Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/j2c_t_6CmWYlWuoEFOvoDTbTdUw.roa
File: j2c_t_6CmWYlWuoEFOvoDTbTdUw.roa (raw, json)
Hash identifier: 5xrUYye15yRlkR5iSdMMDBv1yyWYhds140/+ziCgLFE=
Subject key identifier: 8F:67:3F:B7:FE:82:99:66:25:5A:EA:04:14:EB:E8:0D:36:D3:75:4C
Certificate issuer: /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial: 01856F1DC3D71EC3210677944E8D6BC5BB6D
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/j2c_t_6CmWYlWuoEFOvoDTbTdUw.roa
Signing time: Sun 01 Jan 2023 20:54:59 +0000
ROA not before: Sun 01 Jan 2023 20:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197093
IP address blocks: 91.223.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c3:d7:1e:c3:21:06:77:94:4e:8d:6b:c5:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
Validity
Not Before: Jan 1 20:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f673fb7fe829966255aea0414ebe80d36d3754c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:a4:04:c6:67:3a:53:67:ae:a5:19:29:c4:
5a:9b:ef:0a:82:75:28:e2:3e:0b:ef:43:cb:90:2c:
37:ce:78:f4:18:d6:44:98:09:4b:51:ce:f5:10:6a:
ef:e7:97:d3:e5:7e:9f:6d:5e:28:6f:70:27:20:fd:
cb:85:5a:16:a4:ed:8b:ae:81:4e:92:c7:02:44:6b:
1b:38:75:8e:eb:ae:fd:93:22:bd:12:4e:99:df:5b:
e9:b9:22:f4:fe:5a:ea:0f:fc:5f:4c:08:3f:2a:ef:
a3:4a:9a:6d:fc:8f:49:39:73:50:fe:e8:6c:fc:68:
13:33:0d:f9:51:73:76:b9:15:35:94:69:e8:04:da:
4d:d2:3f:23:65:ec:a3:a2:8a:17:86:2a:40:4a:16:
60:8b:28:30:ca:db:7c:c3:19:a2:e0:d4:ab:ec:cd:
22:8e:4f:c3:e3:f7:cc:29:c9:24:59:fc:95:0f:a2:
ef:e5:0b:ad:9f:0b:f6:01:42:f6:0d:a5:db:f1:59:
fb:e4:5d:3f:5d:57:fd:17:28:4a:6d:94:3b:37:a1:
b7:87:7e:65:61:7e:d5:fd:1a:69:a8:02:0f:50:b6:
f0:65:12:f0:44:90:00:ed:5c:14:41:81:ed:bb:aa:
b8:5c:03:a7:07:93:29:40:d2:8b:3e:b0:f1:56:12:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:3F:B7:FE:82:99:66:25:5A:EA:04:14:EB:E8:0D:36:D3:75:4C
X509v3 Authority Key Identifier:
keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/j2c_t_6CmWYlWuoEFOvoDTbTdUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.55.0/24
Signature Algorithm: sha256WithRSAEncryption
65:17:e6:68:75:1a:50:bf:cb:7b:ae:25:b6:2f:77:0b:15:f9:
57:9f:6e:bc:c1:b5:c9:b5:d7:83:17:56:b6:5f:a0:95:a1:3e:
eb:f0:ac:17:5c:1d:ff:ac:7c:39:11:e5:f2:f0:38:7e:2a:ab:
67:08:84:73:5c:89:6b:5f:05:f0:4e:c0:b1:ce:70:5a:38:97:
b5:48:86:3b:fa:70:b3:2f:c5:ac:fc:a6:bd:31:9d:c4:28:61:
f2:9f:a0:35:4d:2e:cc:d0:0a:67:b7:30:ad:d8:d7:de:a8:aa:
12:00:1d:21:e3:fa:d4:48:58:01:4d:d6:e9:4e:fd:80:44:1c:
88:1a:68:09:b9:88:f5:1a:9c:db:9c:69:4f:bf:d0:77:ef:be:
d8:11:a6:3d:c8:b7:8c:6c:6c:83:1e:8c:7b:46:7f:f0:ec:30:
75:f3:8e:1a:2b:ab:2c:2c:85:a5:9c:f1:94:e5:4b:52:82:2d:
1d:62:d3:7a:d8:bd:0c:8a:49:df:ce:28:e1:96:23:7c:b1:dc:
b8:28:18:c1:b9:6f:38:8e:3d:23:be:5b:51:0d:53:e6:21:79:
4e:84:9a:b4:98:4f:8d:dd:4a:68:2a:b7:1f:ba:48:d8:76:a7:
f1:58:74:31:1c:89:89:aa:03:b2:19:09:31:e1:ac:1f:a0:f0:
47:b6:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:47 2025 by rpki-client