Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/jokGIao9f1I8zchzS6V5XYH9sOQ.roa
File: jokGIao9f1I8zchzS6V5XYH9sOQ.roa (raw, json)
Hash identifier: wV/81rrc5/pokJWoaeWfeCf8tWQ9PONRmhaTi33G0y4=
Subject key identifier: 8E:89:06:21:AA:3D:7F:52:3C:CD:C8:73:4B:A5:79:5D:81:FD:B0:E4
Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial: 0552A0DE
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/jokGIao9f1I8zchzS6V5XYH9sOQ.roa
Signing time: Thu 09 Jun 2022 16:06:03 +0000
ROA not before: Thu 09 Jun 2022 16:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210028
IP address blocks: 194.12.56.0/24 maxlen: 24
194.12.57.0/24 maxlen: 24
194.12.58.0/24 maxlen: 24
194.12.59.0/24 maxlen: 24
194.12.60.0/24 maxlen: 24
185.89.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89301214 (0x552a0de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Validity
Not Before: Jun 9 16:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e890621aa3d7f523ccdc8734ba5795d81fdb0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:90:72:61:2f:ae:7e:d9:78:b8:30:70:f0:42:
b9:5f:66:58:4f:b5:d8:02:d4:f9:29:b7:e0:03:b8:
d8:cc:4f:f3:0e:83:ad:04:92:21:c8:33:01:a7:b4:
96:1e:6b:36:6f:c0:18:99:fc:d0:21:10:7e:a5:df:
d6:1c:07:66:22:d0:3c:98:70:bd:3e:48:34:41:2a:
4d:2a:b2:ec:ec:3f:ad:da:0f:8d:c4:2f:f3:c1:bf:
e2:96:f8:26:2a:f5:b7:cf:2a:2c:22:2d:af:dd:40:
26:eb:8e:64:c7:8b:fe:aa:b7:99:29:01:ad:0a:a9:
77:f9:cd:61:40:0c:59:08:4d:10:bc:8d:e2:da:37:
70:0c:64:e7:3c:cf:56:2e:4e:09:55:86:b9:5f:29:
18:69:9c:2f:af:36:ca:6b:fd:21:e7:54:6f:eb:d1:
70:73:98:19:44:6a:2b:70:94:18:94:b6:a7:01:c4:
80:57:10:2e:12:2a:c6:e5:de:93:0d:fc:ef:f3:f1:
82:2d:77:ca:b1:26:6b:f9:d1:8a:5f:30:cd:27:c4:
d8:16:58:39:06:e9:e4:de:c6:d2:c1:d1:43:bf:13:
17:97:9c:51:8e:9f:73:10:67:99:e6:93:05:b3:bb:
4e:f7:c2:89:0f:6c:76:b9:90:f7:46:ad:23:ba:06:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:06:21:AA:3D:7F:52:3C:CD:C8:73:4B:A5:79:5D:81:FD:B0:E4
X509v3 Authority Key Identifier:
keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/jokGIao9f1I8zchzS6V5XYH9sOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.99.0/24
194.12.56.0-194.12.60.255
Signature Algorithm: sha256WithRSAEncryption
9c:ea:80:fa:d5:81:b0:17:b8:f3:ec:b6:fe:26:09:d2:9c:d9:
16:4a:6f:8a:70:b3:5d:28:95:2b:42:5a:d1:b6:30:04:81:14:
c8:b6:41:01:ae:9c:97:35:74:de:26:97:de:3b:d2:50:9a:90:
40:af:84:50:c1:1f:73:3a:b8:30:42:69:71:5f:2a:b5:89:89:
3c:c6:c7:46:25:84:1c:73:4c:40:3b:be:96:02:08:fa:3b:80:
06:8b:ef:b9:3f:ef:03:29:4e:2f:18:b1:d4:24:76:df:14:cd:
59:b7:dd:8a:89:a5:8a:d0:78:7d:6d:6b:d6:18:cb:59:26:5d:
ba:2e:91:7b:71:06:52:12:88:30:e7:d1:e1:7d:87:da:58:85:
b8:58:26:d6:29:24:aa:1e:af:b8:a7:12:4f:29:71:fb:37:78:
f9:8c:ca:57:1f:aa:a9:64:d7:8a:de:74:f2:72:c5:80:d0:55:
c0:32:9a:d7:42:c3:e6:53:17:d7:2f:e5:61:46:e6:c2:1e:97:
3b:08:2d:9e:2c:2c:4c:ce:48:74:ae:93:d1:59:fb:8f:65:94:
0f:4c:1b:80:1d:ab:fa:76:b1:dc:da:62:21:68:8a:94:0d:ef:
84:b5:9a:05:d5:5a:73:ee:eb:94:c7:2c:06:50:54:ac:d6:6e:
ff:e2:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:30 2025 by rpki-client