Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/jkfFD_jju0RJatb4dWzuqIrrido.roa
File: jkfFD_jju0RJatb4dWzuqIrrido.roa (raw, json)
Hash identifier: PqyAtNxMMarlXFbvTIhckmkt74zQMUTEi9tQp2gEPxU=
Subject key identifier: 8E:47:C5:0F:F8:E3:BB:44:49:6A:D6:F8:75:6C:EE:A8:8A:EB:89:DA
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0E890E6D
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/jkfFD_jju0RJatb4dWzuqIrrido.roa
Signing time: Sat 01 Jan 2022 04:55:14 +0000
ROA not before: Sat 01 Jan 2022 04:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60648
IP address blocks: 193.27.212.0/23 maxlen: 23
77.93.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243863149 (0xe890e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 04:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e47c50ff8e3bb44496ad6f8756ceea88aeb89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:3e:1c:b7:88:45:06:eb:47:8a:5a:32:7e:
29:40:42:87:c4:cd:7d:20:72:1f:86:db:a8:22:27:
08:49:30:a2:99:23:99:f8:8e:3e:c9:92:85:91:af:
49:b3:2c:22:0c:33:b1:21:ff:3b:25:56:1c:16:6b:
02:cf:b0:1e:cc:01:87:6f:c9:0d:66:13:a7:a5:0b:
91:ab:68:11:aa:39:2b:da:76:1a:f0:cc:92:e8:c8:
49:99:b5:7a:14:7d:24:38:54:7d:0e:a1:fc:14:61:
06:a7:68:57:d0:de:78:a3:07:cd:3a:7c:37:e8:c6:
50:f2:25:f0:5b:98:eb:fe:42:ef:8c:8e:4c:20:88:
ef:d1:a9:19:65:36:ad:b7:96:1e:c9:9e:89:a9:cf:
88:54:ee:79:ed:68:d0:db:92:33:9d:bb:27:92:e7:
b1:a5:07:5b:12:91:0e:e5:5a:44:6f:b3:90:dd:82:
b3:c3:be:88:b3:5f:71:94:29:88:5d:bb:9b:bd:2a:
5c:d7:80:d9:e5:75:c5:5d:8a:a7:ba:44:11:38:43:
da:76:c4:25:a3:6c:e5:a1:1b:dd:69:f5:ae:7d:3e:
b9:d7:1d:b7:c6:6a:92:b7:6c:f0:df:ce:bb:28:29:
bb:7e:d9:ec:e6:26:9b:21:51:02:75:ed:0d:d9:da:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:C5:0F:F8:E3:BB:44:49:6A:D6:F8:75:6C:EE:A8:8A:EB:89:DA
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/jkfFD_jju0RJatb4dWzuqIrrido.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.128.0/19
193.27.212.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a1:b0:57:82:bc:78:8d:89:33:59:51:3b:2d:a2:b8:32:f7:
f0:0b:d7:0a:09:1b:00:22:c8:13:53:5b:bd:66:5a:0b:39:c3:
b2:14:f6:2d:a4:90:35:7d:00:83:dc:65:d7:2c:38:3b:45:dd:
3a:7a:4a:34:bb:e2:b7:76:0b:c8:c8:e5:da:03:d0:4c:f4:61:
46:40:56:97:d9:f3:96:0e:16:16:f4:03:11:1a:c0:a0:69:4d:
56:62:09:27:0c:c2:f0:4c:08:66:90:63:95:d8:1c:1c:23:b2:
34:b2:27:ed:52:77:26:ea:a3:56:ad:96:6b:36:26:5a:18:c4:
99:d8:07:d4:da:6b:a6:b8:9c:54:10:83:7e:d6:36:07:c7:11:
04:c5:79:2d:0a:8a:08:c4:e5:ec:fc:cc:6d:36:ef:3e:c1:ec:
4e:ec:ae:79:12:96:88:20:60:6e:7d:eb:99:a9:45:69:0f:e0:
81:c5:ec:d4:e9:2c:65:7c:3b:50:40:98:a3:10:16:da:bb:d5:
54:24:a9:9a:05:71:b2:d5:c9:e4:c4:be:8c:2c:98:53:72:eb:
cd:c0:9d:7a:be:e9:f4:f1:0d:2b:23:33:cb:a9:5f:3b:67:98:
77:a9:64:f5:68:f6:f8:21:7e:26:d0:a4:c6:ad:1d:29:50:06:
71:03:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org