Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/CJ0BVZx24-GnFJkR0wvoL9AJcEY.roa
File: CJ0BVZx24-GnFJkR0wvoL9AJcEY.roa (raw, json)
Hash identifier: lIIOZCcdqz+0Yxz3dQE6qx8z2Pxbb7nbDXPhL+6GBS4=
Subject key identifier: 08:9D:01:55:9C:76:E3:E1:A7:14:99:11:D3:0B:E8:2F:D0:09:70:46
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 05486926
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/CJ0BVZx24-GnFJkR0wvoL9AJcEY.roa
Signing time: Sat 01 Jan 2022 11:57:04 +0000
ROA not before: Sat 01 Jan 2022 11:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15470
IP address blocks: 193.239.60.0/22 maxlen: 22
195.225.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88631590 (0x5486926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jan 1 11:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=089d01559c76e3e1a7149911d30be82fd0097046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:95:f3:c2:e8:05:16:35:32:62:9d:37:2d:
37:37:d1:5a:36:47:8b:8a:b8:3b:cf:a2:b4:5c:7a:
41:da:b9:04:0f:41:aa:72:26:be:6e:e6:1b:1d:d5:
46:17:d7:2f:d0:74:d1:ed:11:44:54:a2:ad:21:cd:
1d:eb:cc:90:a3:32:b0:7e:55:f1:68:42:05:b1:aa:
45:b3:b6:4b:15:7d:c1:75:43:94:17:9c:e0:69:8a:
e7:ca:32:ad:05:20:c4:35:b3:f0:0e:81:05:fd:fc:
57:23:23:e2:8e:ad:12:54:ef:94:67:87:41:20:71:
32:66:62:14:ae:7e:ef:f0:03:55:d2:6f:02:5c:bb:
3b:78:53:fa:5d:45:9f:c9:aa:61:c0:98:fc:f3:1d:
be:9d:4a:5c:5b:97:a0:5d:4a:03:7d:a1:d2:ad:94:
f8:94:5c:e4:8a:b4:4a:25:ee:50:94:2f:34:11:48:
72:cc:bb:36:79:ef:6a:33:4c:e4:10:2e:9c:ac:37:
5a:94:cf:fe:90:3e:d7:5b:4e:fc:88:83:a5:10:54:
4e:25:e5:aa:22:32:21:61:6b:c1:da:04:4e:bc:f2:
a1:b0:d3:5e:9f:3c:c6:b6:00:98:d1:f8:69:d2:f9:
ee:81:4b:b7:a8:a5:a6:19:2d:45:86:be:78:e3:bb:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:01:55:9C:76:E3:E1:A7:14:99:11:D3:0B:E8:2F:D0:09:70:46
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/CJ0BVZx24-GnFJkR0wvoL9AJcEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.60.0/22
195.225.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:21:7e:d4:c5:b1:ea:f8:25:86:88:24:45:72:03:20:3e:b2:
53:4f:6c:68:4c:08:c7:dd:5f:0c:ed:fa:d2:9b:fe:0c:58:78:
8c:0b:d3:11:31:e4:98:4d:7d:6f:9b:d9:67:ef:ca:de:fb:05:
43:cb:70:d1:d8:f5:b4:a6:63:10:15:53:e9:ef:69:07:24:19:
ab:d0:6a:46:a5:75:ae:6e:08:23:cd:7d:59:68:26:ed:9b:4f:
bf:36:b4:e1:12:83:1c:8b:98:4a:66:d4:58:2b:71:5c:f6:c9:
44:65:ee:69:91:9f:8a:ce:bf:38:94:b1:c7:3f:77:b2:de:76:
2b:37:ed:37:ec:44:74:55:e9:4c:ea:f8:49:73:4c:e3:f2:f3:
a1:35:48:5d:55:b8:92:ad:1d:7d:b8:11:68:6f:3b:7c:8d:66:
01:2b:c0:5d:11:02:42:1b:22:14:25:dd:47:5c:90:ba:28:cb:
36:b0:4c:30:f1:c7:ea:25:80:01:7a:dd:82:7b:8e:c4:c6:2d:
a8:5c:ab:bf:51:cd:57:1b:f7:33:e8:9e:43:85:6d:32:4f:20:
a7:37:85:bb:fa:6a:6f:09:e0:d6:fa:82:28:3a:40:63:50:a9:
a0:db:10:6e:9b:a0:3e:c4:c8:7e:bb:a6:f2:fe:24:40:b4:eb:
be:2f:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:27 2023 by rpki-client on console-ams.rpki-client.org