Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/1JqptrOoTdaJlWVSpDLphPVKcdw.roa
File: 1JqptrOoTdaJlWVSpDLphPVKcdw.roa (raw, json)
Hash identifier: d+wWBMEYqCW8fpOcfN9f+AdJxES+sj9HhFWm62qqprQ=
Subject key identifier: D4:9A:A9:B6:B3:A8:4D:D6:89:95:65:52:A4:32:E9:84:F5:4A:71:DC
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 03B35E2A
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/1JqptrOoTdaJlWVSpDLphPVKcdw.roa
Signing time: Sat 01 Jan 2022 08:53:56 +0000
ROA not before: Sat 01 Jan 2022 08:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29491
IP address blocks: 195.191.214.0/23 maxlen: 23
91.193.164.0/22 maxlen: 22
94.45.128.0/19 maxlen: 24
194.187.108.0/22 maxlen: 22
195.137.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62086698 (0x3b35e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 08:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d49aa9b6b3a84dd689956552a432e984f54a71dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:02:71:ea:c3:f3:4c:18:84:4b:1d:b0:94:
3e:1f:cb:ba:b1:33:b0:d8:47:10:fa:3b:c1:15:a3:
9d:c7:ab:6d:03:82:4e:db:30:1c:ad:24:4a:56:0b:
d6:8a:6f:12:cd:f7:8c:1c:76:9a:61:55:64:fc:a1:
35:39:f5:a7:d0:2a:e0:65:75:d7:47:46:28:5a:a4:
52:19:df:9d:4f:4d:02:b9:63:ab:7e:02:f9:05:2c:
f3:c5:32:95:9e:34:cc:02:fa:e9:eb:03:fa:4d:fc:
82:c7:7e:12:df:1e:1a:cc:d8:3c:f3:aa:a7:5c:82:
3a:fb:eb:98:50:ef:5a:f1:31:2f:ba:ae:e6:98:e4:
b2:36:f6:dc:de:3b:e8:c4:78:8f:74:7b:58:03:05:
f5:67:af:4a:20:f2:5c:75:e5:7d:7b:68:cd:5d:fc:
b4:ef:a6:44:7f:c4:81:f8:a3:4b:cd:e7:5c:85:5d:
fb:d9:55:18:f0:f0:d8:71:3e:d1:2c:47:e3:b0:35:
70:b9:55:ba:a1:90:85:0c:01:0d:c6:5e:e0:95:33:
cd:07:75:14:1c:4e:d8:3f:a1:9b:7e:fd:bc:39:2b:
71:69:0b:45:58:15:31:43:d0:2b:9f:43:0f:8b:e2:
0c:ae:d1:51:01:89:be:6f:47:09:15:b0:27:b3:b4:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:A9:B6:B3:A8:4D:D6:89:95:65:52:A4:32:E9:84:F5:4A:71:DC
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/1JqptrOoTdaJlWVSpDLphPVKcdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.164.0/22
94.45.128.0/19
194.187.108.0/22
195.137.202.0/23
195.191.214.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:e3:5c:78:f5:77:15:02:1f:22:b0:9f:9d:c6:57:52:a9:e6:
7e:57:6b:9f:93:44:52:91:97:54:c5:4c:47:ea:02:ba:da:c1:
e5:3b:b2:12:71:ec:1c:3e:94:09:60:4f:6d:8e:31:7b:b4:1e:
b6:1f:77:61:9d:06:0b:3e:40:cc:b5:c4:32:75:47:2d:07:38:
a5:35:54:92:ce:a8:70:cb:e4:ea:61:1c:9e:c9:d3:8f:c2:0d:
32:0a:b0:de:27:52:39:97:7b:94:db:53:33:cb:c2:d8:77:31:
77:58:6e:93:62:aa:89:5e:ea:74:7d:97:11:04:ba:05:ca:d7:
f5:75:f0:0d:9c:41:56:29:f7:87:8b:53:76:d7:e6:ab:72:ae:
63:97:cb:f1:dd:61:24:1c:07:67:9d:9a:eb:97:76:96:bc:2f:
f9:aa:54:47:ab:6d:2a:7e:75:e1:c5:00:79:af:6a:49:f0:4d:
df:c5:be:40:06:27:bb:e3:9b:7e:5f:83:66:1b:92:10:fe:f5:
a5:9b:a5:12:ad:14:a4:8c:20:73:a5:54:3a:3a:34:35:53:ad:
c3:22:29:62:4d:81:c1:05:b3:f4:3b:19:af:52:2e:86:a3:51:
ee:ae:78:fa:14:cb:00:27:0e:0a:ad:2a:9c:f9:b3:37:bb:af:
bc:26:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org