Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JzlpYR13HPwQWVzW4pFgmNc5ES4.roa
File: JzlpYR13HPwQWVzW4pFgmNc5ES4.roa (raw, json)
Hash identifier: AJAy5ltAFZsv3eN4TVsdNuKOa3jqGmZuFssfQxMzYkc=
Subject key identifier: 27:39:69:61:1D:77:1C:FC:10:59:5C:D6:E2:91:60:98:D7:39:11:2E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018441D41ABE38956F815927ABE10B929DDB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JzlpYR13HPwQWVzW4pFgmNc5ES4.roa
Signing time: Fri 04 Nov 2022 08:48:50 +0000
ROA not before: Fri 04 Nov 2022 08:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203639
IP address blocks: 194.87.208.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:d4:1a:be:38:95:6f:81:59:27:ab:e1:0b:92:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 4 08:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=273969611d771cfc10595cd6e2916098d739112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:18:c1:1b:54:0a:0a:f6:38:83:e7:46:db:20:
23:de:17:52:8a:66:8d:e3:9f:db:3f:9f:22:67:9f:
b2:61:f3:a5:f8:3a:b7:e3:d7:ed:d4:2b:eb:b1:3e:
da:1e:d4:4a:4a:cb:3c:61:bf:a6:7a:0b:6e:22:1b:
e8:66:49:ee:66:29:67:62:48:d9:4e:e7:b0:07:2d:
8e:10:c4:c9:43:66:5c:a4:26:1d:da:f2:e6:76:40:
01:e6:72:86:a2:23:44:35:1b:e5:70:f7:8c:de:11:
31:0f:18:9e:2d:df:91:19:df:bf:97:87:e2:a5:e3:
b5:68:87:d9:05:83:46:f8:5f:9e:59:00:dc:0d:e5:
d8:18:10:5a:19:cf:a6:f0:52:f0:40:1b:0e:8f:f7:
bf:fc:2f:e6:46:65:7b:29:48:a4:9d:7d:56:58:17:
32:7d:31:b3:01:bf:e2:4a:a4:b3:89:ff:fa:1c:7b:
05:00:14:0d:fc:47:56:57:73:b6:7e:a6:94:0a:f1:
4e:19:31:51:50:b9:c6:b0:79:e5:3a:ad:81:83:75:
ec:f2:ac:e0:0d:bf:36:85:01:7b:0c:8e:6a:15:38:
31:64:5f:c2:d0:4c:cf:b8:c1:28:25:07:10:26:23:
41:9d:8a:4e:c5:31:3c:5c:7b:37:e7:92:dd:f7:5c:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:69:61:1D:77:1C:FC:10:59:5C:D6:E2:91:60:98:D7:39:11:2E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JzlpYR13HPwQWVzW4pFgmNc5ES4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.208.0/24
195.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cf:e8:66:0e:6e:26:7a:3e:12:7d:06:7a:42:60:66:7e:26:
0e:de:1e:6d:5d:4f:2f:c1:a5:92:f8:84:9d:e5:6d:52:7c:71:
03:95:18:b7:9e:81:90:cf:55:78:13:42:04:68:64:15:12:ae:
aa:a9:92:d6:74:cd:43:d7:5d:bb:e4:dd:30:c0:a1:83:59:55:
3d:29:98:71:6f:65:d8:13:63:c1:0b:46:e9:37:65:e3:86:56:
5e:51:e4:44:d7:2b:df:b6:9c:2a:f8:de:fb:e2:52:ef:1f:e4:
0c:e0:b7:b2:24:f3:4d:08:c2:d7:e5:d6:9b:0d:33:9e:99:e5:
66:d9:8e:b3:b6:e3:ae:39:b3:ad:37:63:b3:29:f0:b4:27:57:
6a:3f:2d:bf:ff:c3:b1:e3:00:8e:03:0d:1e:58:9d:7d:ca:e2:
5e:b0:52:ea:f9:14:fa:5f:2f:9f:ad:c0:08:a7:99:2a:b0:83:
90:d6:91:c5:f0:66:c1:76:0d:dd:da:ef:8d:e0:5b:6b:62:1f:
b5:6a:90:c0:95:d8:31:f2:13:59:c4:e0:b6:58:7f:6f:47:8a:
e4:1d:80:7d:09:3c:e4:3b:e9:04:b2:d5:6e:3f:70:4e:60:8a:
ec:44:bc:45:d2:5a:1f:c3:69:e8:57:7d:c7:e8:9c:5d:cb:8a:
29:c7:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org