Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jjs2MjpjFWZfGkV7WJTdmIbG7ys.roa
File: jjs2MjpjFWZfGkV7WJTdmIbG7ys.roa (raw, json)
Hash identifier: v3Z+vgC0uFSd4n+f6jCZxjrxUgIN1gKU7+FM1N/cpe0=
Subject key identifier: 8E:3B:36:32:3A:63:15:66:5F:1A:45:7B:58:94:DD:98:86:C6:EF:2B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183A28FF2690CB6FE3BEE42606869517846
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jjs2MjpjFWZfGkV7WJTdmIbG7ys.roa
Signing time: Tue 04 Oct 2022 10:34:46 +0000
ROA not before: Tue 04 Oct 2022 10:34:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:8f:f2:69:0c:b6:fe:3b:ee:42:60:68:69:51:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 4 10:34:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3b36323a6315665f1a457b5894dd9886c6ef2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:f8:e8:30:27:fa:47:73:0c:3d:51:07:d3:
33:d8:a6:4b:fb:02:e9:59:ee:d7:d3:41:69:d5:eb:
0f:fc:08:c4:2d:0a:5f:27:ef:6e:96:ce:30:85:13:
b0:b8:b5:8d:8e:1d:ca:fe:b7:c7:c7:fd:3b:6a:4d:
cc:56:ed:f2:84:7d:ee:c1:38:01:70:68:6c:3c:a4:
15:0f:23:f6:1b:86:5f:c5:eb:92:d9:ee:5d:af:d7:
e4:4f:db:b0:17:18:ad:7a:50:19:11:a3:9b:cb:31:
5d:8c:cd:1e:31:c6:29:ce:b3:6d:11:06:3b:97:a2:
8a:e4:10:49:f9:35:96:97:82:bf:30:7d:62:6d:30:
6b:8a:19:7d:e1:50:d7:78:90:18:db:bf:57:e1:1b:
39:79:6d:a1:d0:bb:83:25:d0:31:a3:b5:57:0d:b6:
cf:bc:46:7a:91:cd:54:36:7a:06:b3:ea:c1:0a:02:
85:1e:fa:0b:e9:22:05:e1:c1:dd:1e:b7:cf:8b:f3:
7b:0e:0f:d3:85:13:ae:90:c9:8c:3d:4e:58:dc:52:
c5:13:5d:c0:57:42:84:e6:51:22:c9:84:23:3e:02:
ce:66:13:2b:ea:31:69:19:1d:50:e9:0c:e4:2c:a5:
2b:12:81:80:c3:80:a6:ff:cb:ab:cf:76:35:e5:f0:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:36:32:3A:63:15:66:5F:1A:45:7B:58:94:DD:98:86:C6:EF:2B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jjs2MjpjFWZfGkV7WJTdmIbG7ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3c:9e:1c:2c:66:84:fa:a6:74:bd:d5:3f:f0:69:16:a2:f1:
0f:4b:9f:02:b0:ef:b5:10:61:2c:5f:df:6b:23:f9:e0:da:b9:
ad:91:d7:19:b0:74:df:8e:7e:7b:d4:73:a1:03:fb:e3:14:6d:
80:37:1c:3e:1a:5c:90:88:00:f3:aa:8b:87:17:97:7d:09:55:
8c:db:fa:f5:ba:3b:0d:f0:fe:d5:20:d6:ac:3d:9f:a8:20:48:
8d:99:7f:a0:e4:50:fb:bf:fb:1e:f8:31:23:cf:f0:14:ab:a7:
57:29:c1:7d:9e:23:77:da:52:6c:31:c0:4a:6d:5d:42:54:0d:
1a:0f:4c:99:1c:de:e6:3e:4b:ff:a4:51:d4:83:34:ec:71:31:
5e:fd:e3:ee:cd:f0:82:20:59:45:e1:cd:1d:90:a2:36:90:09:
c3:59:b4:9b:14:52:55:84:e1:b6:7b:2e:d6:c3:98:ca:4e:1a:
77:19:fe:9c:c9:b1:09:99:b8:68:57:42:ea:bc:81:55:c9:0d:
3c:f0:a4:f6:d1:6b:eb:b7:f0:74:48:e0:e4:0d:87:c1:e8:6f:
c0:51:ea:57:e0:28:09:5a:c5:77:25:61:9b:b8:6d:4e:c9:a3:
57:ac:46:c8:55:9d:85:a4:02:7a:69:26:9f:9f:31:40:8a:21:
2a:b6:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org