Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j6-EPsrlQcd6QjXG-6dW8NR74ns.roa
File: j6-EPsrlQcd6QjXG-6dW8NR74ns.roa (raw, json)
Hash identifier: XWlsRDnf5GtVTfOGGE3R85KMa9W6xHOTv7nyjmxUJRw=
Subject key identifier: 8F:AF:84:3E:CA:E5:41:C7:7A:42:35:C6:FB:A7:56:F0:D4:7B:E2:7B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184325E49B825CCA8927A8DBB154801F399
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j6-EPsrlQcd6QjXG-6dW8NR74ns.roa
Signing time: Tue 01 Nov 2022 08:45:50 +0000
ROA not before: Tue 01 Nov 2022 08:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201950
IP address blocks: 79.110.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:5e:49:b8:25:cc:a8:92:7a:8d:bb:15:48:01:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 1 08:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8faf843ecae541c77a4235c6fba756f0d47be27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:48:36:52:eb:c8:8c:95:33:12:76:57:c4:
a5:aa:cd:19:6e:54:bd:07:4e:2e:0a:fc:3a:35:f7:
b3:5d:50:21:75:a8:2c:02:d5:84:f8:f6:69:7a:74:
0c:37:52:32:68:fc:50:81:ef:29:cb:d8:be:10:ad:
7a:63:4d:6c:ff:d9:a0:e2:0a:d9:6b:89:a3:f3:f9:
c3:c9:be:ee:f9:a0:ac:c7:48:f1:84:98:3c:97:a5:
c2:4b:d5:f1:f7:ef:0d:a2:7d:2f:14:97:e0:1b:2b:
a3:32:21:5e:2c:ef:fd:f3:fc:af:3f:fe:59:ee:d7:
c7:9a:91:3e:28:d5:64:08:e3:b8:a9:ec:49:53:69:
c1:27:ae:5c:fb:06:17:5f:59:aa:99:fc:91:e5:23:
8d:a2:1f:82:94:a8:87:e6:fe:0e:17:aa:9c:46:5e:
34:28:0f:cc:17:18:42:55:bd:91:90:2f:5b:7b:fb:
a4:69:c5:95:a1:32:fb:ee:3f:bd:27:4a:8b:83:9a:
45:85:5d:f5:5b:fd:58:4f:6e:b3:55:2a:c7:35:75:
3a:ee:db:29:5c:55:59:20:25:03:ea:32:a3:70:27:
b0:32:ec:2c:04:bc:4f:2e:56:a1:e0:f1:34:be:a5:
d1:94:00:45:e1:19:20:9f:85:ef:21:83:22:05:46:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:84:3E:CA:E5:41:C7:7A:42:35:C6:FB:A7:56:F0:D4:7B:E2:7B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/j6-EPsrlQcd6QjXG-6dW8NR74ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:01:34:52:a8:15:5c:0b:20:9b:6e:58:a0:15:44:cf:24:08:
4a:f2:d1:72:f1:73:31:8a:33:1e:98:64:20:d1:f3:bc:28:ac:
b9:f9:dd:c2:72:0b:0d:0c:3a:3d:fc:71:b1:ce:0f:4b:65:e4:
1b:29:65:3c:a4:66:9b:dc:54:84:a8:d5:ce:01:18:e1:2a:a5:
c1:7d:af:da:de:78:24:b5:56:5a:7f:2a:f6:93:35:49:5e:21:
c2:52:3c:ff:42:b6:2f:47:02:2a:ed:fc:08:f4:fa:31:6f:75:
d3:aa:8e:33:02:b0:ce:c7:8d:bb:a1:72:9f:e6:e8:54:28:86:
bc:7b:53:f5:85:1e:4b:da:24:95:70:17:35:4e:ba:cd:dd:78:
8a:5e:dd:8a:bc:5f:dd:bc:3c:26:bc:36:ca:c0:e5:a7:a5:34:
07:6d:ae:e6:0c:1f:74:ff:1a:6b:18:81:c5:2c:7d:0a:4c:ab:
d6:b4:bd:67:91:ae:e2:38:0c:8e:05:45:c6:60:fc:6b:06:fe:
82:59:7c:ed:d2:13:67:ca:75:16:d0:eb:bd:6c:61:0e:30:81:
8c:df:6f:81:b7:c2:b9:18:06:dd:ba:11:42:f6:3e:3a:b7:27:
52:ed:c2:0b:56:c4:7e:e2:4d:41:3c:87:6d:e0:a4:74:e0:0e:
d9:75:2a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org