Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/JCzIKEIiMeW_HTkbdg3-Fba38E8.roa
File: JCzIKEIiMeW_HTkbdg3-Fba38E8.roa (raw, json)
Hash identifier: DRK+JjtfOnGEAjBUOI8p1flBQlRxNYMWnGkqZ9vFJ14=
Subject key identifier: 24:2C:C8:28:42:22:31:E5:BF:1D:39:1B:76:0D:FE:15:B6:B7:F0:4F
Certificate issuer: /CN=1da3393991409489ef9fd7460a75a370cae9dca7
Certificate serial: AEFCF1
Authority key identifier: 1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/JCzIKEIiMeW_HTkbdg3-Fba38E8.roa
Signing time: Sun 30 Jan 2022 13:26:36 +0000
ROA not before: Sun 30 Jan 2022 13:26:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.45.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11468017 (0xaefcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da3393991409489ef9fd7460a75a370cae9dca7
Validity
Not Before: Jan 30 13:26:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242cc828422231e5bf1d391b760dfe15b6b7f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:9f:43:37:9c:b9:8b:d1:b5:a7:da:5d:df:
b1:5a:84:75:de:11:df:a1:e3:34:b5:fd:6a:29:68:
b1:3d:c9:12:2a:2d:44:6e:17:37:7c:66:72:fa:62:
32:c3:f1:11:44:6a:c5:70:50:cf:91:f6:59:ce:8e:
98:79:a7:0d:43:40:cb:62:fc:46:f0:9a:f5:62:43:
42:af:c4:b0:c7:35:6b:2b:3c:53:44:00:12:08:97:
4d:84:7a:b4:7c:ea:ed:13:8b:c8:6f:34:56:e3:47:
11:fe:aa:75:b3:34:58:d0:05:60:cd:7e:92:d5:8c:
e2:77:d0:d6:d8:11:af:c2:a9:ae:ec:e7:bc:2a:b3:
8b:cb:f0:16:d6:41:a5:f0:a0:2a:26:53:04:3a:1c:
10:f5:35:32:c1:9e:38:ae:25:f7:fc:5d:9c:76:d2:
00:df:f3:af:16:89:16:91:9c:11:0e:a4:66:18:e9:
63:8e:76:44:03:08:a9:64:ad:b1:72:71:c8:a5:2a:
5c:d4:40:f1:e7:10:7a:52:e8:36:cf:09:c5:11:4b:
49:22:14:85:0a:ce:87:b1:68:47:98:6f:60:fc:3e:
41:7e:7e:f1:e8:e3:99:e4:da:b3:8f:35:01:72:2e:
d7:76:d3:30:86:62:0a:60:04:30:6a:d2:7d:e9:0e:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:C8:28:42:22:31:E5:BF:1D:39:1B:76:0D:FE:15:B6:B7:F0:4F
X509v3 Authority Key Identifier:
keyid:1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/JCzIKEIiMeW_HTkbdg3-Fba38E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.100.0/24
Signature Algorithm: sha256WithRSAEncryption
07:92:84:64:a0:f1:c6:b3:46:66:a2:b8:36:e1:cf:5e:41:94:
23:5d:e7:8f:95:43:f0:67:85:88:ac:3c:f6:a4:50:09:04:bc:
e4:53:94:3e:44:5d:c9:08:72:71:dc:f3:a9:b1:79:4a:d9:dc:
5c:54:6d:14:f6:9a:38:33:55:a0:1d:8b:49:8d:3a:cc:66:cd:
56:21:ef:33:30:e7:df:47:67:99:58:d3:80:6c:95:22:60:5e:
a0:8e:2c:83:1c:19:7c:a5:67:5b:4c:5a:1d:75:ba:cd:5d:07:
23:35:92:36:50:02:a1:94:55:f0:91:51:77:e0:3f:5e:5a:56:
ca:f3:c8:8c:b0:d2:05:c3:5a:60:c3:ba:54:00:43:ff:40:44:
9d:a1:e1:d8:88:b1:5e:1f:d7:a1:74:d7:43:8d:18:79:40:16:
0a:e9:7a:a5:ea:35:ce:3d:5d:4e:b6:1a:a6:8d:cf:82:00:89:
24:40:6f:7b:8c:45:e7:a0:a2:84:77:7f:12:91:c3:ea:7b:6b:
24:3f:45:79:ea:ca:6e:59:4b:c3:0c:0f:71:99:49:11:3b:e2:
a2:f4:97:cc:a9:49:17:d8:f5:53:38:5d:8a:fd:ee:b6:b6:1c:
ca:f3:b3:be:ca:7a:be:27:92:4a:2d:26:ee:76:4d:8f:13:60:
e4:46:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org