Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/JnJbPZfNDxsRYUGerKKhjR3EiP4.roa
File: JnJbPZfNDxsRYUGerKKhjR3EiP4.roa (raw, json)
Hash identifier: FsR8H33PPiecjb4UEdfx33NHj+17cajHPP3qmDge06A=
Subject key identifier: 26:72:5B:3D:97:CD:0F:1B:11:61:41:9E:AC:A2:A1:8D:1D:C4:88:FE
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 085754AB
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/JnJbPZfNDxsRYUGerKKhjR3EiP4.roa
Signing time: Wed 16 Mar 2022 13:00:10 +0000
ROA not before: Wed 16 Mar 2022 13:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 193.202.80.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
45.145.130.0/23 maxlen: 23
83.142.52.0/23 maxlen: 23
83.142.54.0/23 maxlen: 23
45.80.104.0/23 maxlen: 23
212.119.44.0/23 maxlen: 23
212.119.46.0/23 maxlen: 23
193.203.10.0/23 maxlen: 23
193.203.8.0/23 maxlen: 23
45.140.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139941035 (0x85754ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 16 13:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26725b3d97cd0f1b1161419eaca2a18d1dc488fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:57:4e:dc:1a:e0:66:d8:62:3e:79:73:bb:
fb:b3:17:a7:6a:09:45:24:e7:96:05:f2:53:fe:6c:
6f:82:52:62:16:18:12:d4:07:1f:90:ca:f2:48:62:
1a:f6:f6:b1:91:42:9b:99:aa:02:d6:91:19:55:24:
c7:a4:da:7a:c3:78:04:d5:c5:9e:08:c5:bb:78:9f:
72:19:a0:94:85:4d:21:b8:3a:e0:6e:84:28:a7:70:
39:3e:b0:ac:4d:9a:1f:dc:5f:65:c2:a0:88:7d:6f:
91:ab:3f:fe:03:79:52:ca:20:fd:d7:8c:5e:12:10:
ef:41:91:d9:88:19:ca:e4:cb:31:4b:d8:31:d5:9f:
cb:b4:4d:e0:4f:79:6d:61:04:21:14:14:33:9b:f3:
82:b5:e0:6d:28:fd:ad:e3:33:6f:72:08:57:10:7d:
c8:7f:5f:08:85:dc:7a:26:43:ce:46:1c:27:ef:b5:
5d:cb:f5:4c:ce:a1:21:7d:30:23:ee:f2:b9:ef:f0:
7b:67:07:75:44:e0:a0:34:a0:31:38:c8:ef:13:eb:
ee:64:bb:20:9d:f7:ad:31:4a:c9:b7:51:39:ee:bb:
30:c4:fc:9d:b9:08:b9:e3:92:01:a6:23:f8:3f:b0:
53:d0:84:d3:80:43:68:9f:8e:1a:4a:13:d3:05:0f:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:5B:3D:97:CD:0F:1B:11:61:41:9E:AC:A2:A1:8D:1D:C4:88:FE
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/JnJbPZfNDxsRYUGerKKhjR3EiP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
45.140.206.0/23
45.145.130.0/23
83.142.52.0/22
193.202.80.0/22
193.203.8.0/22
212.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:5e:02:c9:27:14:c3:f8:29:8f:f6:a5:e0:ae:71:11:50:0a:
ec:76:35:83:94:4a:7c:e4:bf:0b:e7:9f:aa:4e:24:b8:91:fe:
88:f9:17:df:cf:07:45:c9:1b:ba:ee:52:02:e9:f6:ed:ec:ba:
a1:1b:0c:7e:5b:fe:ac:53:cc:52:c9:fb:60:a5:20:ed:7e:87:
6b:99:55:15:e3:e2:37:1e:7b:60:95:be:c2:35:28:34:8d:42:
fc:34:1d:a8:85:38:dd:a3:72:46:be:59:0e:d9:c8:52:76:57:
c1:00:84:14:f1:ec:b4:56:08:24:bf:76:b3:15:e8:56:06:18:
a6:9e:3b:e8:1c:04:a9:9d:f8:df:06:52:10:26:06:c3:ed:bc:
ab:63:6b:b3:5d:a3:97:05:2b:51:a9:8e:a4:26:78:e3:bb:c6:
5e:f7:2c:31:20:6c:7a:92:a8:71:2d:7b:0f:e2:4c:4f:6a:74:
91:58:44:f3:3e:bd:b5:fe:55:78:57:b5:07:46:70:5b:4a:f3:
6a:9d:5f:dd:8f:0c:93:b6:7d:cf:dc:f6:ea:fa:4b:8d:a2:28:
f8:47:d2:8f:8a:46:0a:1c:12:7c:ba:8d:11:b3:f9:e9:fe:be:
f1:f0:4f:c3:b7:95:70:39:76:f8:a1:6b:83:82:3b:db:3b:53:
fa:3a:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:42 2023 by rpki-client on console-ams.rpki-client.org