Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/jgM3IiYjNPEmLM3xKG647dkScI0.roa
File: jgM3IiYjNPEmLM3xKG647dkScI0.roa (raw, json)
Hash identifier: bwwVuTDMDcYhUGjXF85fsbsPwXhu19ay6jDAm74b7Cw=
Subject key identifier: 8E:03:37:22:26:23:34:F1:26:2C:CD:F1:28:6E:B8:ED:D9:12:70:8D
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 03F8E6D5
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/jgM3IiYjNPEmLM3xKG647dkScI0.roa
Signing time: Sun 05 Jun 2022 00:01:20 +0000
ROA not before: Sun 05 Jun 2022 00:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211607
IP address blocks: 195.230.103.0/24 maxlen: 24
2a10:b640:3000::/36 maxlen: 48
2001:678:e70::/48 maxlen: 48
2a10:b641::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66643669 (0x3f8e6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Jun 5 00:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e033722262334f1262ccdf1286eb8edd912708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:a0:e6:11:70:d2:d4:ed:af:d2:d1:be:ef:
7c:59:5b:82:cf:f1:e0:23:7b:a5:f3:7f:b5:43:e6:
e0:fe:e4:35:c9:41:ef:02:23:f6:b5:0f:39:7a:1f:
d4:c9:96:ff:8b:27:a9:20:c8:16:b5:9d:36:0f:ba:
d0:03:3a:b6:fd:5b:49:ca:0e:3b:a7:8f:a1:42:92:
7d:8e:ec:48:6c:1d:79:7f:06:c6:d3:b0:cf:87:66:
19:e7:ed:b6:9e:ac:b9:15:b6:97:9c:25:38:ef:f1:
ce:08:89:7b:d1:d9:4f:96:85:cb:22:53:88:a3:2a:
ef:97:cd:f1:46:b2:e3:4e:a9:3d:d9:44:f7:44:d3:
9a:00:48:fe:fb:af:0e:ba:df:b9:50:83:66:c5:55:
89:8e:32:44:c1:2c:91:4a:2f:e9:22:c8:18:40:68:
db:8d:91:ab:f1:65:48:f2:04:9b:19:9d:c7:ec:94:
de:72:8f:29:79:38:b2:a2:f8:c1:cb:bb:b4:72:f2:
d7:bc:c4:e2:58:a3:d1:14:11:2c:14:a6:f0:35:8d:
cf:78:c0:c0:2a:08:5e:62:80:b6:08:3c:84:0a:c1:
6a:70:36:61:7f:81:b3:73:f9:95:9a:6c:d2:e5:8e:
3b:55:5e:cf:64:4f:ed:b3:85:fe:14:92:6b:cc:c5:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:37:22:26:23:34:F1:26:2C:CD:F1:28:6E:B8:ED:D9:12:70:8D
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/jgM3IiYjNPEmLM3xKG647dkScI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.103.0/24
IPv6:
2001:678:e70::/48
2a10:b640:3000::/36
2a10:b641::/36
Signature Algorithm: sha256WithRSAEncryption
20:49:9b:1a:b7:6d:e4:04:79:7a:70:e3:64:4a:eb:cf:f8:9c:
32:79:64:ab:d9:64:99:54:31:0f:92:bc:33:d4:0c:b1:cd:9d:
af:29:eb:0d:6b:d5:47:c9:bb:60:b2:7a:fe:9f:d2:01:ff:62:
d1:3b:4f:33:d9:6b:25:88:43:51:9d:e9:ee:af:91:1a:6e:54:
a5:b1:a2:fa:45:c6:19:76:a3:6d:23:14:b6:24:4e:1e:29:82:
64:73:d5:0b:fc:a1:85:0e:62:ba:8d:e3:d6:56:52:c1:60:73:
9c:71:1a:6a:64:21:62:f7:0d:56:e7:76:04:ff:f7:fd:69:a3:
6f:97:f0:28:bf:80:f6:a0:25:cc:e8:36:cc:f5:fc:49:b1:01:
09:5a:6c:b3:3a:9d:d7:01:f3:bc:14:8b:ed:e6:69:9d:61:fc:
a7:9c:9d:3a:06:93:9d:e7:b9:3d:d4:30:bd:13:82:a6:c8:d1:
b9:e2:f2:85:ea:32:6c:9e:0f:fb:51:5d:81:cf:03:5e:27:45:
40:12:36:3b:eb:ca:b6:23:14:84:0b:43:7b:d2:4e:8e:06:4e:
3f:cb:24:61:d1:65:d9:1f:38:95:13:eb:1a:18:0a:a5:99:64:
f3:bb:3a:93:f7:51:d7:d1:d9:15:50:0d:a1:51:02:02:2b:da:
0c:8b:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:20 2023 by rpki-client on console-ams.rpki-client.org