Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/jj1sJ8kVMAPLGNEZ_rRoi1QO48g.roa
File: jj1sJ8kVMAPLGNEZ_rRoi1QO48g.roa (raw, json)
Hash identifier: 4nuftLueCAYCpieWK7LtJOlyX15O0RXrcDbPwNmOzw8=
Subject key identifier: 8E:3D:6C:27:C9:15:30:03:CB:18:D1:19:FE:B4:68:8B:54:0E:E3:C8
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 039249C1
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/jj1sJ8kVMAPLGNEZ_rRoi1QO48g.roa
Signing time: Sat 01 Jan 2022 02:01:43 +0000
ROA not before: Sat 01 Jan 2022 02:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44030
IP address blocks: 176.99.64.0/19 maxlen: 19
195.2.232.0/23 maxlen: 23
2001:67c:2084::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59918785 (0x39249c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: Jan 1 02:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3d6c27c9153003cb18d119feb4688b540ee3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:c3:65:e3:10:4e:b1:9a:53:59:a7:ff:6c:
39:3e:e4:f3:6f:ff:ca:29:01:c0:93:91:3a:8e:68:
82:3c:b3:70:3c:46:3e:54:20:2a:49:8c:97:d2:43:
2a:4b:21:b7:e6:55:8a:7e:39:0e:59:ac:27:e8:6a:
63:a1:1c:00:c9:65:30:50:4e:86:1c:30:be:32:6e:
d0:9e:85:7a:b5:d6:27:ca:4c:df:b7:86:4d:5d:04:
c8:61:32:e3:9c:7e:21:05:d5:e6:a4:5d:08:8c:7e:
cc:d2:b2:28:12:2e:1d:fd:20:b1:e3:00:c8:dd:01:
01:2a:96:31:04:45:d1:4a:a1:9e:2f:43:1a:e0:c0:
7a:c6:90:25:c9:0d:0a:a6:4c:ce:32:aa:c6:41:80:
fb:26:f4:fc:4e:e5:3a:fb:c8:51:24:44:e3:cb:34:
11:a6:a6:6b:2e:b1:29:95:47:5c:c7:c2:1f:1d:cc:
42:c1:11:bb:de:65:c4:7b:af:ae:84:7c:6c:bd:36:
3d:9c:58:7c:74:be:a5:7d:7e:46:d5:24:19:1b:bd:
f8:f0:5a:3e:46:70:1f:59:a1:f2:9a:60:b9:ce:cf:
d0:5c:d0:30:aa:bf:98:87:75:b6:12:76:17:57:3f:
ca:39:8b:ea:ac:a5:6a:6b:87:83:92:43:cb:f5:b7:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:6C:27:C9:15:30:03:CB:18:D1:19:FE:B4:68:8B:54:0E:E3:C8
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/jj1sJ8kVMAPLGNEZ_rRoi1QO48g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.99.64.0/19
195.2.232.0/23
IPv6:
2001:67c:2084::/48
Signature Algorithm: sha256WithRSAEncryption
1a:eb:30:fa:0f:18:4d:a2:bc:51:17:8a:2d:e7:d2:61:fe:66:
65:79:22:6f:a2:76:23:6c:b1:f3:a0:a1:3b:c8:1f:61:c3:d8:
8e:01:c4:e3:2e:62:a6:82:36:41:8a:b4:5b:58:d9:be:00:49:
11:e1:be:5b:be:e5:60:4c:65:b5:41:06:3b:e6:5d:12:6b:35:
f5:20:d9:81:fc:38:9e:e3:ae:00:fa:10:2b:92:bf:85:8f:68:
7c:6e:fd:c2:22:2f:14:a8:0b:6d:46:7a:30:7b:f3:a2:97:66:
cb:0e:ea:fb:eb:6d:0d:12:7d:50:31:2a:3a:ab:bd:9e:27:a7:
33:27:b4:97:f4:e4:ec:6e:4e:79:90:02:20:70:58:92:52:7d:
82:d3:56:50:01:01:6d:d1:77:bc:bd:2b:e5:57:56:dc:45:38:
5b:52:e7:6f:d2:3d:dd:75:c2:1d:7f:59:bb:61:a9:dc:4b:4a:
b5:0a:42:c0:fe:b7:50:f6:05:6a:4a:5c:84:f5:ed:40:6e:b0:
f5:5d:78:d6:db:36:38:be:af:96:d5:12:ac:84:ae:05:61:26:
38:63:92:53:96:ae:a1:1e:17:da:8e:e0:0a:f9:17:56:7b:d3:
c0:ca:d2:6b:0e:e1:cd:b5:d5:99:9b:2a:c7:d3:2d:68:5e:97:
c2:a8:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org