Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa
File: jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa (raw, json)
Hash identifier: FkyyMr65AIH8qKUfqOlCzmhpmm7m5wnRLUf/gUj/isw=
Subject key identifier: 8C:A2:C6:25:75:09:B7:F9:CB:90:B0:DB:FD:40:3A:B7:04:AF:FD:9A
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 17D8467D
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa
Signing time: Thu 24 Feb 2022 19:00:45 +0000
ROA not before: Thu 24 Feb 2022 19:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 193.57.164.0/23 maxlen: 23
193.57.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400049789 (0x17d8467d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Feb 24 19:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ca2c6257509b7f9cb90b0dbfd403ab704affd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:40:47:65:c1:20:9b:03:d9:69:26:ad:7a:
80:e8:17:1a:ed:b6:e4:7c:29:2b:fc:64:fb:a0:bf:
84:7d:1f:d6:59:72:ad:66:cb:ce:28:d8:7d:9e:3b:
fa:d3:fb:a5:c2:86:e4:70:47:89:fb:f6:47:43:f5:
30:4a:64:42:c4:ef:3c:3a:75:a3:1d:7c:d5:cf:98:
24:a3:3c:2b:db:e1:be:b6:b0:e3:61:a1:bc:f6:b1:
61:c5:62:06:b4:a6:6b:74:e2:57:2c:91:28:b2:03:
00:0f:3a:d2:66:7b:4c:c4:d6:79:e7:2b:d6:41:77:
5a:4c:71:72:e6:44:a8:4e:66:1d:a2:b2:8b:90:a2:
0f:88:e7:5e:6c:ab:b5:d8:cc:7d:f7:54:ba:9e:6d:
19:d4:e7:34:02:35:0e:bf:73:d2:e4:fa:26:6b:c4:
ee:41:da:f8:7b:31:68:05:66:62:69:f5:31:85:2c:
77:1e:74:76:cd:28:01:8c:5d:76:d5:3e:72:d9:be:
15:e9:fa:50:1e:53:ae:6e:66:a0:01:ed:96:27:9d:
bb:79:20:b6:e0:d0:46:c6:ba:55:2c:78:d8:80:bb:
0a:28:e5:ed:2b:e3:de:3c:0d:e0:e0:20:35:22:65:
35:26:e7:60:6f:29:3a:0b:e9:86:f1:2a:22:57:93:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:C6:25:75:09:B7:F9:CB:90:B0:DB:FD:40:3A:B7:04:AF:FD:9A
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/jKLGJXUJt_nLkLDb_UA6twSv_Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.164.0/23
Signature Algorithm: sha256WithRSAEncryption
57:25:e5:6e:c7:4b:1b:9a:fe:98:a8:f6:03:87:ab:26:01:70:
72:c6:ae:50:af:e7:89:89:a0:55:43:77:34:27:aa:39:f3:67:
b5:85:cf:03:c2:90:6a:69:3e:9f:ef:f3:6c:a9:d4:6c:07:51:
a6:9f:3c:03:e7:b2:60:3c:ad:89:be:39:7e:b7:f1:e5:7d:32:
3b:46:e6:a3:60:36:68:06:09:6d:fc:4c:85:97:36:7b:28:02:
e6:70:a1:fe:08:35:2b:1c:4e:cf:a1:75:20:4c:52:dd:04:e8:
9a:98:f8:db:b3:5a:cb:90:2f:3a:7d:f4:2b:ac:f0:c8:2c:25:
67:a6:16:2a:4c:67:36:6f:3a:8c:3b:10:97:2c:6c:0c:c8:d8:
42:a4:6c:03:e4:81:e1:54:70:1d:8e:02:a0:51:23:d2:cd:cd:
0a:22:55:3e:4c:19:40:76:f2:75:68:f9:48:d0:3a:e6:60:e1:
93:32:a3:64:4e:13:62:ed:d0:92:49:53:b2:b9:a3:ad:bd:ee:
74:28:c7:75:1c:9e:e5:aa:30:b2:0b:2e:2a:9a:0f:5d:74:f4:
94:73:44:cc:4c:dd:b2:92:6d:67:fc:82:27:1d:ab:f0:30:99:
41:90:54:35:2d:48:9a:4d:a4:70:e1:db:26:35:3e:9f:e0:60:
e3:0d:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org