Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/jDMqS5-iXwtR-dzwx8fE5OFwbNw.roa
File: jDMqS5-iXwtR-dzwx8fE5OFwbNw.roa (raw, json)
Hash identifier: UuWCOxQ4QCsXFvOcdHhB1x5TzYbco3Pw8P6Qr44VFI4=
Subject key identifier: 8C:33:2A:4B:9F:A2:5F:0B:51:F9:DC:F0:C7:C7:C4:E4:E1:70:6C:DC
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 06634928
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/jDMqS5-iXwtR-dzwx8fE5OFwbNw.roa
Signing time: Tue 19 Apr 2022 14:12:56 +0000
ROA not before: Tue 19 Apr 2022 14:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210342
IP address blocks: 79.133.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107170088 (0x6634928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c332a4b9fa25f0b51f9dcf0c7c7c4e4e1706cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:85:86:84:7e:93:7e:21:ae:aa:dd:50:e7:
d0:da:36:c0:2e:da:1f:3a:fa:db:e7:8a:8f:74:f1:
e3:d2:d9:bf:34:d6:b1:c5:a5:4f:d4:41:f5:36:b0:
dd:9e:c3:6a:25:b2:c0:51:02:8e:17:00:18:00:9c:
cb:f1:31:9f:54:d6:7c:b2:71:1c:57:cd:fe:80:eb:
68:2a:98:39:c8:fa:44:66:10:67:a1:46:65:f9:e8:
2a:52:d7:1f:fc:c5:5a:24:8c:d8:b9:ed:b6:ba:6e:
72:10:ec:19:29:97:34:50:9b:57:c4:73:74:2b:20:
e4:62:59:9a:14:16:b8:17:4f:29:0e:23:74:e7:18:
34:1d:89:6e:21:bc:29:8d:af:c1:51:66:5c:be:11:
cc:ed:86:95:e4:08:91:6b:b7:66:c2:36:34:7a:d2:
a8:53:37:26:ba:ec:ae:53:fc:d6:2c:65:f8:a4:e8:
58:30:f6:be:f4:a0:80:c7:aa:e0:4c:d4:66:59:e5:
a3:46:08:61:3c:61:52:fa:c0:90:00:fa:2a:50:2f:
ef:80:15:c0:50:43:52:de:70:a1:90:47:64:f0:62:
aa:0d:55:04:75:a5:83:e8:a0:6c:0f:d2:7b:13:b1:
a8:0b:b1:3a:7e:9a:f7:bd:00:8a:a8:1d:ee:3c:17:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:2A:4B:9F:A2:5F:0B:51:F9:DC:F0:C7:C7:C4:E4:E1:70:6C:DC
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/jDMqS5-iXwtR-dzwx8fE5OFwbNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.99.0/24
Signature Algorithm: sha256WithRSAEncryption
52:89:63:dc:80:05:78:8c:1f:88:21:f6:5f:87:a7:71:19:48:
27:be:dc:58:f5:92:6e:2c:2d:24:d5:8b:ba:c8:7e:c8:b2:30:
9f:22:ca:2f:8f:a8:86:3a:3f:55:bc:45:43:a1:2f:63:88:6b:
e9:2c:ea:c9:96:e7:14:7b:b0:aa:39:c6:16:ca:2f:7f:4b:93:
1b:5f:bd:97:a0:a0:5a:80:ac:1e:b1:4b:f3:0a:4d:7e:94:42:
49:e9:89:28:5e:5c:3d:9b:78:31:d9:22:02:75:44:c2:35:54:
40:74:aa:17:86:d5:6b:d4:c9:c4:cd:d9:ba:96:0c:49:18:b6:
dd:91:8e:6c:74:a3:2c:19:06:92:61:dc:c2:10:2d:e1:f3:16:
6c:48:d5:8b:7a:70:da:ce:00:f3:7a:46:ef:b1:9c:b3:d1:6d:
88:b7:21:86:06:f3:41:da:c7:5f:96:77:fa:a5:42:8a:bd:0f:
8c:3c:10:57:63:79:50:48:13:e7:3c:03:45:7b:fb:2c:0c:7c:
fc:26:e2:f8:40:30:f5:ce:68:ab:94:93:47:6f:ec:61:be:6e:
c6:1a:1b:e7:83:de:42:6b:c4:ba:07:98:ff:71:d7:d8:3c:dc:
84:44:69:78:da:67:c4:39:7e:b8:bb:71:7e:28:68:37:e6:f4:
79:91:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:48 2023 by rpki-client on console-ams.rpki-client.org