Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/jnkYWBAXPywNrRyfY1StoY0tliI.roa
File: jnkYWBAXPywNrRyfY1StoY0tliI.roa (raw, json)
Hash identifier: /zuEnL8pwW/dRGGqjegzS78urHCWo30gDunnNRQQJok=
Subject key identifier: 8E:79:18:58:10:17:3F:2C:0D:AD:1C:9F:63:54:AD:A1:8D:2D:96:22
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 0183AED9CF6AB17B3E89EC1DA757BA41328B
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/jnkYWBAXPywNrRyfY1StoY0tliI.roa
Signing time: Thu 06 Oct 2022 19:50:53 +0000
ROA not before: Thu 06 Oct 2022 19:50:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62214
IP address blocks: 195.90.98.0/24 maxlen: 24
2a01:7d80:2400::/40 maxlen: 40
2a01:7d80:c000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:d9:cf:6a:b1:7b:3e:89:ec:1d:a7:57:ba:41:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Oct 6 19:50:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e79185810173f2c0dad1c9f6354ada18d2d9622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:56:fb:c4:79:6c:f4:ef:57:32:3a:9b:bd:
a2:99:38:37:00:64:43:b9:61:16:ae:15:59:3a:b3:
97:eb:0c:6b:52:80:f5:fd:bc:f1:82:2a:81:e8:2f:
a9:b0:ac:c7:ff:52:23:71:ce:d7:f9:c0:a7:08:34:
bd:a7:40:02:ba:19:8b:e6:4a:19:84:41:3e:93:40:
ae:5b:1b:76:f8:f2:21:f3:10:c3:5c:33:a6:e7:6f:
bb:e4:de:f1:1e:65:73:af:9e:80:1e:71:fe:9b:b7:
37:3a:8b:64:d3:f5:46:9c:b5:3d:8e:53:ae:d7:2a:
8b:0c:91:04:a0:37:48:cd:85:76:10:97:fd:fc:5d:
2d:96:7c:e9:6f:73:df:09:b3:fc:91:96:83:af:00:
8d:55:48:d8:2c:fd:a9:91:ae:cf:bb:0a:6c:89:b8:
72:3d:83:97:25:52:ce:e7:be:a0:ae:13:b8:26:88:
8f:c0:2a:c6:e1:ba:bb:6d:8a:46:bd:29:25:2b:05:
44:55:78:e6:8a:d7:7c:29:09:5a:6e:f2:35:21:b7:
7c:41:f7:86:a5:22:c4:b5:53:9d:a3:8e:e3:37:a4:
e8:5d:b8:c7:3c:9a:67:1b:3a:7e:eb:db:bd:f4:d8:
7f:61:b6:ca:5b:87:93:24:c2:9e:e1:74:ee:3c:cd:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:79:18:58:10:17:3F:2C:0D:AD:1C:9F:63:54:AD:A1:8D:2D:96:22
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/jnkYWBAXPywNrRyfY1StoY0tliI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/24
IPv6:
2a01:7d80:2400::/40
2a01:7d80:c000::/40
Signature Algorithm: sha256WithRSAEncryption
88:55:d2:5c:24:b4:3e:ac:5b:ba:e5:83:62:d4:dd:42:5f:4f:
3f:57:7e:49:2e:1d:8a:1b:b5:d7:eb:5c:2e:d9:fb:08:9e:5c:
df:cd:2c:13:47:aa:e3:cb:8d:46:a7:b0:53:b3:6e:d0:f7:eb:
ba:5b:f6:28:79:c1:b7:e2:b0:dc:26:1d:05:d1:74:2e:73:a9:
3d:9f:6d:45:c7:2c:b0:10:ee:87:11:50:0d:f4:a3:15:33:b8:
c5:25:6a:57:3b:cb:5b:75:ae:a2:70:42:55:01:9b:7b:3f:4a:
77:b8:23:ef:ce:46:5b:91:95:8e:12:11:bc:1c:5d:6d:28:7f:
1b:72:e1:e4:0b:d8:3e:50:9e:90:b5:8d:e5:c3:93:52:32:07:
6c:e0:2f:df:fa:4a:b5:15:27:42:eb:60:52:9c:f6:13:1e:dd:
d9:61:b3:99:0c:bf:40:2b:19:b7:c2:0a:be:7f:99:de:29:64:
f8:d5:31:64:1e:19:7d:8a:22:6b:2d:ea:91:4e:0b:a4:ad:7e:
1b:08:71:ad:da:5c:53:3b:8f:ca:48:8e:7a:dd:f0:9d:2a:fb:
9d:61:1a:56:b2:18:c0:af:9e:bf:d1:a8:7c:11:89:4e:d3:a4:
d8:4b:cd:08:6f:37:06:71:a8:8d:93:22:e8:05:f9:5f:9c:5d:
b2:d5:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:43 2024 by rpki-client on console-ams.rpki-client.org