Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/JSs7TGUjUFcPMUM79leJW-Qn71Q.roa
File: JSs7TGUjUFcPMUM79leJW-Qn71Q.roa (raw, json)
Hash identifier: RjiZIVf6HsOEUMd1/ZopJCKLfQ3J9pNS8twb+2hK7BI=
Subject key identifier: 25:2B:3B:4C:65:23:50:57:0F:31:43:3B:F6:57:89:5B:E4:27:EF:54
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 0C8A3B
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/JSs7TGUjUFcPMUM79leJW-Qn71Q.roa
Signing time: Thu 31 Mar 2022 07:29:59 +0000
ROA not before: Thu 31 Mar 2022 07:29:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 45.6.48.0/22 maxlen: 23
87.238.88.0/21 maxlen: 22
194.116.184.0/24 maxlen: 24
194.116.184.0/23 maxlen: 23
194.116.185.0/24 maxlen: 24
185.78.24.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821819 (0xc8a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Mar 31 07:29:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=252b3b4c652350570f31433bf657895be427ef54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:57:7c:7f:13:1f:f3:16:8d:a7:ae:3e:66:
20:0a:64:21:34:fc:b9:f8:8b:e8:0b:3d:fd:21:cd:
e9:99:a1:5b:4c:38:87:67:e3:f5:d1:0b:0f:10:52:
fc:50:27:cd:9b:b6:c2:d2:c6:36:68:3e:96:30:95:
ec:df:fe:06:1f:c1:ab:22:77:a2:9e:d7:6f:3e:4e:
9f:7b:10:ac:be:33:44:17:2b:18:01:1e:32:4c:8e:
8f:92:a2:d5:47:77:f5:77:d9:83:87:aa:0d:dc:8e:
39:d2:cc:e3:95:ad:7b:88:33:ba:c4:4c:19:c0:ff:
6a:17:5b:2c:2b:b2:8c:ee:a0:0b:01:af:b9:4d:b8:
c4:76:1f:9d:3a:67:8b:27:ab:6d:6a:20:c7:91:2c:
9f:ae:16:81:71:c3:1e:d9:64:68:1d:70:0e:5f:41:
cf:d2:f8:3f:26:30:6d:da:f5:c0:f9:ac:42:53:65:
21:3b:09:a6:0b:78:24:46:ae:28:80:ff:70:7d:71:
20:c3:bf:d0:5f:9b:ba:d6:68:d7:1d:fb:c2:ce:a7:
ed:fb:ae:5c:41:da:d1:1a:09:79:a1:02:c7:f7:06:
ea:0c:cf:91:a9:30:a2:1c:6e:9d:5c:d7:08:2b:5c:
9b:39:5f:d2:37:2a:91:1b:72:d0:ad:00:e6:b7:61:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2B:3B:4C:65:23:50:57:0F:31:43:3B:F6:57:89:5B:E4:27:EF:54
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/JSs7TGUjUFcPMUM79leJW-Qn71Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.48.0/22
87.238.88.0/21
185.78.24.0/22
194.116.184.0/23
Signature Algorithm: sha256WithRSAEncryption
29:de:ca:69:61:3e:56:37:9d:e8:a0:16:73:53:2a:3e:45:6c:
fb:a6:0d:d7:5e:d3:88:5f:a4:ea:98:20:f1:b2:40:1a:13:05:
d7:44:65:3f:9a:fd:ef:bf:94:1e:f3:9e:e4:7c:aa:02:19:ad:
b7:3f:e3:b2:12:49:4e:c0:38:db:30:f6:f7:f4:44:ae:a8:8f:
bb:9e:fe:96:16:45:a9:b7:de:c7:49:b4:50:ef:cc:2d:23:72:
1b:01:e7:5a:44:24:07:48:70:61:af:08:32:05:c0:ef:4e:f3:
0d:bc:8f:9a:b5:1e:ec:1c:d1:e3:d9:9d:dc:ca:3a:c3:a0:d3:
02:5d:32:e3:6c:95:50:a6:f5:2d:0e:ad:b4:a6:2d:b9:87:1c:
29:66:dd:2e:77:88:cb:9e:9c:b4:1d:5d:f0:e1:ca:3c:64:73:
24:3c:83:91:b4:f8:44:ba:18:5b:25:ae:97:75:f9:ab:15:76:
81:26:a0:39:11:46:ea:94:d2:8b:c1:6d:6a:96:0e:95:07:f3:
1a:0e:bb:6c:ac:65:56:48:9d:54:1b:c6:d1:f9:76:f4:4e:e8:
4e:95:47:1e:80:5d:d8:db:a6:c2:b0:b7:69:8a:e4:1b:90:10:
bd:84:90:d2:05:ec:e9:57:bf:41:7c:3d:00:bd:12:c0:14:c8:
d8:ef:50:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:18 2024 by rpki-client on console-fra.rpki-client.org