Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/jEXvjzE4u7QVIkwdOYf4hBa8RpY.roa
File: jEXvjzE4u7QVIkwdOYf4hBa8RpY.roa (raw, json)
Hash identifier: Fn6k39ul5ecdA1A4Cm1CecbxtGrbVhyTtK4I4v9tbB4=
Subject key identifier: 8C:45:EF:8F:31:38:BB:B4:15:22:4C:1D:39:87:F8:84:16:BC:46:96
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0847E165
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/jEXvjzE4u7QVIkwdOYf4hBa8RpY.roa
Signing time: Sat 01 Jan 2022 08:02:31 +0000
ROA not before: Sat 01 Jan 2022 08:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56876
IP address blocks: 193.192.58.0/23 maxlen: 24
94.250.192.0/19 maxlen: 24
185.137.120.0/22 maxlen: 24
176.57.128.0/18 maxlen: 24
2a00:e440::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138928485 (0x847e165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 1 08:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c45ef8f3138bbb415224c1d3987f88416bc4696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:0b:b9:b1:07:e8:81:9e:9a:80:e4:68:86:
8a:f8:2d:8d:ba:dc:82:21:02:7d:25:f7:d5:dc:0a:
fd:b5:8b:b2:81:9e:10:73:69:c4:43:b5:a0:e5:19:
7e:77:25:c9:72:1e:32:90:5e:58:87:52:15:dc:8b:
07:c7:69:af:ba:90:91:66:38:8d:b7:79:56:5e:85:
65:51:d3:9f:08:98:4f:7f:da:2f:eb:c9:a8:05:b8:
c1:85:d4:8f:2e:27:0e:f1:4e:1b:ac:ab:7f:fa:d1:
c9:72:23:1a:67:26:60:5e:7e:72:d4:e7:06:86:8f:
35:5b:48:f7:98:c0:c6:14:5e:d0:6a:42:9c:0e:ea:
7c:39:c8:0f:f0:8f:a5:d4:26:e2:83:fa:88:d5:26:
69:d6:50:80:81:ee:62:ae:b6:95:32:2e:11:e4:3d:
8f:e1:34:ab:98:23:94:a4:22:f6:33:bd:f1:d8:00:
6c:bb:85:8a:6b:83:70:4c:b1:9c:87:62:e9:c3:6e:
5c:e9:71:b8:c0:c5:80:05:92:c5:21:94:96:a1:81:
60:43:7f:7e:83:1c:74:52:ab:80:7b:85:59:fe:0b:
f8:d6:b6:bd:6f:c1:8d:7e:a2:e6:66:3b:19:82:0c:
57:14:ad:67:01:fe:e9:3e:53:97:52:93:e6:b3:02:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:EF:8F:31:38:BB:B4:15:22:4C:1D:39:87:F8:84:16:BC:46:96
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/jEXvjzE4u7QVIkwdOYf4hBa8RpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.192.0/19
176.57.128.0/18
185.137.120.0/22
193.192.58.0/23
IPv6:
2a00:e440::/32
Signature Algorithm: sha256WithRSAEncryption
8b:6a:b2:9f:fd:c5:96:1c:e3:06:51:34:74:41:f7:ed:ed:fd:
6b:e0:e9:e5:e0:3e:f4:93:30:9c:91:ff:f8:05:bf:4b:fd:aa:
ad:5b:7d:19:44:8a:3e:17:ba:bc:9a:5e:85:bf:4f:7c:c1:30:
b1:61:28:7c:82:78:e2:cb:1d:a1:84:aa:61:e4:54:c0:02:58:
92:50:03:f8:f7:16:fc:b1:3c:6b:23:a1:81:a8:a7:26:2d:d9:
23:b5:4e:e6:a8:a2:c6:f6:a4:ee:df:24:80:6c:ea:cc:99:c8:
ba:ef:92:ae:83:73:92:08:db:02:e6:9e:75:b8:82:24:af:44:
2e:b2:cc:4a:f5:99:b7:da:77:04:95:ac:0f:40:ab:f4:3c:44:
ba:2a:07:10:3c:07:1e:7a:de:7b:d1:2d:85:f7:74:53:6e:cc:
f1:d5:fa:47:08:03:ac:05:1c:35:11:f3:0a:15:d4:2f:f6:23:
b2:9a:02:2f:c9:58:44:82:04:3a:2c:75:24:5f:10:c9:37:f7:
98:89:48:79:46:3b:4f:ad:82:c3:d7:3f:27:0a:b3:ac:48:2d:
af:74:80:2e:04:7a:57:ac:ab:e9:59:da:19:0b:9b:7c:c4:f2:
43:fe:4a:79:67:e1:5c:a1:75:bd:c4:54:52:8f:7c:1f:93:ad:
df:bb:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:34 2023 by rpki-client on console-ams.rpki-client.org