Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jjcOq9k3mOMeki11Q09AwpVn6as.roa
File: jjcOq9k3mOMeki11Q09AwpVn6as.roa (raw, json)
Hash identifier: v8HhkI6blVaIXXlc9P0X3NaaU/VCcxgtm6IXc3aPYgQ=
Subject key identifier: 8E:37:0E:AB:D9:37:98:E3:1E:92:2D:75:43:4F:40:C2:95:67:E9:AB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01850BEFF68D7579AD62F7E427A8CEF501F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jjcOq9k3mOMeki11Q09AwpVn6as.roa
Signing time: Tue 13 Dec 2022 14:42:33 +0000
ROA not before: Tue 13 Dec 2022 14:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 45.88.67.0/24 maxlen: 24
185.216.68.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:ef:f6:8d:75:79:ad:62:f7:e4:27:a8:ce:f5:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 13 14:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e370eabd93798e31e922d75434f40c29567e9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:39:e6:0b:43:8c:a3:d1:3e:f1:a9:13:1a:
f3:ce:20:1d:57:6e:c9:e3:ce:f4:c9:d5:9d:0d:25:
b1:6f:21:64:7f:2a:60:6a:94:d6:cb:fc:d6:b5:fd:
46:f9:ff:67:f9:b6:1d:7b:9f:07:92:6f:7e:f5:16:
5f:e9:40:ff:48:dc:dc:a4:9b:1d:fc:92:4b:9d:4c:
e6:b1:b0:e0:79:17:4d:06:1a:86:d3:0a:ba:73:72:
60:19:0e:db:76:3a:dc:02:0e:cd:f7:0f:d0:0d:71:
06:2a:14:4f:3f:41:85:a3:9c:e7:5b:01:08:28:85:
e9:0d:57:1f:c3:25:78:22:80:66:5e:75:e5:a5:e7:
13:75:8b:81:ce:b9:b1:e4:30:f8:1b:92:b3:a5:66:
83:d3:e6:1c:ff:fb:e1:5e:4d:25:67:95:1e:bc:9d:
5d:18:29:73:70:e1:e6:22:55:23:3c:d8:3c:a0:35:
fa:98:00:30:4b:79:90:fb:fd:c0:23:56:00:5f:77:
c6:27:92:35:37:89:f8:0c:22:72:fb:4e:1a:89:68:
75:30:45:27:14:0d:01:5d:59:31:8f:25:99:cf:e0:
50:99:c0:15:92:dc:06:bf:1f:74:fb:44:cd:2c:6c:
66:08:cc:47:f3:ed:e9:1f:2a:e6:f0:bf:f7:a7:1b:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:0E:AB:D9:37:98:E3:1E:92:2D:75:43:4F:40:C2:95:67:E9:AB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jjcOq9k3mOMeki11Q09AwpVn6as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.253.0/24
45.88.67.0/24
79.110.51.0/24
185.216.68.0/24
193.42.33.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:76:c9:90:1b:8c:b7:5f:2f:0f:07:d5:9a:bd:c5:26:ad:9e:
c9:17:63:d4:e0:50:2f:d0:63:1d:2b:47:9b:b1:ad:a3:2a:6f:
97:53:1a:3b:9a:16:5b:0e:bf:fd:69:5d:24:d1:8f:cf:39:92:
0d:cc:19:16:c0:05:ad:9c:f1:65:cb:78:28:0d:8f:da:5b:50:
6b:73:11:fe:c3:32:5d:f8:f4:34:c9:73:1a:f8:4c:ec:4a:d3:
62:05:56:54:4d:5e:c0:c7:7b:a8:7b:b9:79:aa:fb:af:8e:c3:
84:b6:7c:2e:5b:d5:bf:fc:13:e7:72:7c:14:7a:e5:d4:8b:80:
da:e1:bc:70:50:f2:ee:d3:de:1e:da:a5:eb:4e:05:3a:24:15:
ca:99:70:8f:9a:37:c9:d7:cd:5f:e9:36:b0:cb:4f:f6:ce:6c:
0e:da:bf:b6:ac:50:a7:1f:45:dd:5f:ab:8f:55:8d:a4:d3:0c:
83:06:10:04:68:0f:98:75:90:94:40:63:0e:40:f1:bd:05:40:
08:7a:f2:a5:07:19:ef:51:de:93:1b:79:37:fe:23:b2:81:84:
e3:27:87:4d:3f:cb:cb:a5:9f:48:36:97:bb:bf:05:3b:6d:80:
09:28:35:75:ad:b9:53:ae:70:1c:48:a4:0a:24:40:a3:29:cf:
41:45:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-fra.rpki-client.org