Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/J7bC8-rn9wXcYi8PmTWeyGPSxpk.roa
File: J7bC8-rn9wXcYi8PmTWeyGPSxpk.roa (raw, json)
Hash identifier: 3zm5CXVwRfD4DW2rl2a6uWVT6YAoUENP5xCE+dADk+I=
Subject key identifier: 27:B6:C2:F3:EA:E7:F7:05:DC:62:2F:0F:99:35:9E:C8:63:D2:C6:99
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0822D282
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/J7bC8-rn9wXcYi8PmTWeyGPSxpk.roa
Signing time: Sat 01 Jan 2022 07:53:46 +0000
ROA not before: Sat 01 Jan 2022 07:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30840
IP address blocks: 195.191.118.0/24 maxlen: 24
195.191.119.0/24 maxlen: 24
193.202.120.0/24 maxlen: 24
193.23.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136499842 (0x822d282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jan 1 07:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27b6c2f3eae7f705dc622f0f99359ec863d2c699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:ba:34:b1:df:89:50:91:a0:62:f7:ee:fb:
7e:e5:d0:86:b8:46:7e:0f:8a:7f:57:2b:48:fd:86:
45:35:c4:f1:5a:b6:ef:ff:73:f9:8b:11:c7:6c:f8:
cf:f3:22:42:97:c4:56:af:ae:7e:91:83:e2:3e:e3:
ee:ea:29:75:41:ad:e8:86:c9:96:37:4a:6b:c6:ae:
44:f4:d8:de:f3:9f:b1:be:4b:89:67:fe:ba:86:61:
1c:43:e3:3e:17:e5:31:4a:be:80:c4:3d:ba:7a:e9:
b4:e2:1b:48:54:f4:43:d2:b4:c8:38:f8:62:ab:f7:
be:6c:7f:27:65:4f:e7:8a:6d:a7:3a:77:17:f0:ae:
59:cc:e8:05:f1:44:95:1e:03:7d:8e:1d:bd:98:3e:
ae:9b:ed:f1:c8:c7:92:06:65:03:41:93:b5:69:51:
96:c2:d0:45:8f:b6:9f:82:1b:ed:d5:67:74:e4:9c:
d8:a6:0a:41:83:f1:b7:15:0a:d0:c7:75:0a:10:76:
f6:5c:2a:09:e0:2f:52:53:65:76:55:35:e1:7f:60:
48:52:05:bb:9a:02:76:30:fc:fe:b7:d7:9c:c4:da:
20:49:20:59:64:79:45:7e:00:81:49:84:3f:c8:d8:
99:ef:ff:f6:55:00:91:0c:dc:f1:3b:5b:f9:dc:52:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:C2:F3:EA:E7:F7:05:DC:62:2F:0F:99:35:9E:C8:63:D2:C6:99
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/J7bC8-rn9wXcYi8PmTWeyGPSxpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.156.0/24
193.202.120.0/24
195.191.118.0/23
Signature Algorithm: sha256WithRSAEncryption
87:8e:cc:12:fe:aa:9f:65:e2:d8:a0:25:64:5f:e6:5a:15:b4:
43:14:f2:0e:6d:f6:56:cb:51:82:74:23:1a:21:98:86:1f:cc:
76:4d:ca:93:ff:6c:1b:f2:8b:88:5e:64:3b:81:0a:a9:96:c8:
e6:cb:0c:ff:40:2c:3c:c4:60:9c:da:3d:5d:0d:0d:49:d8:54:
71:c3:3a:49:c9:c6:35:14:5e:90:27:06:69:66:b2:1c:1c:4a:
21:86:20:79:6d:f9:f3:1d:93:33:22:c0:e2:9b:96:44:62:e6:
db:cf:0d:19:fe:0a:7e:83:a9:56:b9:04:7d:1b:ed:82:df:9c:
4c:da:ac:65:0b:79:4c:93:80:fb:66:a8:cb:4e:89:2d:df:6d:
c1:62:b1:37:58:59:37:7b:cd:57:50:05:5a:32:c1:04:19:d3:
66:f3:c3:79:f1:04:47:64:98:f4:67:4f:aa:67:be:b8:bf:ad:
fd:07:b6:a6:fd:f0:8d:f5:5e:96:5c:d1:d5:b2:96:13:a0:76:
7c:92:e5:50:af:8e:c2:55:91:77:e5:e2:37:ac:ff:60:30:ff:
6d:20:02:91:bb:ff:c2:1e:bf:a0:f1:e6:9a:7a:bd:2d:22:d9:
e6:11:c3:b3:60:14:e2:bb:36:65:a8:62:5d:ab:75:f2:79:0b:
ad:64:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:15 2024 by rpki-client on console-ams.rpki-client.org