Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/JHUqPcFHlERUCO69-EI0QkduWdw.roa
File: JHUqPcFHlERUCO69-EI0QkduWdw.roa (raw, json)
Hash identifier: waE6NxMu3cwhGEYwsu3ekS+Id6CTAFpnZ0TNoDgCn4o=
Subject key identifier: 24:75:2A:3D:C1:47:94:44:54:08:EE:BD:F8:42:34:42:47:6E:59:DC
Certificate issuer: /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial: 13258167
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/JHUqPcFHlERUCO69-EI0QkduWdw.roa
Signing time: Sat 01 Jan 2022 10:01:53 +0000
ROA not before: Sat 01 Jan 2022 10:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201746
IP address blocks: 217.61.224.0/23 maxlen: 23
185.49.170.0/24 maxlen: 24
185.49.171.0/24 maxlen: 24
185.49.168.0/22 maxlen: 24
185.49.168.0/24 maxlen: 24
217.61.226.0/23 maxlen: 23
217.61.224.0/22 maxlen: 22
185.49.169.0/24 maxlen: 24
2a01:9f20::/37 maxlen: 37
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321225063 (0x13258167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
Validity
Not Before: Jan 1 10:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24752a3dc14794445408eebdf8423442476e59dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:e9:ba:96:85:c3:0c:8e:a4:9b:f2:55:d6:
aa:0f:c0:0e:1f:78:9b:e3:8a:31:f4:7d:07:91:06:
f7:22:d5:44:f7:6c:0e:a8:e9:5f:69:fa:d0:d0:03:
44:bd:e3:db:0d:17:c1:ee:3f:85:7a:1e:12:e6:99:
cf:17:29:d5:88:5a:a1:a6:7c:25:b4:bc:b3:29:ec:
69:c3:52:aa:10:8b:04:94:fd:b2:d1:0c:92:7c:22:
48:85:00:55:c1:f5:ee:7b:57:d4:79:83:a6:0a:30:
eb:30:75:57:4d:0c:cc:58:2a:ce:74:b8:1d:69:3b:
13:ac:df:b4:fa:34:95:5e:44:70:69:df:7f:ac:77:
cd:c3:de:f3:df:71:8c:18:88:71:1d:a5:80:55:aa:
54:1b:4b:62:2e:70:c4:03:84:c1:56:46:ef:ba:b8:
6d:5d:c5:5f:b4:24:19:cc:67:a7:c6:93:1e:28:9e:
19:f0:21:83:2a:d4:b9:b9:ad:d5:95:27:b3:04:e4:
e9:93:08:11:48:40:ec:3f:a3:1b:b1:c7:bb:78:53:
01:3b:52:aa:34:8e:45:58:6a:16:52:a4:a9:71:b9:
21:fe:ab:90:75:c0:21:69:e9:1b:fa:e5:51:49:52:
8c:1a:a3:99:8a:53:1e:46:d3:45:dd:d3:49:c5:fc:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:2A:3D:C1:47:94:44:54:08:EE:BD:F8:42:34:42:47:6E:59:DC
X509v3 Authority Key Identifier:
keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/JHUqPcFHlERUCO69-EI0QkduWdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.168.0/22
217.61.224.0/22
IPv6:
2a01:9f20::/37
Signature Algorithm: sha256WithRSAEncryption
89:f9:e1:87:18:8e:1c:d7:d4:dc:4e:ae:65:8f:71:f3:3f:71:
a6:a0:08:3a:b3:66:9d:fe:99:44:e7:8c:b9:a1:aa:80:26:0f:
df:b5:22:fd:71:bb:ee:9e:31:89:b6:5e:cb:5a:b1:69:9c:ce:
e1:12:23:ce:e8:75:ab:0f:74:58:ad:e4:2f:31:fe:d3:97:a3:
03:f1:5d:0d:c4:79:26:40:64:dc:ac:f7:08:13:85:f6:8b:18:
d6:6c:4e:1e:b9:43:3d:a2:b4:81:cc:34:ae:37:66:09:b2:61:
9a:d2:fb:72:ab:86:38:c5:b4:f5:b2:64:c0:aa:c2:01:12:c9:
7a:d9:4f:4c:20:57:fb:ea:ab:97:37:c4:7e:c9:86:36:fc:59:
21:c0:40:90:28:3a:64:0b:30:ab:26:f8:1e:76:18:0d:97:1f:
71:3d:e9:26:d8:2e:5a:fc:34:a4:6f:a1:4c:a1:85:40:d5:cc:
aa:7a:0b:ca:0d:33:ae:d3:1f:6f:36:d7:f1:67:28:c2:db:3a:
ef:d0:02:14:dc:5b:1d:8b:ed:43:15:2c:a2:24:50:a1:8a:ca:
74:92:b5:a5:2c:f8:40:50:c7:25:87:e6:a8:04:65:a5:69:b7:
c0:5f:63:ac:ee:5f:2b:59:ae:be:d4:85:d5:f4:d0:91:a9:af:
92:40:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:21 2024 by rpki-client on console-ams.rpki-client.org