Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jIvOKEeAM1NGd_v5GZ98BB5QRk8.roa
File: jIvOKEeAM1NGd_v5GZ98BB5QRk8.roa (raw, json)
Hash identifier: stoezr8OChq11/3QaNavHPoHTg0kxXUfOMB6gAJkTtY=
Subject key identifier: 8C:8B:CE:28:47:80:33:53:46:77:FB:F9:19:9F:7C:04:1E:50:46:4F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14E4EFF1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jIvOKEeAM1NGd_v5GZ98BB5QRk8.roa
Signing time: Sun 01 May 2022 04:29:30 +0000
ROA not before: Sun 01 May 2022 04:29:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49443
IP address blocks: 80.94.80.0/23 maxlen: 23
45.86.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350547953 (0x14e4eff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 1 04:29:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c8bce28478033534677fbf9199f7c041e50464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:4e:73:92:8d:3f:a4:1a:5c:46:18:98:af:
39:5d:a4:79:1c:a2:8d:cf:5e:6f:45:6f:c7:d6:a8:
cf:bf:0e:92:00:4d:78:77:3a:4a:76:dc:ed:ea:2a:
c8:b0:ee:1d:7e:2b:92:be:19:b5:a7:13:ea:8f:d7:
49:44:66:fa:84:42:a6:30:b4:b4:9b:32:e4:d6:2a:
a9:dc:b8:82:4b:64:ac:a1:54:b3:bf:93:33:be:46:
f3:d8:56:c5:48:69:4b:c7:8d:a6:54:03:8d:58:3d:
06:c5:35:20:65:d9:a1:4c:85:dc:6e:5e:9c:f9:96:
88:e7:06:e8:d3:cc:ee:9f:67:9d:4d:49:61:66:5f:
3a:b7:17:4e:aa:db:d2:8b:d6:f3:86:33:19:d7:51:
db:ce:5b:c1:02:8f:d8:cb:51:71:3a:d0:8e:d0:90:
09:cc:e1:7c:8e:ed:27:5e:fe:1f:0a:5c:c7:9f:e1:
df:ae:d4:72:97:84:dd:ff:bf:93:31:9d:a8:34:26:
5b:64:fc:7c:6f:10:f5:e4:2f:af:8a:36:55:b7:6e:
9d:fe:91:2d:cb:ec:1f:39:5c:60:fd:e4:ee:94:6c:
ca:5b:01:9f:bc:9b:6e:2d:d7:3e:99:e2:f4:ef:1b:
92:0e:99:f4:ec:7a:4e:54:e8:70:12:86:15:10:d8:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:CE:28:47:80:33:53:46:77:FB:F9:19:9F:7C:04:1E:50:46:4F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jIvOKEeAM1NGd_v5GZ98BB5QRk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.19.0/24
80.94.80.0/23
Signature Algorithm: sha256WithRSAEncryption
88:33:ec:60:ec:db:7b:30:33:13:3b:fe:63:51:c7:5b:12:b5:
98:bf:05:f1:47:e7:60:4a:21:f9:f3:f9:3a:49:9d:b0:5b:9a:
32:45:e0:9c:52:22:5b:e7:2f:22:d3:b5:21:ae:81:a0:11:07:
d6:74:1e:d7:26:b6:6a:80:42:ff:13:42:c2:55:4a:d7:e8:2a:
46:58:70:ea:8b:89:43:a0:89:49:fd:1d:12:60:6b:82:5a:e3:
e6:47:e5:6d:d7:c9:96:ea:c0:63:23:de:f1:d4:e9:0e:95:10:
fb:47:a2:82:47:04:fc:cf:0f:98:c2:b0:c4:21:54:8b:7b:c2:
49:88:c0:c8:1c:cd:83:76:64:7e:be:d3:ce:27:e4:89:48:77:
42:98:71:1d:26:46:bf:c3:7b:57:60:3d:f1:0c:92:a1:44:ad:
d8:99:58:f0:05:e0:96:56:6e:35:f6:7e:fc:83:ef:c5:f1:b8:
c1:53:58:0e:22:e0:5e:b8:08:67:4d:b5:41:6d:d1:ae:87:02:
8f:1f:49:17:e2:aa:f1:57:82:73:da:19:1b:ce:71:61:30:7c:
b8:a9:56:56:ed:5d:40:6a:e5:45:09:6c:3e:25:9b:0f:c2:96:
1f:07:7c:25:38:e9:ff:a7:1f:b6:48:fc:5f:43:10:fb:d6:a5:
75:99:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org