Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jyU3dbpmiZWuNEYoNTqBybkZ4H0.roa
File: jyU3dbpmiZWuNEYoNTqBybkZ4H0.roa (raw, json)
Hash identifier: 9gxDUnHjwVuplOk2nA3PQ0KLp0fNk92haGFo2+a+if0=
Subject key identifier: 8F:25:37:75:BA:66:89:95:AE:34:46:28:35:3A:81:C9:B9:19:E0:7D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018456ABB435E3206582C78E8A35C97C943C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jyU3dbpmiZWuNEYoNTqBybkZ4H0.roa
Signing time: Tue 08 Nov 2022 09:56:44 +0000
ROA not before: Tue 08 Nov 2022 09:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39668
IP address blocks: 217.156.4.0/22 maxlen: 22
85.120.24.0/22 maxlen: 22
193.230.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:ab:b4:35:e3:20:65:82:c7:8e:8a:35:c9:7c:94:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 8 09:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f253775ba668995ae344628353a81c9b919e07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:a6:29:73:b6:4d:d5:0f:14:09:3b:4e:bb:
19:6f:43:36:c2:61:5d:e6:d4:4e:e3:53:29:c6:f3:
ee:2e:c2:2c:a1:2d:c9:14:bc:a4:61:e6:0a:c1:3d:
39:e5:33:f5:dc:ab:dc:d7:16:27:68:26:dd:ff:ee:
64:2e:4f:3c:be:af:4a:82:d8:65:39:e9:96:3b:e4:
ea:cf:ed:3e:9b:ad:69:4f:47:f8:6b:c0:14:9b:67:
f3:9c:72:34:29:a2:1d:ac:dc:11:8d:66:f7:73:10:
fc:5d:1d:db:29:7c:b4:eb:a1:41:9d:88:ce:8e:cc:
d9:36:09:cc:be:ad:f3:d6:ea:3e:e7:bc:03:47:d9:
a2:87:13:14:8d:5a:02:07:9e:d7:92:6c:ba:49:08:
53:fd:a8:a8:90:d0:23:36:f3:b1:b4:bf:c4:1a:20:
76:55:fb:36:04:ca:fd:2d:79:bf:b5:3d:a8:67:c5:
71:0b:0f:0f:a9:9a:d5:0e:0a:41:b8:86:28:fa:68:
81:6b:b1:52:ab:f3:b6:fc:a6:27:50:da:ed:ee:9f:
d6:d7:cd:ae:55:75:d2:66:23:5a:7b:be:f5:89:2a:
59:0d:3d:91:2f:fc:d1:4c:37:bc:96:4c:b6:1a:a9:
e1:2a:43:ce:86:8b:b3:bf:17:0b:92:99:58:98:22:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:37:75:BA:66:89:95:AE:34:46:28:35:3A:81:C9:B9:19:E0:7D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jyU3dbpmiZWuNEYoNTqBybkZ4H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.24.0/22
193.230.215.0/24
217.156.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:1a:2e:e6:80:8a:9a:02:9a:c7:09:0b:d3:90:33:50:82:c1:
f2:1f:52:97:4f:d9:34:a2:d7:08:70:b0:9c:c1:f4:80:ad:ce:
6b:db:d6:4e:01:17:2f:39:1b:c4:c4:8e:3b:f7:d1:d8:08:0a:
c7:15:13:2a:b7:85:b0:89:71:38:9d:19:de:18:93:29:99:61:
ad:7d:ab:2e:03:61:e7:07:45:be:82:d6:76:7f:b2:b5:2d:e6:
db:7b:99:9e:a7:9b:44:03:65:dc:4a:d9:ad:81:08:80:df:ca:
27:4b:f3:9a:c5:a9:70:a5:51:8c:e6:8c:ec:16:1b:24:40:c6:
b0:6a:b9:58:5d:55:c6:33:b6:e7:8d:b1:e4:88:10:22:26:d8:
73:84:62:2f:71:8b:e7:6c:2c:da:93:da:62:21:ec:ff:c6:76:
e8:7e:7f:e0:61:86:3d:1b:5f:59:7c:ff:84:50:2a:e8:e6:57:
69:35:e4:7f:47:79:4e:02:dd:ff:fd:b7:c2:7a:13:8a:12:1f:
04:3d:0d:39:6a:38:9e:94:17:91:cf:d9:3a:ba:24:c6:7f:cf:
c9:ff:f0:7e:f5:de:83:85:44:89:b9:aa:64:e3:88:d2:90:2e:
ed:f4:e9:dd:16:67:6c:3c:99:90:a0:dc:ee:ba:17:d8:5a:ca:
58:df:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org