Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/jUiXXE6fXPcA_2v2Cc1PlYImj3E.roa
File: jUiXXE6fXPcA_2v2Cc1PlYImj3E.roa (raw, json)
Hash identifier: vJ29REL0gy2MEAHWhBkk+zvAl+28xRyJlZMC4pVXbTA=
Subject key identifier: 8D:48:97:5C:4E:9F:5C:F7:00:FF:6B:F6:09:CD:4F:95:82:26:8F:71
Certificate issuer: /CN=8a985599b23d425d267c5a2e756609f395b69236
Certificate serial: 0183831CDAA58FF34E03524F754579E289B3
Authority key identifier: 8A:98:55:99:B2:3D:42:5D:26:7C:5A:2E:75:66:09:F3:95:B6:92:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iphVmbI9Ql0mfFoudWYJ85W2kjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/jUiXXE6fXPcA_2v2Cc1PlYImj3E.roa
Signing time: Wed 28 Sep 2022 08:00:49 +0000
ROA not before: Wed 28 Sep 2022 08:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56798
IP address blocks: 45.86.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:1c:da:a5:8f:f3:4e:03:52:4f:75:45:79:e2:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a985599b23d425d267c5a2e756609f395b69236
Validity
Not Before: Sep 28 08:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d48975c4e9f5cf700ff6bf609cd4f9582268f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:31:be:b7:13:9c:fc:e1:4c:e2:f6:dc:15:
76:ce:6b:b6:2f:be:e5:c7:a1:b9:8e:94:e5:f9:91:
f8:c1:e9:be:d0:9e:ad:f2:90:af:c0:27:33:53:8b:
75:97:16:2f:a0:76:05:8e:48:07:da:17:38:48:e3:
aa:6e:da:30:76:03:85:36:4d:2c:62:b9:56:ee:a7:
91:21:a2:10:68:f3:23:7c:5f:09:f8:27:07:c2:e3:
5d:c0:70:bf:c0:ea:b1:43:33:cb:f1:d1:51:16:5d:
bc:4f:4a:8f:99:2a:ee:7c:e8:69:c1:25:be:a7:2e:
b2:ec:06:12:ee:97:fa:3c:c8:f7:ca:a8:69:9d:cb:
49:db:ad:54:0a:5c:c4:a7:94:11:25:ef:9f:91:a3:
b7:71:c4:e7:bc:de:fe:45:9a:ad:16:91:5b:72:51:
d7:02:ef:84:5b:b4:e2:e8:d4:e8:de:2d:40:2f:2d:
05:a3:3c:49:d4:e0:01:6b:70:0e:86:76:fc:e7:71:
45:77:19:a9:6c:cc:8f:24:46:88:d3:20:f3:7b:42:
f1:44:ad:c3:9d:51:ac:54:7e:fc:29:43:9f:2b:a4:
b2:cf:97:fc:ff:3d:2d:b7:4c:e0:b8:f4:41:b5:42:
c4:e5:cc:45:75:08:0d:c0:74:df:53:0e:fe:1a:78:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:97:5C:4E:9F:5C:F7:00:FF:6B:F6:09:CD:4F:95:82:26:8F:71
X509v3 Authority Key Identifier:
keyid:8A:98:55:99:B2:3D:42:5D:26:7C:5A:2E:75:66:09:F3:95:B6:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iphVmbI9Ql0mfFoudWYJ85W2kjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/jUiXXE6fXPcA_2v2Cc1PlYImj3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/66f9a5-0a4f-4d97-8bd1-226bece03918/1/iphVmbI9Ql0mfFoudWYJ85W2kjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b3:e5:d1:2c:25:bf:46:a6:5f:ef:c3:d3:f7:6b:c5:8f:4a:
ab:21:80:c7:e1:7e:76:9a:02:2b:32:4c:b1:89:95:0e:3c:88:
13:49:f8:25:bc:1e:37:68:b2:3c:f3:4d:6e:fc:8e:da:ae:5e:
a0:df:78:6a:f3:b4:bd:60:ef:10:f3:85:bb:71:72:b1:a3:6f:
fd:f4:77:75:a3:81:30:a5:d1:4f:3c:91:da:41:3c:a0:ea:c3:
ca:32:23:2c:9a:f3:53:ad:6f:ff:5e:57:4f:78:9e:ec:ba:e6:
b9:1d:25:d2:fc:a7:fb:a9:0d:48:bd:7d:5e:d9:0e:13:cb:51:
98:da:ff:d6:ab:11:90:a6:34:a4:86:b6:25:bb:71:06:d7:27:
fe:51:d9:be:54:ea:b2:e2:32:f9:fd:7f:d8:c6:7e:03:49:84:
be:0f:70:77:4c:4d:da:44:ec:11:51:e4:5d:3a:0e:19:c3:69:
d8:d6:be:11:a9:09:11:35:c3:34:ea:7f:6c:72:cc:24:4f:d7:
17:68:63:ba:e0:ec:f8:1f:89:67:70:cf:f0:1a:de:2b:86:a4:
21:33:1f:08:84:a5:61:db:90:45:c8:2d:c7:3c:b2:b3:26:02:
56:9c:a9:f9:98:2d:8d:d2:72:b0:e3:62:93:84:7c:79:0d:f1:
b2:fb:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org