Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/JudeG-bhNnjjadkM4Kg-2skoBfQ.roa
File: JudeG-bhNnjjadkM4Kg-2skoBfQ.roa (raw, json)
Hash identifier: Vf+MH5TZdhGWxxtl+lBoj61O/C7gKkgSbTKGRtRDY3E=
Subject key identifier: 26:E7:5E:1B:E6:E1:36:78:E3:69:D9:0C:E0:A8:3E:DA:C9:28:05:F4
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A877F3B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/JudeG-bhNnjjadkM4Kg-2skoBfQ.roa
Signing time: Sat 01 Jan 2022 04:52:07 +0000
ROA not before: Sat 01 Jan 2022 04:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200539
IP address blocks: 195.136.52.0/22 maxlen: 22
195.136.56.0/21 maxlen: 21
195.136.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981958459 (0x3a877f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26e75e1be6e13678e369d90ce0a83edac92805f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:99:4b:75:b6:74:8f:57:67:ef:71:ed:c7:
85:77:f5:cb:a4:1a:43:c7:ec:45:b4:fb:7d:a7:2d:
24:9e:99:d6:97:d0:5e:8d:ff:75:bf:1b:68:ef:15:
b1:84:4a:4b:c8:d6:ea:d7:52:5e:86:c5:5d:16:86:
a1:d9:d3:10:02:32:8b:15:52:89:c9:bc:5b:cc:1c:
d5:76:9f:8b:52:b3:0c:ba:73:18:cd:97:77:e3:ba:
e8:36:12:4b:0e:b9:da:53:e7:02:91:b6:aa:4c:28:
50:f4:bb:ce:4b:ec:6b:76:20:dc:d0:d9:0b:de:b4:
c1:93:bb:c4:6d:88:91:ae:04:2f:8e:87:db:75:e7:
47:1a:cf:f3:9d:fb:95:d1:8d:59:f0:34:cf:9f:05:
a1:e7:17:b0:8c:5b:27:cd:02:05:fa:c3:64:c8:a2:
c2:75:bc:66:69:75:a2:8b:a9:aa:08:f4:f4:e1:56:
59:20:bd:94:c1:56:5e:fa:32:c8:d1:4b:0e:3a:5a:
a5:8b:92:72:af:75:98:ae:05:ee:f2:43:f5:c6:56:
e8:53:a6:28:99:e1:7e:fe:72:99:d1:74:c1:23:4c:
d9:9e:86:f7:2e:15:84:49:63:3f:70:ba:61:d1:c3:
94:a3:c7:f3:9d:09:1a:8c:c0:bd:9e:76:d2:e5:05:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E7:5E:1B:E6:E1:36:78:E3:69:D9:0C:E0:A8:3E:DA:C9:28:05:F4
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/JudeG-bhNnjjadkM4Kg-2skoBfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.52.0-195.136.63.255
195.136.100.0/22
Signature Algorithm: sha256WithRSAEncryption
95:66:79:70:95:f2:47:59:ac:d5:3b:c2:11:86:62:0b:e2:d7:
4f:02:90:64:9e:41:2f:bc:4a:b1:05:21:4f:39:22:54:01:d8:
38:10:31:99:48:d7:69:87:f0:da:2d:5f:48:c4:db:ef:e0:ca:
a7:73:49:5a:86:81:04:db:89:06:9d:34:c0:97:a5:d6:7a:82:
6c:c5:2e:8b:43:16:89:a9:4f:d4:91:bf:13:a2:f2:d0:c6:87:
c7:f3:5b:10:2f:2f:c9:b5:ad:86:0b:b9:d0:9c:ab:c7:33:85:
32:a4:12:9e:fc:a3:56:2f:1c:42:90:77:12:bd:a3:2d:e7:8e:
78:89:85:64:97:a7:ac:71:7e:ab:0f:02:6a:c4:08:76:9a:44:
ca:35:c9:bb:d5:54:66:c4:16:46:90:19:f1:9d:4d:9f:50:50:
a5:05:d2:05:1f:3e:68:37:d4:33:cb:f7:bb:9a:0b:0d:4d:48:
de:39:49:7d:4e:6a:61:f3:a6:86:e1:6d:1f:f5:72:d8:73:98:
0c:3b:c3:62:22:da:27:39:aa:9b:b0:46:63:01:d9:20:36:69:
4a:2e:e3:93:97:d5:03:12:df:3d:d6:7a:f3:13:66:73:b9:62:
b3:f6:d7:c2:d5:22:1f:2b:63:3c:70:39:60:5d:29:9e:d3:9c:
9f:bc:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org