Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/JBL9o__yEfGr62x1NnipM3oec7w.roa
File: JBL9o__yEfGr62x1NnipM3oec7w.roa (raw, json)
Hash identifier: 72xeC+qNO2VLtOk6E6gBTQV4hmYNQTZaNXoPoaNY4YU=
Subject key identifier: 24:12:FD:A3:FF:F2:11:F1:AB:EB:6C:75:36:78:A9:33:7A:1E:73:BC
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 04157DE6
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/JBL9o__yEfGr62x1NnipM3oec7w.roa
Signing time: Sat 01 Jan 2022 14:08:34 +0000
ROA not before: Sat 01 Jan 2022 14:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29104
IP address blocks: 185.116.134.0/24 maxlen: 24
193.56.125.0/24 maxlen: 24
193.56.124.0/24 maxlen: 24
37.35.6.0/24 maxlen: 24
193.56.130.0/24 maxlen: 24
193.56.131.0/24 maxlen: 24
2a00:4f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68517350 (0x4157de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jan 1 14:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2412fda3fff211f1abeb6c753678a9337a1e73bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:88:3a:d1:aa:82:92:78:3a:92:c2:e7:b2:
33:cf:17:70:92:0e:c7:cb:97:3b:e4:b8:e5:6d:19:
a5:78:b3:4d:f2:b2:5d:01:fc:c1:d0:a0:46:97:f0:
a3:45:3e:6e:58:62:30:44:62:f5:8a:72:a9:8c:00:
37:64:8e:a4:ec:14:19:ca:bd:3d:47:d2:12:79:cb:
99:4e:56:9b:98:8c:5b:34:0e:b9:f7:50:d5:86:8a:
59:6c:be:ca:e7:e1:87:ef:e0:63:47:22:02:90:15:
25:9d:90:6b:e3:c3:34:d0:fa:a5:a8:ce:f0:2f:0b:
18:93:31:9b:d5:9f:d4:fd:e8:32:6a:86:94:f4:cf:
3a:f6:30:a8:93:54:3b:09:11:25:9f:3a:87:8a:af:
90:70:4d:af:7a:c8:ad:06:66:42:bf:98:c9:7a:c8:
7b:18:87:3f:0e:f3:4d:a6:4f:11:04:33:db:b9:08:
7f:9f:c1:17:6e:0e:c9:0b:30:af:79:16:c2:e5:d4:
ab:d3:fd:65:db:ab:4d:c7:fb:e1:45:ff:6b:c3:e9:
58:d1:8b:c3:64:4c:94:cc:d7:7a:01:cb:93:bd:a9:
db:01:ce:1a:16:bf:84:93:fe:cb:c1:f5:7c:d0:d4:
20:f6:09:9c:09:d1:3c:c9:4c:bc:da:b4:20:4c:4e:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:FD:A3:FF:F2:11:F1:AB:EB:6C:75:36:78:A9:33:7A:1E:73:BC
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/JBL9o__yEfGr62x1NnipM3oec7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.6.0/24
185.116.134.0/24
193.56.124.0/23
193.56.130.0/23
IPv6:
2a00:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
3a:05:a8:9c:8a:0c:1a:0c:a7:65:55:48:e4:b9:65:70:eb:b3:
88:11:44:de:78:9a:f7:3a:7d:89:a2:e6:6f:31:90:17:66:fb:
41:71:bc:bc:54:cc:61:36:5c:53:5d:84:21:b0:ad:9b:0a:70:
d0:2d:85:cf:c6:fc:3a:f8:0e:d7:70:bb:60:22:7c:ef:d2:d7:
99:b6:91:fd:9e:cc:72:7e:26:9c:a5:3d:97:9d:00:c5:52:df:
37:17:64:69:fe:ba:ac:f0:5e:35:91:57:46:63:b9:62:73:4d:
0a:a9:d2:63:43:a5:e3:a8:c5:4d:8c:bd:e9:b6:a6:66:cb:8a:
b7:35:90:88:81:91:d4:8a:50:36:1c:dc:05:8c:ad:50:6a:4d:
72:21:3e:c9:68:69:e0:1f:01:09:d6:e8:89:87:4b:00:cb:fb:
b1:11:3c:32:6d:89:32:66:3f:f8:51:77:77:19:01:1b:c5:f9:
77:bf:80:79:65:ac:20:c8:0a:1f:82:58:9f:f0:c3:c7:c6:25:
20:57:d3:9b:5c:72:89:f5:47:83:ea:90:9b:b1:3c:9d:8c:2e:
5f:99:8d:e5:91:20:db:c8:9c:61:84:c8:13:bc:4b:f6:5c:38:
e9:3c:c4:ec:fb:33:76:03:b5:52:bf:13:60:0c:fd:00:ef:1d:
86:2b:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net