Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/Jzc0kIX-wyYr_L0e1_mv3ZlFvzo.roa
File: Jzc0kIX-wyYr_L0e1_mv3ZlFvzo.roa (raw, json)
Hash identifier: 2q64KCXX4yB4bvyUyYcPZ/ujio+AUAabyeCDDb7vAS0=
Subject key identifier: 27:37:34:90:85:FE:C3:26:2B:FC:BD:1E:D7:F9:AF:DD:99:45:BF:3A
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 16C0B491
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/Jzc0kIX-wyYr_L0e1_mv3ZlFvzo.roa
Signing time: Sat 01 Jan 2022 10:54:38 +0000
ROA not before: Sat 01 Jan 2022 10:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44018
IP address blocks: 195.8.122.0/23 maxlen: 24
195.8.121.0/24 maxlen: 24
2001:67c:2590::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381727889 (0x16c0b491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Jan 1 10:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2737349085fec3262bfcbd1ed7f9afdd9945bf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:ab:6e:86:49:ad:43:6a:09:b4:15:67:54:
5c:9d:e5:68:90:32:a7:78:61:0a:6e:00:35:47:fc:
b2:01:01:df:c5:5f:25:8a:9b:ab:a2:f3:59:b0:85:
6d:b1:b6:b3:02:19:90:94:a9:1d:81:b4:1f:13:0e:
3d:23:8a:a2:28:c3:8c:2a:c6:45:e0:bf:65:d5:e9:
8e:fc:9e:6a:0b:83:de:1a:26:7f:ea:88:56:2b:2a:
5c:de:5d:f9:1d:1a:b6:06:a1:1c:4f:9f:0f:ec:d3:
e6:f5:fb:60:42:0e:b3:6c:07:9a:2f:d8:f6:dc:7f:
4c:f7:46:1e:44:c7:4b:27:a1:65:2d:b6:f2:d8:31:
cf:90:ee:7e:dc:61:1c:1b:02:41:a9:ed:bf:8d:3c:
01:96:9f:08:df:e5:9f:3b:68:78:d5:d8:0c:ff:d4:
41:7f:33:17:02:fd:e9:dd:22:7b:a0:2a:32:fe:da:
19:9a:a6:67:0b:35:38:2b:6a:5f:f5:fc:eb:b0:6f:
e1:63:9d:3b:4c:05:a7:a1:13:82:78:9c:43:0b:f8:
a4:11:e3:19:c0:8c:37:aa:74:b0:94:1f:70:45:03:
da:19:ec:c5:a5:d4:6d:d0:cd:c3:a1:13:34:16:ce:
96:f0:68:41:6a:0b:41:0d:18:f9:41:67:00:89:f0:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:34:90:85:FE:C3:26:2B:FC:BD:1E:D7:F9:AF:DD:99:45:BF:3A
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/Jzc0kIX-wyYr_L0e1_mv3ZlFvzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.121.0-195.8.123.255
IPv6:
2001:67c:2590::/48
Signature Algorithm: sha256WithRSAEncryption
2b:16:3c:5d:23:39:5e:31:a3:a4:b1:55:75:12:ea:58:c6:40:
8e:3d:67:ec:66:0e:35:20:05:4e:80:de:5b:40:f1:4e:a9:c3:
db:fa:d4:9b:b2:c2:e6:1d:7a:95:03:10:96:34:d5:55:44:c6:
3b:37:9c:3d:00:f3:50:ca:29:7d:50:15:e6:0f:5e:d9:f0:d3:
a3:79:d0:28:28:50:43:42:47:f6:ae:6d:9a:ca:55:4f:39:e3:
c3:19:be:2c:b0:af:06:37:a4:df:69:bd:ee:da:3d:72:90:d3:
1e:29:9a:b4:85:94:71:39:9b:9a:61:77:d8:17:e5:64:31:99:
5b:2e:9d:92:d0:6d:3e:7a:72:88:c2:4f:36:4b:27:98:9e:50:
ae:36:ef:20:bb:16:e4:00:86:cd:59:f6:00:f4:a2:98:7e:3d:
f3:c6:16:0e:d1:a4:53:58:6b:e2:d8:36:2e:5e:87:91:45:a7:
90:c9:3e:2c:17:14:af:d5:51:77:7e:b8:8f:44:5d:f6:7f:1e:
28:a0:4c:4f:a1:c9:9b:3f:83:f2:9d:74:c6:53:e1:bf:c2:1a:
5d:11:b7:a0:88:90:2a:38:09:d0:9c:88:f5:c4:1b:07:1e:85:
dc:5f:80:02:94:97:78:d6:15:a6:fd:f9:82:1f:2f:1a:87:cf:
54:9e:50:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:03 2023 by rpki-client on console-fra.rpki-client.org