Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/JZamEjLulqpokfJapmoYkUXYjvo.roa
File: JZamEjLulqpokfJapmoYkUXYjvo.roa (raw, json)
Hash identifier: vo/Kisz/OWqnFMWpXpLU7+Ouw9ITWue329BvQZzl7DY=
Subject key identifier: 25:96:A6:12:32:EE:96:AA:68:91:F2:5A:A6:6A:18:91:45:D8:8E:FA
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 0825D725
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/JZamEjLulqpokfJapmoYkUXYjvo.roa
Signing time: Sat 01 Jan 2022 10:04:18 +0000
ROA not before: Sat 01 Jan 2022 10:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31617
IP address blocks: 192.166.252.0/24 maxlen: 24
192.172.232.0/24 maxlen: 24
185.186.92.0/22 maxlen: 24
192.188.248.0/24 maxlen: 24
194.143.142.0/23 maxlen: 24
45.66.100.0/22 maxlen: 24
193.23.114.0/24 maxlen: 24
192.207.14.0/24 maxlen: 24
45.92.148.0/22 maxlen: 24
185.252.52.0/22 maxlen: 24
195.88.230.0/23 maxlen: 24
195.88.234.0/23 maxlen: 24
91.241.86.0/23 maxlen: 24
62.192.148.0/22 maxlen: 24
217.26.180.0/22 maxlen: 24
2a0b:7380::/29 maxlen: 29
2a0e:2140::/29 maxlen: 29
2a0c:2140::/29 maxlen: 29
2a0d:9b40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136697637 (0x825d725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Jan 1 10:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2596a61232ee96aa6891f25aa66a189145d88efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:9a:47:6a:a2:fb:ad:7b:ae:26:99:8c:1c:
ae:bd:6b:89:2b:aa:55:8c:75:fe:93:29:c5:7e:d9:
78:11:8e:07:2e:10:cd:75:b0:fc:be:42:be:01:cc:
0b:fc:58:92:f1:bc:60:65:1a:ec:16:a3:1d:22:e6:
03:28:cb:0e:0b:dc:3c:67:c1:fd:55:9c:f6:cf:0a:
43:7e:4e:7e:22:07:63:e5:b3:d8:d1:9c:bc:67:17:
2a:0f:10:29:ae:84:74:e4:32:ca:6d:30:50:e7:3c:
91:24:58:33:a4:11:94:2e:c2:d9:50:50:ea:f6:83:
7a:0c:58:2f:d3:a6:f9:ca:8d:3a:89:7d:30:50:ab:
2d:f3:f2:34:46:be:76:08:58:e2:af:bf:9d:f5:07:
88:2a:a4:7e:54:b2:e0:e1:75:2e:37:6a:5a:03:bd:
f5:0e:c4:bb:2a:46:c2:31:b2:8b:16:d2:26:05:9b:
6e:0d:9c:bf:20:38:09:d0:93:e2:0c:49:c5:bc:98:
38:19:d1:45:46:8e:b1:e3:b2:e5:7b:7d:95:14:ad:
24:23:7b:9d:83:61:dc:82:21:4c:54:a8:55:1f:9a:
9c:2a:b4:39:c9:51:c4:c5:ac:c5:37:41:13:71:ef:
c0:2e:58:1e:46:bd:3f:f2:4d:cf:4c:4a:5d:68:5a:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:A6:12:32:EE:96:AA:68:91:F2:5A:A6:6A:18:91:45:D8:8E:FA
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/JZamEjLulqpokfJapmoYkUXYjvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.100.0/22
45.92.148.0/22
62.192.148.0/22
91.241.86.0/23
185.186.92.0/22
185.252.52.0/22
192.166.252.0/24
192.172.232.0/24
192.188.248.0/24
192.207.14.0/24
193.23.114.0/24
194.143.142.0/23
195.88.230.0/23
195.88.234.0/23
217.26.180.0/22
IPv6:
2a0b:7380::/29
2a0c:2140::/29
2a0d:9b40::/29
2a0e:2140::/29
Signature Algorithm: sha256WithRSAEncryption
65:9b:05:e7:0f:f5:c8:44:0a:4a:ab:08:2b:e1:1a:db:70:e8:
07:a9:4b:e3:26:5a:c0:50:eb:fb:2d:8f:b3:19:f1:ae:96:db:
9b:2c:fc:83:9b:2b:72:53:87:e3:63:66:b9:65:2f:0b:a2:8f:
42:35:66:bd:85:0f:26:5e:be:03:2d:ab:dc:8c:2d:89:a9:04:
71:a3:9e:22:ad:e1:31:d0:34:36:2f:5a:34:12:d1:e7:4e:32:
e9:94:b5:62:39:cc:1f:98:4a:bd:96:d6:91:36:02:82:3f:30:
ba:30:b7:68:de:49:1a:9c:68:f6:32:2a:01:8a:72:8d:8d:c8:
c2:85:39:e6:85:80:79:d5:c5:08:18:14:60:19:a0:d1:bf:83:
0f:71:aa:e9:e8:eb:63:47:34:9a:1f:73:29:56:32:73:9c:0a:
d2:78:f7:85:06:df:33:fa:f1:85:bd:fb:aa:13:ff:34:3b:e8:
ec:2b:88:a9:5a:e2:b6:db:43:d9:73:da:17:70:6f:2b:71:f6:
d1:b6:9a:6f:3a:bf:7b:e5:e2:4c:33:03:bd:40:3d:a3:67:5c:
f2:bb:f6:91:d5:7f:1b:e5:46:a7:4b:43:48:d9:cd:e9:e6:9f:
4f:b0:f3:10:d2:19:0e:95:68:77:8a:4c:5d:f2:7d:68:d5:35:
49:66:18:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org