Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/j3stttIkvoyAoizIIvdqiEgCB18.roa
File: j3stttIkvoyAoizIIvdqiEgCB18.roa (raw, json)
Hash identifier: HPALz8QESOnKFU7sy9NzEVALLr1IbaOPwZYNDPHJiuw=
Subject key identifier: 8F:7B:2D:B6:D2:24:BE:8C:80:A2:2C:C8:22:F7:6A:88:48:02:07:5F
Certificate issuer: /CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
Certificate serial: 06CBC29E
Authority key identifier: B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/j3stttIkvoyAoizIIvdqiEgCB18.roa
Signing time: Sat 01 Jan 2022 00:58:29 +0000
ROA not before: Sat 01 Jan 2022 00:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34650
IP address blocks: 193.33.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114016926 (0x6cbc29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e58cc2c45e5a73f48494315558259f2fc506d7
Validity
Not Before: Jan 1 00:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f7b2db6d224be8c80a22cc822f76a884802075f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:d8:6a:93:57:d9:f5:ab:1e:17:6d:b8:6c:
7f:98:a9:63:be:c7:7d:e1:86:8c:85:74:58:43:75:
12:33:1d:8d:44:4c:fb:de:8e:4d:fe:ae:b8:eb:d3:
c8:75:ba:97:3a:cd:dc:7f:e2:75:a9:a5:cb:8f:e1:
9f:31:72:dd:f3:cc:d5:5b:e3:b5:5e:1e:4a:ba:cf:
a9:36:e4:24:e0:04:62:50:98:4d:d8:bb:fb:8f:c3:
eb:8d:36:d5:5c:9c:e4:5c:3d:2b:a7:5a:60:a3:9f:
8f:3c:b5:e6:f9:63:91:a3:d1:5c:ea:a3:44:9c:42:
12:12:02:36:63:d6:31:4f:7c:79:f9:7c:49:6f:41:
a4:6c:98:84:0c:d3:65:44:5f:9a:e5:2e:92:57:e2:
26:ba:d0:cd:4b:a5:38:63:80:2e:40:e3:b6:2a:1e:
a8:d5:92:5e:82:f0:e3:b7:2f:29:61:2a:aa:6c:33:
d4:02:93:cf:8b:6a:1c:c2:3c:69:8b:69:17:aa:f0:
e7:f5:61:a2:95:97:f0:ad:54:b1:2b:c2:5f:ba:d4:
ff:c4:c1:1a:f2:49:9a:50:c6:92:67:db:36:8a:8e:
4d:2b:ca:53:7b:86:2c:c4:50:3d:45:33:3d:dd:69:
95:5e:3d:c5:97:97:ca:25:69:e8:85:78:0b:be:bf:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:2D:B6:D2:24:BE:8C:80:A2:2C:C8:22:F7:6A:88:48:02:07:5F
X509v3 Authority Key Identifier:
keyid:B2:E5:8C:C2:C4:5E:5A:73:F4:84:94:31:55:58:25:9F:2F:C5:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suWMwsReWnP0hJQxVVglny_FBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/j3stttIkvoyAoizIIvdqiEgCB18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3921b7-444c-4fef-8b77-c3c471afeed6/1/suWMwsReWnP0hJQxVVglny_FBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.98.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b4:d3:16:6a:ad:5e:e1:88:99:6c:d7:44:71:68:0e:76:e5:
30:63:bb:af:47:ba:74:b9:63:27:06:d5:d1:66:5d:6e:b9:31:
34:bc:20:78:bf:fa:cb:ae:d3:34:4f:fc:49:3b:3b:20:c0:2d:
ff:e1:18:af:1a:08:c9:2c:ea:c3:c8:9b:4c:b6:65:0a:3f:21:
8d:76:c1:1d:f3:ae:9e:23:84:dc:a2:9c:a9:b8:97:ac:95:76:
7c:e4:19:14:a8:1c:65:d0:df:cb:72:b5:77:37:29:c9:76:83:
a1:39:28:be:12:5f:8f:c6:0f:4b:2f:c6:72:7e:0a:39:e0:59:
3e:f7:3b:db:a2:76:bd:3c:4f:14:ab:b4:46:f9:2f:3c:23:95:
d8:5e:3a:62:f0:b5:10:cb:07:81:b8:60:c9:b8:ff:d8:2c:ad:
b3:bf:97:10:94:a5:7c:60:cb:0f:0c:f7:0c:82:f5:88:41:75:
53:80:cc:cb:a9:cd:ba:7c:ec:90:19:57:48:06:bc:d8:57:4b:
c6:b2:a3:92:22:5b:7a:4a:a2:2b:b0:dd:28:9f:a7:5a:de:a8:
1f:53:2e:39:93:92:17:f8:7f:67:46:4a:f7:6e:71:44:6e:49:
cc:bb:d1:16:f3:fb:7e:4e:90:a6:94:e3:8c:53:5a:44:92:c2:
ee:da:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:23 2024 by rpki-client on console-ams.rpki-client.org