Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JIirK64pqYudLpXsIwEDOlNLi8o.roa
File: JIirK64pqYudLpXsIwEDOlNLi8o.roa (raw, json)
Hash identifier: +ZK3wATtyLzLr3R3yUKyrElGvntYO+IRTw7x2Uq9f7E=
Subject key identifier: 24:88:AB:2B:AE:29:A9:8B:9D:2E:95:EC:23:01:03:3A:53:4B:8B:CA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A2407D1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JIirK64pqYudLpXsIwEDOlNLi8o.roa
Signing time: Sat 14 May 2022 18:23:28 +0000
ROA not before: Sat 14 May 2022 18:23:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.187.153.0/24 maxlen: 32
213.232.104.0/24 maxlen: 32
92.119.150.0/24 maxlen: 32
91.188.203.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438568913 (0x1a2407d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 14 18:23:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2488ab2bae29a98b9d2e95ec2301033a534b8bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:da:fe:cd:26:d4:c3:80:cb:85:87:1f:89:
05:92:02:91:f8:6d:16:1f:8a:34:fc:bb:96:c1:8b:
8a:ed:e1:c5:1c:e7:f7:ce:81:52:5d:13:34:45:52:
41:45:67:3a:74:05:80:9a:03:52:c9:1b:ef:08:9d:
ff:ca:12:6e:db:20:ff:d3:a9:0f:f2:63:30:ce:50:
ac:e0:6f:fb:65:8a:be:4c:e8:d3:23:b3:a9:21:eb:
00:6d:cc:62:01:f9:b9:20:92:bd:94:9c:a3:c0:54:
d9:28:87:dd:f7:a8:de:4d:73:54:02:cf:61:de:e0:
1b:e2:dd:62:0f:a0:40:6f:43:28:13:1b:2e:9b:91:
e9:f3:d3:b4:d1:94:57:5b:ab:39:f9:c8:08:e1:07:
64:02:55:59:db:c6:ff:2a:2d:67:a4:fb:35:43:d4:
8d:a3:3f:05:d6:92:41:c2:fd:32:ed:65:40:82:a1:
bc:27:24:c3:d5:26:e4:35:6b:3f:f3:5d:52:c3:d9:
8a:78:ea:a8:d7:dd:83:92:d3:8f:57:a2:63:07:a8:
82:68:12:56:cb:e0:01:82:30:5c:af:ef:b2:26:8f:
9a:d1:0f:e8:75:14:cf:65:47:69:3b:a0:a2:b1:df:
ea:2b:92:84:42:6c:4b:6e:e7:85:13:23:22:a4:25:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:AB:2B:AE:29:A9:8B:9D:2E:95:EC:23:01:03:3A:53:4B:8B:CA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JIirK64pqYudLpXsIwEDOlNLi8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.203.0/24
92.119.150.0/24
193.187.153.0/24
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ff:a1:fc:ab:7d:44:fe:a3:2c:1d:fd:0d:7b:1c:68:43:80:
c0:a0:7b:f8:15:d1:1e:f9:78:62:a3:41:fe:08:f6:7f:4b:0e:
c2:5e:5b:7e:04:d7:e8:64:29:24:b0:4e:3c:17:ca:ff:40:90:
91:cd:d1:99:f0:16:71:98:0d:c4:b7:98:4a:b4:16:dc:6d:ef:
3e:4b:32:70:07:cb:6c:9e:4d:43:34:c6:25:53:5f:77:d0:13:
7f:35:30:44:80:bd:f9:eb:8e:a9:26:a3:7c:69:1f:69:0d:29:
b4:f1:80:97:bf:a2:80:63:77:f7:71:0b:8a:3f:02:97:24:03:
57:31:ee:b0:65:8c:a8:53:37:03:46:db:6c:26:e6:12:17:b4:
64:08:ba:7a:9f:89:da:aa:d6:77:2a:9c:58:af:34:5e:c7:b6:
f5:fc:14:6b:ac:b8:7c:39:f7:0f:3c:70:1b:ca:ab:bb:62:08:
8a:27:2f:fc:f9:ed:98:97:a6:42:c3:87:5d:7b:be:d6:51:8d:
27:1e:30:27:27:c8:fe:cd:f8:68:a8:e8:06:07:0f:15:e0:69:
01:89:ee:25:b2:c2:e3:1b:0c:ec:e0:89:36:ff:7d:b7:f9:12:
27:29:33:2f:ee:5d:e6:f5:5b:ae:60:62:26:f5:61:7d:83:d3:
b4:db:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org