Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/JpkR1s24iEzDfmBUx9zN29-RpY4.roa
File: JpkR1s24iEzDfmBUx9zN29-RpY4.roa (raw, json)
Hash identifier: kpvYAUuoOiGAOVq3tM0oUgT2hi8cxKEUsBXfnArX1BE=
Subject key identifier: 26:99:11:D6:CD:B8:88:4C:C3:7E:60:54:C7:DC:CD:DB:DF:91:A5:8E
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 17F00881
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/JpkR1s24iEzDfmBUx9zN29-RpY4.roa
Signing time: Sat 01 Jan 2022 10:58:23 +0000
ROA not before: Sat 01 Jan 2022 10:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12570
IP address blocks: 193.17.248.0/22 maxlen: 22
195.78.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401606785 (0x17f00881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jan 1 10:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=269911d6cdb8884cc37e6054c7dccddbdf91a58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:3f:31:f0:3f:6d:29:38:55:d3:c9:71:bf:
13:53:7e:08:c9:1b:47:73:60:54:d1:57:b4:25:11:
b0:ef:be:75:21:4e:a8:4d:b2:17:8a:ea:8a:6c:b9:
00:ec:7c:e1:c0:31:36:27:89:2c:7e:0b:f1:54:1a:
4d:f0:02:81:3c:f7:81:d9:48:76:39:b0:c8:b1:ad:
b4:51:c1:62:21:8f:83:03:7c:3c:04:70:00:97:c8:
08:ae:f1:42:e9:78:46:a6:2b:ef:ec:46:1e:28:dd:
8a:39:b3:70:89:53:26:88:83:5e:9c:f0:7b:79:ae:
d3:f7:14:c8:92:ed:37:c8:fd:64:90:ed:a7:9b:b5:
44:a6:ab:b8:e6:0c:71:81:3b:68:30:a6:d8:f5:46:
47:f4:5f:73:5c:32:ab:e7:34:a7:e3:dc:52:9d:e4:
19:4e:2e:b0:de:2b:6d:3b:28:b2:03:fd:c2:4b:e3:
5e:5b:0b:67:26:9a:5b:eb:d7:79:58:33:9a:84:08:
1b:83:f9:61:c1:31:6b:eb:64:06:c5:ca:cf:d4:f4:
eb:2f:2b:3a:26:47:d1:45:40:10:23:9d:f2:56:c7:
1f:e4:09:05:ab:1a:6f:08:5f:16:a4:78:b7:7a:40:
20:37:60:af:fd:ed:2f:86:3e:35:65:a3:23:f9:5d:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:11:D6:CD:B8:88:4C:C3:7E:60:54:C7:DC:CD:DB:DF:91:A5:8E
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/JpkR1s24iEzDfmBUx9zN29-RpY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.248.0/22
195.78.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:c9:23:81:65:26:22:38:e7:88:6d:53:39:24:68:f4:69:01:
c2:b7:b0:b8:81:7b:b3:c6:1f:71:ac:42:67:32:74:cd:42:cb:
b3:cc:be:19:40:57:59:e1:fc:84:eb:7e:1a:aa:7e:4f:2f:71:
01:74:44:c1:55:60:c9:c7:90:c7:a5:d1:8c:05:a5:38:e6:0f:
7d:b3:7b:d6:74:dc:9d:20:03:a3:1d:d6:63:d7:9e:d4:26:af:
45:06:00:bc:ee:bb:28:e6:04:80:b4:be:d6:44:8b:e5:7b:3c:
5a:0f:87:e1:7e:33:62:96:b0:70:c0:f2:78:9b:4a:c7:53:01:
1d:29:2c:87:11:47:60:5d:42:e9:9e:72:e4:80:3a:7c:cf:e5:
63:87:e8:0e:f3:6f:b8:b8:ce:c6:8b:ab:4b:19:1b:5b:75:5e:
b8:fa:af:c9:c6:32:1b:af:54:f8:12:28:a8:cd:c0:34:2d:ee:
1d:59:f1:fa:60:7a:40:43:cb:f6:30:f0:c7:b5:dd:4b:ce:13:
26:88:8b:ed:c0:40:f3:6a:93:f9:93:96:72:4e:39:e3:86:2c:
34:63:8b:0d:89:bc:a9:32:06:fa:cb:e4:81:67:ca:88:ac:eb:
08:2a:50:c9:5f:a7:37:8b:5d:30:4f:b2:da:36:d4:4f:b6:50:
19:9c:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:29 2024 by rpki-client on console-fra.rpki-client.org