Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JCy68hb55able9OtcgRwief6oSs.roa
File: JCy68hb55able9OtcgRwief6oSs.roa (raw, json)
Hash identifier: ySeRdzVRaRxMcxQTnHwit0N6dSEoz28GOffVtfw1TCM=
Subject key identifier: 24:2C:BA:F2:16:F9:E5:A6:E5:7B:D3:AD:72:04:70:89:E7:FA:A1:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181ED8AE20DD1A7D7D3EFCD54550DBA92F4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JCy68hb55able9OtcgRwief6oSs.roa
Signing time: Mon 11 Jul 2022 13:55:10 +0000
ROA not before: Mon 11 Jul 2022 13:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 193.222.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:8a:e2:0d:d1:a7:d7:d3:ef:cd:54:55:0d:ba:92:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 11 13:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242cbaf216f9e5a6e57bd3ad72047089e7faa12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:cf:82:5f:cb:a8:de:66:8e:57:a3:1d:71:
d3:ba:0e:f1:f5:68:c7:ab:70:25:d7:7a:5d:f5:dc:
0f:b0:51:28:51:a6:6e:f3:df:dc:eb:a7:7b:e1:9a:
73:c8:fb:63:0f:b0:a8:54:53:fa:9c:87:d8:40:10:
39:9c:b7:41:9a:a0:4d:b1:2d:5f:ec:f0:bf:cd:37:
a2:48:75:ed:d9:8d:60:f9:cd:29:cc:10:a3:79:c5:
65:3c:74:0b:47:67:29:1e:a9:18:a8:99:b4:b5:a5:
c3:40:59:ba:07:c9:9a:f0:2c:9c:59:c9:8e:89:55:
b2:04:99:c5:c3:26:79:06:4f:15:da:bf:b3:e3:60:
4b:e0:ae:a0:12:87:8f:a9:1e:13:ec:05:bf:76:13:
7b:fa:c6:75:70:ab:ce:70:e6:3b:a0:09:7e:1f:37:
a5:65:52:f0:dd:1f:28:23:4f:50:94:ad:c5:6e:a9:
37:a7:b3:44:68:de:32:88:49:46:8f:d7:5d:d2:ac:
39:ee:63:f7:c3:11:e4:a9:52:70:7c:f1:4b:ba:fa:
91:27:37:1e:3d:8c:07:59:37:7f:57:19:5c:00:aa:
5c:0c:fd:c6:16:98:82:dc:85:d2:1d:20:5c:a5:7e:
e0:a2:8f:8a:2e:54:e8:12:c8:d9:f6:86:c9:82:b6:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:BA:F2:16:F9:E5:A6:E5:7B:D3:AD:72:04:70:89:E7:FA:A1:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JCy68hb55able9OtcgRwief6oSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6c:ec:1c:84:1d:2d:51:4d:c9:a6:89:07:7f:8f:6f:ee:af:
5e:5c:ef:7a:49:81:d1:f4:3e:66:b4:11:cd:cc:68:31:44:28:
05:e0:f0:71:39:30:f4:bf:a6:12:f3:38:f3:61:3c:0e:8f:8e:
da:8c:e8:7e:ba:06:8f:a5:cf:56:04:31:8e:b1:00:4f:a3:5b:
0e:27:77:c4:7f:7d:a2:f3:f4:fd:e7:d2:11:3a:46:ac:2f:b3:
71:f5:6b:eb:3c:49:37:5b:dd:18:a0:ed:f9:95:01:87:f1:6d:
81:36:30:c5:dc:43:63:2e:1e:d6:90:e6:2c:89:b8:95:e0:be:
84:6a:ab:39:33:bb:53:a4:35:61:8e:5d:76:45:e1:0f:a4:8c:
ac:47:65:fa:9d:78:00:8e:b0:35:1a:c0:fa:b9:61:7d:0e:24:
e9:af:96:a0:8b:c8:77:3e:fe:f8:29:0d:e6:3e:45:8c:ba:af:
b2:ad:c9:43:06:3e:a2:71:33:49:ff:61:bd:e2:d1:14:3e:f0:
da:d8:4f:d2:a1:f6:7a:01:d4:9e:6d:89:cc:45:e6:2e:3c:1b:
f5:94:ac:b1:8d:96:75:b4:a3:5f:00:93:9f:e6:45:97:18:42:
a5:f1:bc:17:14:1b:96:b9:4a:52:c8:88:80:0b:28:d7:34:02:
09:ae:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org