Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/JiQzaOLelIdnfmf4-ywvsnBFaZ8.roa
File: JiQzaOLelIdnfmf4-ywvsnBFaZ8.roa (raw, json)
Hash identifier: 5bYE89hodYvdJnDC+/NPwi2rKbib2/OA4kC3qnEbQhk=
Subject key identifier: 26:24:33:68:E2:DE:94:87:67:7E:67:F8:FB:2C:2F:B2:70:45:69:9F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 01829C7EF387D8EB2CFE26046D4F3CEA5561
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/JiQzaOLelIdnfmf4-ywvsnBFaZ8.roa
Signing time: Sun 14 Aug 2022 13:15:41 +0000
ROA not before: Sun 14 Aug 2022 13:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60132
IP address blocks: 195.191.128.0/23 maxlen: 24
195.191.90.0/23 maxlen: 24
2a13:2080::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9c:7e:f3:87:d8:eb:2c:fe:26:04:6d:4f:3c:ea:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Aug 14 13:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26243368e2de9487677e67f8fb2c2fb27045699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:4b:1c:fc:d4:23:b6:96:31:99:66:8b:2f:
4a:0a:88:49:dd:7d:ca:c9:9b:b1:76:7e:15:a2:3f:
db:c9:f6:84:11:27:12:3f:ee:85:3c:bd:fd:8f:09:
31:7e:73:94:33:70:41:f2:e6:65:5f:71:a0:a6:33:
f1:9e:48:0d:3d:77:97:c0:73:7f:2c:b0:a6:c2:aa:
12:42:a5:e2:7d:04:af:1a:98:e6:5f:a2:8a:b8:51:
27:fc:cf:70:ee:54:e7:e9:c2:bf:95:0d:05:4e:f3:
f0:43:05:c9:ad:f1:1d:6a:bd:97:ab:3e:17:2c:41:
14:78:69:91:b5:99:b7:8a:38:85:8b:89:d0:5e:bd:
14:fa:96:bc:8a:b5:54:79:c8:ea:ad:da:3b:93:f0:
a9:0c:4e:e9:2c:73:fa:f0:91:e7:51:50:38:d4:59:
6e:77:c9:61:04:59:c1:6b:6b:e8:d4:c9:e8:6f:15:
da:c3:bc:68:72:c5:9c:64:99:35:6e:51:76:62:f9:
bf:09:93:dc:79:77:1a:8f:19:47:8c:f2:f2:fa:d8:
f3:03:d0:da:ab:00:4c:2b:f7:ed:58:1c:2b:f2:b3:
10:56:81:fd:11:27:30:f0:ce:7a:1f:51:b6:16:39:
a3:17:55:02:42:5d:7d:5d:01:e3:25:3f:0a:00:21:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:33:68:E2:DE:94:87:67:7E:67:F8:FB:2C:2F:B2:70:45:69:9F
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/JiQzaOLelIdnfmf4-ywvsnBFaZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.90.0/23
195.191.128.0/23
IPv6:
2a13:2080::/29
Signature Algorithm: sha256WithRSAEncryption
67:4f:88:70:64:ae:68:dc:42:b3:87:12:37:cf:4b:d2:d1:3f:
14:1d:cd:d2:3a:fb:04:33:2c:58:62:38:a1:be:e0:5f:3b:40:
2d:58:4e:3d:63:b7:f5:1b:a4:dc:6d:75:11:b6:ee:10:c7:4d:
26:e2:ff:8f:c9:96:7a:ff:4c:53:87:5b:da:27:3b:15:35:58:
83:8d:f9:ce:35:52:22:9c:f7:50:82:5c:bd:a8:37:d0:fa:e9:
3e:f7:26:6b:60:39:59:a0:47:b2:eb:90:9f:c0:66:01:7b:02:
0c:ae:fc:41:5e:0e:ce:4e:58:02:a4:c7:3c:05:f4:1a:40:f1:
ed:08:3a:0e:17:c2:a1:f2:08:a5:fe:bd:45:62:14:d5:4e:36:
14:a3:8a:8d:ac:b0:e4:94:4e:e3:9e:63:0d:ed:f3:be:8c:71:
15:62:3f:b2:42:89:9b:f1:66:c2:0d:d1:e4:14:71:73:30:99:
90:fb:e2:8c:97:68:89:5e:4a:ec:84:e8:01:65:73:cf:b6:94:
d9:d4:3c:30:29:b6:07:7b:53:f4:05:90:0e:36:17:27:d4:4e:
82:bb:f9:1b:5d:7d:aa:36:2e:ed:63:39:c9:f0:5c:dd:34:92:
1b:da:b4:49:a2:9a:c3:73:2d:81:17:1e:78:05:12:43:2e:04:
fa:7f:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org