Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/Jrg6HK8S3cDc4U8iFHcD466YqZI.roa
File: Jrg6HK8S3cDc4U8iFHcD466YqZI.roa (raw, json)
Hash identifier: FPWKdwbrGweNJjBQR59r+bb2lVv/bv7K7nmUbe2Wqgk=
Subject key identifier: 26:B8:3A:1C:AF:12:DD:C0:DC:E1:4F:22:14:77:03:E3:AE:98:A9:92
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 0B562A64
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/Jrg6HK8S3cDc4U8iFHcD466YqZI.roa
Signing time: Sat 01 Jan 2022 09:54:20 +0000
ROA not before: Sat 01 Jan 2022 09:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49986
IP address blocks: 78.31.236.0/22 maxlen: 22
78.31.238.0/23 maxlen: 23
78.31.236.0/23 maxlen: 23
2a05:c000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190196324 (0xb562a64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jan 1 09:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b83a1caf12ddc0dce14f22147703e3ae98a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:51:43:52:31:39:8b:9f:ea:f7:1b:fd:a1:
6e:66:20:b9:29:94:9e:dc:a0:3e:3b:37:cd:04:e1:
4a:24:36:c1:77:2a:05:c6:65:06:49:cf:0a:a1:57:
9a:c0:80:24:c4:3b:70:11:d0:69:6d:2b:ec:0d:ec:
fb:a2:23:12:12:a8:5b:bb:44:9d:cd:48:c4:33:33:
29:e0:7e:de:7a:5f:69:0e:bb:d6:80:0d:b3:c2:61:
b2:e0:b2:51:5e:73:33:a1:15:6e:64:e4:b5:ad:0f:
d8:19:ca:e8:03:04:d7:1a:d5:1d:86:bb:bc:34:52:
e4:e9:3e:32:69:99:fd:05:b8:75:56:2b:48:82:05:
0a:28:04:c1:b4:3a:e6:c7:63:5d:04:c6:7a:8c:db:
e3:67:d8:f1:e4:53:1a:d7:50:71:77:dd:ad:a0:af:
c4:04:fe:38:6d:fc:7e:7a:1d:75:7d:32:62:6f:35:
2b:b2:a8:70:1a:5e:50:e4:01:60:4d:c2:7e:fc:f5:
86:e2:76:55:19:b4:ec:1e:00:d9:44:4c:88:0b:8c:
be:1d:78:10:38:50:fd:ef:10:0d:4f:c8:ca:b8:c3:
ee:04:96:df:57:08:a4:65:0b:e2:7a:43:6b:f8:cc:
01:55:70:90:a1:2b:1e:88:fe:7f:08:a9:2c:13:c8:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B8:3A:1C:AF:12:DD:C0:DC:E1:4F:22:14:77:03:E3:AE:98:A9:92
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/Jrg6HK8S3cDc4U8iFHcD466YqZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.236.0/22
IPv6:
2a05:c000::/32
Signature Algorithm: sha256WithRSAEncryption
7b:99:25:25:5f:44:be:3e:dd:63:3c:49:54:d5:c2:05:6a:7d:
68:49:3b:54:e1:c1:6a:a3:c0:68:d9:25:ad:e1:7c:29:4e:a3:
6f:10:a4:a1:47:5f:b0:b7:46:cd:15:e2:2f:2b:e9:a1:1a:70:
e0:93:66:5e:f6:a5:aa:66:cf:3b:26:9e:62:b1:4f:4d:63:d4:
d1:31:75:5b:cc:81:57:70:e4:c7:f2:00:24:c4:c3:7f:6f:d6:
91:19:a0:44:56:54:4b:8c:d0:d4:d2:8a:ef:40:89:25:30:98:
f4:77:fd:33:41:63:51:80:53:18:31:e4:0b:d7:27:c8:1d:40:
f9:da:64:90:5a:76:8a:cb:61:aa:ae:9d:c5:c6:a4:76:50:ce:
32:cc:b5:b0:2a:f6:40:a8:7f:27:67:44:54:f9:1e:85:10:b5:
2f:9a:9c:00:d3:ab:35:40:ce:2f:fe:63:e3:99:7d:74:14:3f:
87:32:43:e2:85:19:33:12:97:ff:85:35:28:b5:8d:0e:f9:00:
70:5c:4d:16:e5:41:d6:f5:33:f7:3f:59:78:96:7e:1a:72:e1:
c5:ca:6a:d4:be:26:df:96:bd:27:fc:8f:90:35:d1:7a:b6:09:
cf:98:ab:3e:78:63:5d:7a:ca:8e:88:dc:ef:b9:22:45:d6:5a:
12:38:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:35 2024 by rpki-client on console-ams.rpki-client.org