Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/jirwsefUCygd3luFdNcSrqO9pao.roa
File: jirwsefUCygd3luFdNcSrqO9pao.roa (raw, json)
Hash identifier: s+jGXnHvl6aRpkjGHc2JxoLWTfPSNZD8DVYXE0I86lw=
Subject key identifier: 8E:2A:F0:B1:E7:D4:0B:28:1D:DE:5B:85:74:D7:12:AE:A3:BD:A5:AA
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 0184187CDB4D9B794ECD60A92CB72E50501A
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/jirwsefUCygd3luFdNcSrqO9pao.roa
Signing time: Thu 27 Oct 2022 08:09:06 +0000
ROA not before: Thu 27 Oct 2022 08:09:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203416
IP address blocks: 185.131.8.0/24 maxlen: 24
185.131.10.0/23 maxlen: 23
185.131.9.0/24 maxlen: 24
91.244.192.0/22 maxlen: 22
2a06:dd40:1::/48 maxlen: 48
2a06:dd40:5601::/48 maxlen: 48
2a06:dd40:2::/48 maxlen: 48
2a06:dd40::/48 maxlen: 48
2a06:dd40:5600::/48 maxlen: 48
2a06:dd40:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:7c:db:4d:9b:79:4e:cd:60:a9:2c:b7:2e:50:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Oct 27 08:09:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e2af0b1e7d40b281dde5b8574d712aea3bda5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:53:61:32:ff:51:11:08:19:49:41:b4:00:
91:e4:e8:9b:09:88:1e:d4:5a:3c:e8:f7:4d:01:3f:
fc:37:ff:6c:34:10:35:7b:f6:ec:86:da:4d:75:b3:
77:a6:4a:fa:26:dc:53:8a:4f:c2:36:f9:a2:62:17:
9a:6f:1a:fa:69:c0:70:bb:ac:cd:c1:a1:bb:47:25:
30:97:4d:fe:a5:4c:96:ac:53:76:4f:a2:49:c6:30:
4e:c9:3f:66:27:66:c1:90:9e:bf:ea:06:57:ac:54:
6a:8c:f4:9b:cb:8f:4f:c1:ae:4e:b8:b6:fb:47:99:
62:94:84:d5:7e:dc:b0:de:69:65:c4:e7:4f:2f:6b:
99:ee:e0:07:b8:00:3b:89:16:84:e8:8b:d7:54:a8:
19:b5:fc:b1:3f:9f:ab:00:54:15:c7:91:2a:8f:a0:
37:d5:60:cc:22:6b:58:ff:b2:a2:fd:ae:37:ab:f5:
08:ad:bd:6e:be:c7:fb:29:3d:38:20:5b:59:69:23:
f9:37:76:e6:6f:24:bc:20:11:98:a1:4e:03:0a:0c:
a5:42:0b:70:9e:0b:24:5a:b5:d2:28:ca:7b:8a:d6:
03:a8:5a:08:01:05:c1:b2:25:ff:72:14:81:5f:29:
41:86:29:42:0f:f6:ce:43:fb:1d:72:33:9e:f6:0f:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:F0:B1:E7:D4:0B:28:1D:DE:5B:85:74:D7:12:AE:A3:BD:A5:AA
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/jirwsefUCygd3luFdNcSrqO9pao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.192.0/22
185.131.8.0/22
IPv6:
2a06:dd40::/46
2a06:dd40:5600::/47
Signature Algorithm: sha256WithRSAEncryption
84:64:ad:21:bc:91:8b:da:15:7f:40:a2:d7:70:1b:16:55:92:
8b:36:6f:f7:a2:ae:03:0c:9c:7c:b7:f9:6c:fe:89:2e:d9:1b:
bc:e0:ad:5a:5c:7a:06:e7:7d:9e:45:87:ea:b4:3e:60:b9:8c:
5a:8f:e3:4f:ed:92:9b:e7:2e:87:91:9c:d6:67:2d:1b:1d:34:
eb:60:e8:da:07:4b:01:93:33:1c:bf:d5:aa:f8:37:54:2b:ff:
4e:7e:1b:92:00:b7:dd:51:4d:24:2c:41:37:3e:4c:fb:bd:98:
15:f4:37:41:1a:68:03:13:bf:d6:15:ce:43:b6:cd:a1:c7:65:
26:54:7e:8e:75:4d:79:16:e4:02:9f:43:d6:f9:da:f1:1b:e3:
d8:79:85:79:8b:18:a6:a9:00:8e:1a:81:07:2e:df:64:b7:fc:
35:79:b3:0d:00:11:91:22:48:52:6f:55:fb:b1:39:c1:43:60:
f2:de:ed:1f:77:36:22:d7:a8:e6:77:28:48:14:a2:b3:bf:fe:
c3:99:d5:ec:48:1b:5f:04:b4:b5:32:76:bc:e6:8f:23:c6:50:
6e:d7:52:52:e6:c0:30:52:41:1e:15:3b:ae:7b:14:eb:71:df:
57:bf:42:11:a9:50:ab:1e:d9:2e:72:06:15:4a:ff:e5:73:40:
d6:cb:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-fra.rpki-client.org