Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/JcuLSMi2R53M9uVfNKlaGy_7-iA.roa
File: JcuLSMi2R53M9uVfNKlaGy_7-iA.roa (raw, json)
Hash identifier: C0z4OHNdTFx1oSF2Tv7TRsZ2Nx7SxX6NCtS7IfrT81c=
Subject key identifier: 25:CB:8B:48:C8:B6:47:9D:CC:F6:E5:5F:34:A9:5A:1B:2F:FB:FA:20
Certificate issuer: /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial: 018443ACD7FAF198DD1A4D35C1A50596578F
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/JcuLSMi2R53M9uVfNKlaGy_7-iA.roa
Signing time: Fri 04 Nov 2022 17:25:11 +0000
ROA not before: Fri 04 Nov 2022 17:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
2a09:e240:22::/48 maxlen: 48
2a09:e240:2::/48 maxlen: 48
2a09:e240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:ac:d7:fa:f1:98:dd:1a:4d:35:c1:a5:05:96:57:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Validity
Not Before: Nov 4 17:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25cb8b48c8b6479dccf6e55f34a95a1b2ffbfa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:3f:9e:22:37:0c:b4:55:88:e5:fe:fd:23:
ed:89:19:28:e6:05:0c:ce:c8:0d:23:2c:e8:bf:22:
ba:b6:1e:00:80:4b:37:8e:02:a1:76:5f:32:10:c7:
f4:b8:27:b4:da:61:2b:db:20:45:60:f5:bd:fa:f9:
af:fc:00:67:80:e9:a8:fc:3d:03:9f:6b:1d:50:cf:
50:c9:dc:26:5d:23:eb:61:76:14:f6:de:2b:7e:fc:
f8:00:8a:3f:5f:df:1d:4e:ec:94:51:7a:da:f7:61:
8b:56:c6:3c:2e:4b:b8:0d:48:b3:c1:9b:ae:9b:8b:
74:b9:a5:76:e6:06:96:7a:a3:dd:65:e4:af:41:ba:
04:e0:12:f5:63:32:26:68:de:e1:ac:1c:53:0c:75:
b8:b7:f7:5f:ce:37:b9:f3:89:97:5f:a9:79:8f:86:
3c:af:57:30:e7:ac:47:ca:c1:37:42:f6:fa:6a:05:
f7:07:81:b0:0d:61:74:f3:03:26:b7:1e:a7:17:94:
4d:30:b4:15:d3:22:3d:bb:e9:60:fc:cf:d9:ca:34:
d4:9a:75:08:eb:ae:db:9e:af:85:ed:64:4c:81:c5:
4d:35:5c:82:b4:e8:9c:46:64:29:c9:a0:55:a9:2f:
81:11:58:6f:d0:d5:ae:10:45:f8:2f:38:1f:92:76:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:8B:48:C8:B6:47:9D:CC:F6:E5:5F:34:A9:5A:1B:2F:FB:FA:20
X509v3 Authority Key Identifier:
keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/JcuLSMi2R53M9uVfNKlaGy_7-iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0/24
2.58.59.0/24
IPv6:
2a09:e240:1::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff
2a09:e240:22::/48
Signature Algorithm: sha256WithRSAEncryption
03:6f:3f:43:51:73:9c:bc:b3:17:f2:69:59:01:c9:66:19:cb:
cc:b2:66:54:6d:ea:7f:eb:73:df:9f:89:15:5b:46:65:54:0c:
65:ad:0f:0c:9d:e4:bd:d9:99:ee:da:90:8b:a4:6d:ba:0b:1b:
cd:9f:2a:a1:33:be:a5:07:9a:57:89:f8:dd:ca:a9:5a:9a:58:
0b:f5:40:e8:d8:61:43:73:87:0e:d9:21:44:bf:a9:f4:68:fc:
cf:0a:29:08:67:2d:99:c0:ef:29:44:6e:ad:01:cd:b4:66:91:
04:c6:8e:5f:3b:b5:43:44:a6:8f:bd:f8:68:4b:56:46:b2:58:
0d:97:39:be:c7:f1:f2:6b:b3:be:d7:77:38:2e:75:35:08:6e:
c6:17:b6:80:e0:b9:1a:d1:6c:64:b9:dd:1f:c3:1f:92:2e:24:
d2:0a:1b:29:01:d1:66:40:f5:6f:6f:97:40:15:82:de:4e:e4:
8d:21:9f:6c:55:84:e0:15:fe:a7:63:54:4e:b0:b4:15:d6:b2:
6c:93:bb:47:11:c4:80:a3:1b:27:aa:0c:ff:26:d7:90:b8:7a:
38:6c:c8:fc:48:25:c5:d9:a4:65:bb:dd:d0:a7:c7:34:fd:26:
db:9e:6f:0c:e1:8b:36:46:a8:39:e6:1c:1c:3b:d8:07:36:fb:
93:7f:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:00 2023 by rpki-client on console-fra.rpki-client.org