Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/JArF3UIOahfBiIl10XT08gxkQfo.roa
File: JArF3UIOahfBiIl10XT08gxkQfo.roa (raw, json)
Hash identifier: A0GFOHO2O/Qlz2Yd57sVgI8w0x3fCas7dwYpnbk2ci4=
Subject key identifier: 24:0A:C5:DD:42:0E:6A:17:C1:88:89:75:D1:74:F4:F2:0C:64:41:FA
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 018A80B7EEC2B61DB6EEE06157CFF15F24DD
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/JArF3UIOahfBiIl10XT08gxkQfo.roa
Signing time: Sun 10 Sep 2023 20:10:52 +0000
ROA not before: Sun 10 Sep 2023 20:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 92.41.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:80:b7:ee:c2:b6:1d:b6:ee:e0:61:57:cf:f1:5f:24:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Sep 10 20:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=240ac5dd420e6a17c1888975d174f4f20c6441fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fd:65:26:de:39:9f:be:19:e1:e4:8e:79:3e:
4d:74:4d:c1:1e:8f:0f:b6:24:75:66:ba:83:b1:43:
60:a3:14:92:cc:d6:00:d1:8f:1f:0a:76:2a:ea:7a:
8e:09:33:e2:b6:ff:e5:6b:6b:57:3e:ba:06:44:e9:
8e:ba:4e:13:a3:44:67:1f:e9:58:a5:33:ed:e4:aa:
57:98:6a:2f:00:56:bd:c4:93:fe:69:50:40:c3:9c:
7a:d1:e8:ed:1d:0e:4b:20:28:8d:86:4f:6c:14:03:
08:ee:41:e9:f6:50:7e:83:c6:3c:80:c2:44:33:ab:
e1:26:b3:32:79:d3:40:c9:92:c9:76:6d:c7:38:e3:
3d:26:b1:67:87:6e:37:5e:92:a1:01:66:37:90:52:
0b:db:9e:40:b1:d7:72:5b:57:eb:e7:d3:a6:1f:91:
8d:cf:6f:2a:d5:05:78:fb:64:fa:51:b7:cc:b9:f1:
ea:29:bd:fc:57:75:b3:20:61:29:52:f7:ba:a1:a6:
d2:49:74:34:17:3e:6a:f2:66:cb:f7:41:b7:a5:b8:
7d:55:69:20:05:be:0b:a4:33:fb:3f:f9:a3:68:cd:
8b:1b:60:87:cd:41:fa:18:5a:3e:ac:f0:9d:c8:5f:
51:e5:2a:1d:8f:55:f0:c4:0a:6d:29:f9:42:32:7e:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:C5:DD:42:0E:6A:17:C1:88:89:75:D1:74:F4:F2:0C:64:41:FA
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/JArF3UIOahfBiIl10XT08gxkQfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.41.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:25:31:2f:09:fa:35:23:e3:d4:96:ba:53:7a:73:cd:a8:44:
18:8e:b9:28:9d:e8:58:a3:7b:07:69:14:f6:69:e4:1a:d5:1f:
3c:e8:36:27:ff:1c:28:be:d6:89:24:99:32:24:e4:53:b3:9f:
85:7b:64:c3:c5:c6:b7:fa:7d:5a:44:c0:ba:3b:bc:fd:0d:d5:
df:12:f3:a9:e0:eb:61:0c:21:66:c3:c5:ce:25:89:ff:18:cd:
7c:fa:2e:cd:29:b9:90:24:ca:bc:7a:69:b2:41:ec:b9:e4:9e:
3f:80:40:c8:17:2c:ee:49:f1:22:2c:21:b4:77:a3:e7:9b:6c:
22:17:84:ff:d2:ea:48:6b:6a:c5:0b:8b:ad:b0:c2:16:1e:3a:
f9:c2:43:68:4c:d3:48:3d:e8:fb:19:3e:31:72:a2:5e:be:c2:
86:09:ac:48:3c:2c:cc:ef:6d:6a:2e:64:55:1a:56:9c:5b:f2:
2f:49:97:1a:10:48:54:93:57:c9:9f:e1:f2:00:31:4b:eb:3d:
8f:85:e4:05:f7:97:03:99:ca:d8:13:5d:47:98:9c:3b:3c:f5:
a6:cf:c4:a1:9e:6e:f5:f2:ea:c3:32:dd:40:04:1c:90:d8:0a:
d7:f5:04:44:a9:4d:f1:af:d1:3f:7a:f0:78:cb:04:cf:1d:e2:
b0:a6:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:17 2025 by rpki-client