Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/JJD7PMao9X-leh9E3Z-u7VV5zn4.roa
File: JJD7PMao9X-leh9E3Z-u7VV5zn4.roa (raw, json)
Hash identifier: JXO278PmsAsgObfoAllWuhOvZLoqbiwRleIiYFy7zcE=
Subject key identifier: 24:90:FB:3C:C6:A8:F5:7F:A5:7A:1F:44:DD:9F:AE:ED:55:79:CE:7E
Certificate issuer: /CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
Certificate serial: 92F128
Authority key identifier: 33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/JJD7PMao9X-leh9E3Z-u7VV5zn4.roa
Signing time: Sat 01 Jan 2022 01:54:49 +0000
ROA not before: Sat 01 Jan 2022 01:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9629992 (0x92f128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
Validity
Not Before: Jan 1 01:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2490fb3cc6a8f57fa57a1f44dd9faeed5579ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:59:b3:00:ce:e0:79:bb:d1:9d:ea:bd:11:
4a:e0:ba:6b:40:ec:2d:0c:6c:eb:ba:34:58:b2:6c:
2c:c3:fb:fa:ae:15:9f:4f:19:b8:c5:13:92:ff:8e:
52:a3:cc:60:bf:de:9f:70:2a:9e:2e:0f:9b:55:21:
b7:7f:02:f2:b9:9a:35:da:b8:f0:2f:ac:63:d4:08:
11:54:e3:f9:f7:e7:07:f5:dd:9e:ce:5f:82:76:d8:
f1:5e:69:af:09:aa:83:fe:45:15:b4:0d:c1:53:b4:
60:44:84:bf:f8:11:49:95:89:84:ec:95:79:db:de:
0a:70:37:76:08:a0:9d:59:76:78:29:94:1c:15:7a:
6e:96:8a:b8:2c:66:ed:8e:a2:af:51:9e:c9:55:90:
61:18:41:41:78:f6:1f:0e:8c:67:7e:8a:55:ab:84:
fa:03:a9:0d:a7:63:1e:6f:af:13:4f:08:b1:85:26:
a8:3b:b4:a1:20:ab:d6:07:ef:29:85:da:12:11:59:
9f:36:c7:d1:23:db:29:ce:a0:99:e0:46:f7:29:6e:
88:e9:e0:f9:41:09:d1:52:b9:52:70:06:e2:22:85:
a9:c9:81:f8:c0:1e:de:04:c0:2c:ee:ac:b7:a0:9c:
41:03:0b:c6:7f:9a:70:bb:82:5b:b7:d5:f3:4e:a5:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:FB:3C:C6:A8:F5:7F:A5:7A:1F:44:DD:9F:AE:ED:55:79:CE:7E
X509v3 Authority Key Identifier:
keyid:33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/JJD7PMao9X-leh9E3Z-u7VV5zn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.181.0/24
Signature Algorithm: sha256WithRSAEncryption
66:15:9d:a6:cb:af:c9:0f:55:10:4c:f6:d8:6d:cd:3c:57:a3:
25:8d:43:27:79:ac:42:fe:92:91:53:a1:08:14:35:76:86:99:
65:7c:fc:59:5c:c5:96:a5:5e:1f:23:f0:20:69:3b:e9:00:85:
ed:d1:19:bd:ac:91:aa:5d:08:95:97:86:e8:26:6d:cd:9b:b2:
a1:00:83:4f:58:0a:0a:63:41:ff:78:df:d3:2d:89:82:46:c7:
27:50:cf:8a:2d:99:df:af:42:06:e4:6f:8a:c2:c5:88:ab:8e:
e4:38:39:62:d4:d6:74:66:28:ef:dc:27:ca:55:d3:c4:aa:c1:
92:50:4f:ce:dd:81:92:53:98:63:68:cf:a0:07:cb:5a:6d:f2:
f0:5f:5a:26:19:49:09:57:ba:ac:b6:ac:77:91:47:1d:22:73:
f8:ed:e4:e0:b1:3e:82:2c:7f:aa:3c:6b:8b:a4:41:90:d9:4c:
39:87:bd:39:bf:38:86:a3:40:d7:ae:5d:7a:11:32:2f:4d:63:
63:20:dd:77:64:66:c1:ad:21:e9:b0:af:7b:f2:5e:df:10:c4:
fb:78:fb:a8:a9:8e:31:c6:7b:3c:50:b6:d5:f4:b0:81:bf:a4:
5e:45:87:f1:ac:d4:b9:e5:5f:df:61:52:83:65:b9:51:fc:26:
3b:09:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org