Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/jmijFyErJ3Il2VHgK664eEqN-Us.roa
File: jmijFyErJ3Il2VHgK664eEqN-Us.roa (raw, json)
Hash identifier: dtSZozrvhHdk4VpBvMes29IFZ72tTaMBOW1FGfcnUXg=
Subject key identifier: 8E:68:A3:17:21:2B:27:72:25:D9:51:E0:2B:AE:B8:78:4A:8D:F9:4B
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 0183221CE7F3C177DD6897332392FDDC40F2
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/jmijFyErJ3Il2VHgK664eEqN-Us.roa
Signing time: Fri 09 Sep 2022 11:57:43 +0000
ROA not before: Fri 09 Sep 2022 11:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49332
IP address blocks: 188.190.32.0/19 maxlen: 20
5.57.64.0/21 maxlen: 21
176.32.0.0/21 maxlen: 22
86.111.64.0/20 maxlen: 21
91.212.203.0/24 maxlen: 24
86.111.84.0/23 maxlen: 24
80.243.144.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:1c:e7:f3:c1:77:dd:68:97:33:23:92:fd:dc:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 9 11:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e68a317212b277225d951e02baeb8784a8df94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:e3:ba:69:e3:84:dd:7c:d3:19:12:eb:e6:
4a:11:3d:50:99:e7:9a:dd:ca:86:a1:6d:36:cc:43:
a7:0e:05:29:cf:9c:73:ca:2e:db:6a:15:ff:c8:51:
6d:26:8f:bc:0c:00:84:91:03:af:e6:7e:d7:96:2c:
1e:1c:95:35:e6:66:84:ef:18:4e:d1:29:2a:b4:2a:
60:1b:d3:db:73:4b:04:ca:84:b4:ca:e5:74:df:53:
f8:d8:cd:71:f3:70:bd:58:b4:e0:cc:7d:b6:40:d8:
b5:e3:1f:95:40:fc:61:58:80:3e:f4:3c:45:fb:1f:
bc:51:1b:22:38:0d:d9:9b:e8:59:60:a3:cc:eb:6c:
5a:85:5a:84:81:fc:b6:92:25:70:dd:9e:d6:89:87:
ef:c4:62:4b:f1:c4:fd:ec:ed:d3:9a:58:17:b9:a1:
b8:c0:5c:57:25:40:f4:33:27:e1:01:3c:27:be:84:
be:97:fc:8e:7a:32:dd:c7:e8:f9:8a:fc:c3:f8:0e:
40:5f:64:12:d3:f2:e4:23:d8:f2:3d:d9:d9:4b:2e:
bf:5e:79:5b:09:53:e3:fe:68:7f:d2:4e:2e:2b:93:
ed:56:c0:f2:eb:a1:61:8d:9a:ff:74:86:58:46:c0:
32:21:16:2b:4e:a4:e7:68:98:d8:fd:64:ca:7f:c3:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:A3:17:21:2B:27:72:25:D9:51:E0:2B:AE:B8:78:4A:8D:F9:4B
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/jmijFyErJ3Il2VHgK664eEqN-Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.64.0/21
80.243.144.0/20
86.111.64.0/20
86.111.84.0/23
91.212.203.0/24
176.32.0.0/21
188.190.32.0/19
Signature Algorithm: sha256WithRSAEncryption
23:9d:ba:9b:11:b3:11:42:35:f2:12:d3:e3:85:90:aa:8a:01:
60:2f:70:6a:c2:af:be:43:8b:ac:ac:54:09:2d:15:72:bf:46:
bc:8e:57:9a:3c:56:bc:ec:31:84:51:df:3d:2d:53:a5:89:9b:
83:79:f0:49:2c:f5:cc:33:5f:82:c1:08:97:3e:63:a8:c9:11:
aa:18:d7:37:82:46:59:96:86:c9:7f:00:c0:f1:35:83:75:22:
a1:51:94:b3:e2:7d:60:9f:33:da:d3:78:86:5c:40:01:15:98:
a6:8c:d4:44:4a:db:3a:d6:36:f6:eb:f7:25:9c:30:4a:bd:62:
07:d7:f7:02:5d:f1:7d:dc:c5:30:ad:f6:1c:22:02:7d:10:c0:
8d:74:b9:1b:7e:c5:d8:86:f4:60:3f:35:4d:4e:28:8e:53:e6:
b6:16:64:43:0e:dc:18:34:92:ac:d4:7b:1d:2b:58:10:51:86:
dd:4f:53:eb:d3:7b:0a:40:a2:17:18:a4:bc:3f:21:7c:0b:54:
3a:70:6b:10:c2:22:8f:5d:3f:33:55:e0:1a:63:c9:14:0a:f5:
da:3e:5b:df:19:4b:e1:ac:a7:96:9e:3f:e4:5b:3e:52:5f:d1:
86:39:14:4e:32:c4:37:fd:a6:d7:27:be:7e:f9:25:53:05:65:
e9:bf:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org