Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/jP8AoBRnZ-v7PRqkp3BGlj5BbA8.roa
File: jP8AoBRnZ-v7PRqkp3BGlj5BbA8.roa (raw, json)
Hash identifier: wgWjGurm6RzUdN9rACuSdkjn1eWH9vtn/JeSn7qUG9Q=
Subject key identifier: 8C:FF:00:A0:14:67:67:EB:FB:3D:1A:A4:A7:70:46:96:3E:41:6C:0F
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 01840A4B4B3B48DBBA44992DBA24148EA4D7
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/jP8AoBRnZ-v7PRqkp3BGlj5BbA8.roa
Signing time: Mon 24 Oct 2022 14:00:17 +0000
ROA not before: Mon 24 Oct 2022 14:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203352
IP address blocks: 185.131.80.0/23 maxlen: 23
185.131.80.0/22 maxlen: 22
185.131.82.0/23 maxlen: 23
2a06:97c0::/29 maxlen: 29
2a06:97c4::/30 maxlen: 30
2a06:97c0::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:4b:4b:3b:48:db:ba:44:99:2d:ba:24:14:8e:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Oct 24 14:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cff00a0146767ebfb3d1aa4a77046963e416c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:56:c6:60:ca:c9:a2:35:c1:67:df:f1:5f:
23:b7:af:e7:f5:9c:17:29:df:08:b7:6d:19:0f:c7:
52:d4:f2:cf:3d:2a:ab:40:3d:03:93:65:9f:ef:67:
ff:81:03:85:2b:c1:41:c5:7a:8f:a2:e8:99:a5:18:
51:94:f9:33:7b:40:8c:50:11:42:43:b0:c9:29:be:
c1:19:80:42:d7:b9:9b:43:eb:bc:a8:28:fc:bf:b2:
5a:34:97:d5:a2:a9:f9:07:e5:2d:11:cb:27:29:1c:
b5:dc:93:be:4b:4d:6e:18:e6:6a:10:d6:cc:cd:a6:
de:f1:37:8d:e7:3b:1c:77:53:68:e6:08:e2:21:f1:
35:d1:59:e3:38:36:cf:5d:54:94:42:e4:59:14:5d:
46:0c:e5:bb:36:7a:29:78:f6:cf:1f:43:86:ed:78:
97:59:9d:ff:a2:c7:d2:3f:4f:3b:9d:31:48:95:4f:
eb:0c:1b:b9:83:5d:7f:34:cf:5f:5b:45:9f:27:93:
bf:cc:46:55:85:dc:73:6d:e9:6d:22:a9:bf:0b:45:
77:84:0e:6c:17:76:d9:23:ce:1d:a8:95:4c:7f:9a:
fe:de:ba:63:ac:97:18:e1:a2:6f:14:d4:6a:f9:f2:
69:c4:4d:63:73:b4:4a:09:5d:7d:57:ff:02:6d:21:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:00:A0:14:67:67:EB:FB:3D:1A:A4:A7:70:46:96:3E:41:6C:0F
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/jP8AoBRnZ-v7PRqkp3BGlj5BbA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.80.0/22
IPv6:
2a06:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:68:46:b6:58:50:91:23:dc:a8:05:fb:6c:23:93:e1:7f:d6:
19:b0:b0:dc:bf:df:37:d8:1b:ed:0f:82:f4:2e:2f:55:8a:b8:
4d:2e:36:73:0a:19:a3:10:a1:75:75:8f:1c:51:4b:ed:34:85:
80:86:be:b0:b3:78:86:c1:5b:f0:02:98:f0:50:55:d4:68:d3:
1d:e0:06:88:be:8a:c4:64:84:24:61:36:fb:4a:22:1c:7e:ee:
de:80:94:2a:da:21:1a:39:aa:9a:57:0b:ba:b2:60:9e:34:a1:
90:98:06:99:f8:75:80:4a:6b:9e:b2:19:e2:9c:66:07:89:b8:
0e:24:99:50:55:63:fc:68:61:02:b4:2f:27:a7:8d:67:39:d2:
b9:3b:90:ff:f1:0d:16:4b:b5:10:af:a6:a6:17:2d:05:f1:7d:
65:59:da:cc:94:45:17:2b:6f:42:a3:f4:16:ac:bc:83:33:9a:
6f:16:25:a2:2a:df:3f:67:e2:67:57:09:56:b9:ab:c6:78:37:
12:eb:79:63:cd:d4:b2:81:29:da:35:2c:41:c4:8f:3a:c4:6c:
c1:f0:37:81:bd:b1:c7:16:14:f0:4a:63:1b:98:a4:dc:55:37:
bd:95:18:88:55:30:e6:31:e4:43:99:3f:89:d8:78:da:5d:cd:
2d:65:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org