63:F3:9E:F9:14:FB:E2:8E:B1:70
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/JHONgjVWAMiugmPznvkU--KOsXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.142.0/24
194.113.155.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9a:80:f3:61:a8:72:30:5e:b2:1d:45:a1:a4:7d:23:b4:21:
11:12:48:20:57:81:b9:44:2b:f6:2e:a9:8c:a4:17:1e:af:e3:
d5:ec:a2:a3:6b:61:47:3e:aa:cb:e9:72:3d:45:41:f5:25:98:
9d:c6:b7:f5:89:54:ef:1d:1f:ac:a9:02:82:3b:bc:46:19:bf:
ee:37:e3:d8:f1:6c:31:df:25:62:f6:1a:99:7e:14:34:af:53:
54:45:d3:cb:bd:4c:b6:c7:d0:89:b1:f4:de:4f:01:fc:28:34:
ce:a6:ca:c3:69:76:5b:e7:9a:46:75:61:30:1f:26:f6:15:ca:
da:28:7d:fa:70:88:0d:76:63:8e:4b:63:81:1f:56:7d:b2:7a:
c0:d2:a1:54:01:65:bf:e3:9b:ee:7e:55:16:85:e0:fe:4b:68:
11:bf:b3:6e:1a:d7:bb:42:3b:78:99:b8:1b:a7:7f:67:8b:6d:
2d:7b:99:e0:d7:be:1a:b6:05:fe:3c:24:ca:d0:11:3a:f6:c7:
82:f6:54:86:15:53:13:5e:a4:65:a2:41:ba:9b:35:d6:20:a8:
24:4a:1c:05:79:90:fd:e7:21:78:f7:08:c4:b3:d3:5a:92:a7:
b7:e0:83:94:d5:a8:01:5e:03:a8:3e:09:6f:a4:7d:77:02:9b:
8d:75:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org