Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/j9xu9FXGIi9UEiHNap6LzmGZ8jk.roa
File: j9xu9FXGIi9UEiHNap6LzmGZ8jk.roa (raw, json)
Hash identifier: UBXE9elVmCCkfV60TWw38h/HgGgOPA5hXf72EBSiRZw=
Subject key identifier: 8F:DC:6E:F4:55:C6:22:2F:54:12:21:CD:6A:9E:8B:CE:61:99:F2:39
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0D8C2985
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/j9xu9FXGIi9UEiHNap6LzmGZ8jk.roa
Signing time: Sat 01 Jan 2022 02:57:11 +0000
ROA not before: Sat 01 Jan 2022 02:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.34.48.0/24 maxlen: 24
193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
193.34.50.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
195.13.61.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227289477 (0xd8c2985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 02:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fdc6ef455c6222f541221cd6a9e8bce6199f239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:64:39:eb:f3:b8:17:9f:a0:c0:b5:50:4f:
b3:7e:46:46:89:02:bf:be:a5:8a:84:21:cf:2b:9d:
f1:20:a8:e6:f3:e2:06:75:b2:d8:4c:70:4e:b7:f2:
39:f2:ee:3e:1a:9b:1c:8c:2a:b2:8a:c1:5d:73:08:
00:8b:b6:f6:85:59:23:5d:89:30:62:f7:77:fe:00:
14:26:a9:cc:28:16:05:6e:9e:9b:42:0b:a1:d8:e8:
af:36:71:3f:dd:f3:ad:77:dd:d9:29:4b:0e:56:65:
79:fa:74:3a:0c:e9:61:84:5b:08:3b:51:24:a6:7a:
67:e3:f4:05:55:cf:44:82:cc:0f:ec:d3:1d:e5:24:
a0:5b:c8:66:34:92:a7:06:6f:f2:62:35:b6:7c:8b:
34:ae:c4:66:ff:7b:7b:91:63:d1:64:57:28:9e:14:
4c:9f:2b:52:8d:e1:d1:81:e1:d5:02:0a:35:6d:da:
40:b1:e3:60:75:c3:f1:37:38:5e:e1:e3:26:18:61:
c4:85:97:a6:c0:87:99:b5:ca:10:ad:71:6f:a4:1b:
38:ce:83:29:b9:e9:cf:89:93:8b:b8:b1:1d:49:64:
ab:16:52:e0:89:42:37:d0:13:bd:d7:e0:6f:82:9a:
08:ee:d7:d6:c6:4d:d1:32:2d:74:4a:2e:02:32:47:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:6E:F4:55:C6:22:2F:54:12:21:CD:6A:9E:8B:CE:61:99:F2:39
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/j9xu9FXGIi9UEiHNap6LzmGZ8jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/22
195.13.61.0-195.13.63.255
Signature Algorithm: sha256WithRSAEncryption
8d:6b:20:eb:34:4e:29:0a:1d:b3:bf:f3:f9:de:c7:06:c0:7f:
0d:9b:d2:1d:5e:eb:9d:47:c7:4c:66:48:c7:08:5a:81:df:11:
68:3e:4b:2a:85:8d:f4:ce:0e:7e:b6:22:d7:9e:aa:56:5d:6b:
44:ff:eb:99:1e:34:95:36:e3:66:05:dc:6e:2c:e8:1d:c0:ec:
02:66:29:57:16:73:0a:d0:df:fe:22:87:d9:c1:c7:c3:5a:f3:
de:25:06:f3:c7:58:bc:dc:02:70:f0:f2:70:b9:52:d3:b5:56:
30:27:e3:c6:29:4b:75:4d:d8:11:1c:3b:c2:9f:aa:5f:ab:25:
f4:f5:14:0f:14:8e:7d:fd:22:82:13:b4:d5:eb:06:68:d3:1b:
38:80:bc:67:8a:58:9c:5d:18:33:11:17:15:d3:fc:80:f2:b8:
eb:b6:42:85:96:c1:a1:c4:56:e1:dc:59:ff:3d:55:5e:45:24:
f9:40:4c:54:5f:ba:45:23:94:79:c3:af:42:52:79:38:c6:e3:
1a:dd:ee:2f:3a:ca:a9:b0:0a:4a:b8:f0:25:b2:07:1a:0a:72:
78:0f:5c:bb:65:41:8e:c3:d9:33:43:7f:2c:7f:cb:2b:dc:07:
a1:23:40:8f:92:48:96:b3:f4:86:13:e1:8c:14:be:e0:32:82:
80:b3:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org