Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/jpADFD-MrvnvhM9dExm-VRjvRKw.roa
File: jpADFD-MrvnvhM9dExm-VRjvRKw.roa (raw, json)
Hash identifier: vnc/QKgPGokZqXgqTLPbctC4vHvdvC14cnZ2ofGV7NY=
Subject key identifier: 8E:90:03:14:3F:8C:AE:F9:EF:84:CF:5D:13:19:BE:55:18:EF:44:AC
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 0799551B
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/jpADFD-MrvnvhM9dExm-VRjvRKw.roa
Signing time: Sat 01 Jan 2022 02:52:52 +0000
ROA not before: Sat 01 Jan 2022 02:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201011
IP address blocks: 45.95.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127489307 (0x799551b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jan 1 02:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e9003143f8caef9ef84cf5d1319be5518ef44ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:bb:c0:47:63:68:9f:10:2a:71:28:3e:8a:
d2:2e:48:97:61:2f:8d:a9:c1:09:12:f3:fe:b6:fc:
45:ac:c3:e1:18:b0:44:a4:91:cb:68:6d:0a:18:2c:
f9:68:ca:f4:a9:da:51:cb:ac:71:0d:41:eb:88:9c:
86:23:ef:2e:74:4f:e2:e8:f6:9a:d8:76:23:d0:bb:
86:4c:9f:54:2d:1b:7d:0f:89:30:f2:44:0c:54:67:
25:e6:72:b7:6b:97:11:bb:57:c7:b0:31:c6:19:0e:
66:ab:03:eb:04:66:1d:cf:37:62:d3:3c:ef:17:55:
3e:ec:14:55:0b:b5:ee:64:c6:06:a6:2e:cc:da:05:
99:a6:b8:db:7f:b4:74:95:42:c8:fa:6a:2b:30:65:
96:c0:8c:85:ae:ac:88:60:59:5d:91:0b:69:25:29:
68:b0:eb:50:3a:fa:8e:e4:26:33:c0:c4:8f:1a:81:
e8:af:dc:f5:48:ff:b3:c8:d2:e4:59:d7:d8:31:33:
63:39:03:13:07:21:23:f9:20:a7:47:6f:c7:f7:2f:
e5:95:f4:67:1d:24:0f:41:74:84:76:0e:00:9b:90:
c7:1b:10:61:78:66:69:46:e8:99:b9:9f:a6:82:ad:
2f:40:e3:5e:00:31:35:1b:65:ee:b8:a7:7d:cc:20:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:03:14:3F:8C:AE:F9:EF:84:CF:5D:13:19:BE:55:18:EF:44:AC
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/jpADFD-MrvnvhM9dExm-VRjvRKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:45:2f:ab:e7:a2:3e:97:1e:fa:20:5a:0f:eb:00:a2:2f:28:
7f:ff:87:24:0c:b3:20:11:c0:51:24:ca:f2:8a:1b:9d:56:32:
9e:dc:6b:e3:4b:03:ca:72:6c:00:e2:d6:02:1f:af:d4:9f:43:
a6:ca:ef:e4:0e:81:e3:b0:99:ed:eb:51:63:9d:fa:c8:82:aa:
51:a6:94:9a:27:2d:bc:b2:d0:1e:f2:47:b9:74:81:3b:dd:5e:
86:cd:16:5c:93:f4:e1:77:16:02:fd:24:9e:1e:9e:cc:10:de:
00:c0:3f:c1:e3:06:99:5e:ee:68:66:c5:d2:b8:f9:ae:a4:9e:
6b:de:2e:99:59:ce:ac:a8:60:6d:fb:5f:a3:7f:75:05:62:e8:
8c:5b:1c:09:6e:1e:c0:97:ca:6e:b7:5e:53:3d:ff:26:92:d2:
5d:9b:cc:62:e0:87:ef:10:1d:f8:3e:05:61:61:47:37:27:f6:
dc:52:4b:02:17:fe:47:0c:56:b9:b4:c5:4a:c8:13:6e:2e:82:
98:23:8b:51:a0:9d:98:83:1b:d4:ad:ff:2a:d5:cb:a2:7a:2e:
99:3d:77:72:5e:a4:ed:00:da:e2:14:28:9e:c3:a9:59:4d:e4:
2f:4c:6f:5d:26:f2:77:a4:84:34:e9:cd:29:87:f1:6f:f7:ab:
b4:ce:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:57 2023 by rpki-client on console-ams.rpki-client.org