Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/hIwvjhJ-WX9rUd52UpXwi79BRBQ.roa
File: hIwvjhJ-WX9rUd52UpXwi79BRBQ.roa (raw, json)
Hash identifier: 3jlMXecLmK1COyFYoCJMghliA1Gdbta+pPVSsY8Uiqk=
Subject key identifier: 84:8C:2F:8E:12:7E:59:7F:6B:51:DE:76:52:95:F0:8B:BF:41:44:14
Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial: 01840935E25480F9D8A1528DEB7B2EF06B14
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/hIwvjhJ-WX9rUd52UpXwi79BRBQ.roa
Signing time: Mon 24 Oct 2022 08:57:16 +0000
ROA not before: Mon 24 Oct 2022 08:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212341
IP address blocks: 139.28.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:35:e2:54:80:f9:d8:a1:52:8d:eb:7b:2e:f0:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Validity
Not Before: Oct 24 08:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=848c2f8e127e597f6b51de765295f08bbf414414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:1f:cb:cb:be:1f:0f:8c:58:c2:8f:4e:91:
18:c6:df:7c:f4:2a:9a:ce:af:d8:f4:18:d6:e9:b3:
82:43:b6:f0:3b:cd:50:e4:df:e9:b1:52:01:7c:48:
f4:ce:58:3d:23:de:da:73:2f:f3:a3:e1:e1:40:30:
08:d0:7b:7d:83:5a:00:96:b5:71:80:d6:cf:93:66:
4d:6a:54:19:48:41:c3:43:c2:b5:aa:bb:a6:7b:b5:
5d:00:b8:8e:0b:e9:82:03:67:58:9a:ba:57:54:92:
8a:7c:c1:53:7a:4b:f1:d1:31:a8:5c:83:00:36:a2:
d4:0c:ba:ca:be:96:7e:d7:85:75:af:22:27:9b:50:
c4:db:66:64:15:05:d6:7e:82:47:73:fd:a1:b8:a9:
b0:a3:47:a1:9a:ef:69:be:91:4b:9c:c2:fe:a0:10:
57:da:a7:66:60:94:ee:0d:7e:07:0a:6f:61:bc:5b:
9c:3f:8e:4d:e3:ab:b7:65:af:69:fd:84:2a:7b:bd:
e9:71:c3:a6:e6:92:51:8a:b3:db:b2:5f:88:00:0e:
01:2a:73:ca:65:97:8f:0f:be:54:d7:2e:18:09:2b:
60:4b:a0:f9:f3:0b:4b:74:b4:c7:3e:36:b9:18:62:
fe:45:87:52:67:6e:f6:3b:9f:a3:5c:90:33:ff:78:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:2F:8E:12:7E:59:7F:6B:51:DE:76:52:95:F0:8B:BF:41:44:14
X509v3 Authority Key Identifier:
keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/hIwvjhJ-WX9rUd52UpXwi79BRBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:a6:c2:94:84:d8:e6:e6:63:d0:f5:f1:05:4d:6c:b4:f8:d1:
ff:ca:56:14:43:ab:d6:94:39:42:6a:f1:2f:cd:8f:99:2a:17:
cd:67:60:5e:83:32:12:a0:9d:01:b6:e3:c7:27:60:c3:49:f5:
24:e6:fb:f4:1d:33:05:fc:69:b5:08:38:62:15:6b:81:27:34:
a9:9a:e6:32:35:b5:d0:9d:1c:10:0b:68:3b:40:69:e1:2e:f2:
37:8b:36:c3:76:7e:36:c3:88:eb:ae:8a:ed:0f:12:b8:c4:28:
bd:b5:b0:0c:19:8f:22:28:14:02:e5:a9:59:01:67:6c:a7:99:
f8:59:9d:34:5a:e4:5f:4b:06:4b:75:dd:d3:9f:37:e8:76:29:
d0:02:c1:b5:30:4e:28:f3:0d:c3:eb:e5:6a:7f:6e:24:56:0a:
3c:83:ae:a0:8a:42:6e:2b:e7:f9:30:d4:61:b3:2e:39:9f:f6:
c6:c1:a8:5c:38:53:79:bc:c1:21:06:b8:f3:4f:d7:90:b9:a8:
2d:e1:57:8d:d8:8a:20:c1:ef:a7:2e:05:fd:fc:5c:71:e3:f0:
b2:48:00:f4:0e:fe:35:8c:14:87:bb:e7:5e:04:95:8a:7c:e5:
21:ad:8a:6f:3e:16:77:29:55:80:f1:16:03:72:97:72:b8:c2:
65:9c:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:26 2023 by rpki-client on console-ams.rpki-client.org