Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/jwU_BoC9rlWakqpy5V6J2xe_BOw.roa
File: jwU_BoC9rlWakqpy5V6J2xe_BOw.roa (raw, json)
Hash identifier: 7wDFyiiENVcOJileui7CvAcScm1BS2VN7H+y6CHX0Qo=
Subject key identifier: 8F:05:3F:06:80:BD:AE:55:9A:92:AA:72:E5:5E:89:DB:17:BF:04:EC
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0E80BFD0
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/jwU_BoC9rlWakqpy5V6J2xe_BOw.roa
Signing time: Sat 01 Jan 2022 08:05:08 +0000
ROA not before: Sat 01 Jan 2022 08:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58075
IP address blocks: 185.187.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243318736 (0xe80bfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jan 1 08:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f053f0680bdae559a92aa72e55e89db17bf04ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:2d:a6:89:a3:48:48:62:0c:f2:dc:4a:b3:
87:ad:3a:c8:96:b2:30:b9:72:8f:5a:7f:af:fe:c0:
17:0a:bf:04:86:be:7a:9f:de:44:3e:82:25:f1:ff:
e8:b6:89:16:47:f4:82:43:61:65:a4:9a:92:22:aa:
b3:77:8d:ec:cb:9e:f3:63:ac:a3:67:43:6e:4e:ee:
bd:bd:75:f7:12:41:91:ce:77:d6:66:ba:22:5b:8b:
37:16:e6:4c:81:b8:d2:e1:a4:7a:73:5d:4c:21:94:
01:bb:c1:ec:f1:55:37:40:6a:da:b1:17:4a:52:f3:
25:8a:7c:ba:9a:35:ed:77:2f:c5:05:80:ea:57:17:
36:ba:e3:0a:a0:e7:d5:87:26:c6:fd:12:dc:6b:db:
38:36:11:f3:0d:6b:c6:01:b1:cb:b3:7f:ca:ec:72:
11:ca:ae:f4:ed:b3:de:fc:cb:a3:33:d8:f9:4e:79:
89:98:ee:bb:f2:e2:bf:3e:f7:23:31:87:89:21:f6:
f6:50:30:af:e6:4f:b9:61:ae:7b:12:a1:e0:43:21:
56:bd:15:98:a1:30:a0:42:3a:63:58:9c:eb:7c:0e:
43:98:dc:29:b7:d2:08:2f:da:63:c5:55:f3:fb:dd:
24:a1:de:37:c9:1a:88:79:f5:04:b3:e2:94:b9:76:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:3F:06:80:BD:AE:55:9A:92:AA:72:E5:5E:89:DB:17:BF:04:EC
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/jwU_BoC9rlWakqpy5V6J2xe_BOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:de:b9:f1:d1:42:29:04:b4:b0:9e:a4:cd:24:f9:21:9e:de:
47:24:e8:e9:0f:b1:ef:f9:90:f9:4f:ba:aa:d1:4c:b3:9a:db:
24:71:a6:ed:2f:a6:c3:99:ce:29:f2:10:37:bc:4f:0d:f9:07:
9d:ad:96:35:09:4e:2d:e3:cd:f3:52:24:d1:a4:27:47:fa:38:
aa:33:11:d3:b7:f4:90:5f:f3:b6:c5:d2:c5:64:73:1f:6e:a5:
4c:7e:c9:41:97:76:30:f4:54:e5:64:20:47:1d:b5:6c:35:c8:
ef:2f:15:eb:1e:f5:71:ec:e7:08:ed:ef:7b:9a:bf:15:c8:5a:
36:ca:5c:1f:a0:e5:70:a0:05:f7:1a:95:08:54:9b:73:3c:ba:
5d:3b:04:1d:51:6e:45:ba:28:62:bd:5d:d6:7e:f6:6f:73:93:
7c:59:13:79:a6:80:8d:b2:b6:09:e6:14:89:52:93:f0:aa:78:
ca:5e:cb:cd:77:2c:82:e7:a5:1e:1f:02:5c:75:d3:ac:fd:4d:
b7:2f:60:4b:45:e0:3b:6d:08:fc:9f:89:9a:40:0b:58:38:5c:
10:2e:0e:16:66:5b:64:1a:eb:cc:93:50:ba:af:3a:27:6f:9d:
a9:7e:88:f7:cf:05:2e:1c:fe:55:b5:9e:73:4d:b6:cd:d5:29:
ca:a3:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-ams.rpki-client.org