Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/0Fj-VREGjKcORrkc-cIiUMTMeyU.roa
File: 0Fj-VREGjKcORrkc-cIiUMTMeyU.roa (raw, json)
Hash identifier: mucK/HHFrktv/eTff8/SNom52yI6LrxF8VFj16LX+iA=
Subject key identifier: D0:58:FE:55:11:06:8C:A7:0E:46:B9:1C:F9:C2:22:50:C4:CC:7B:25
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 036D50D8
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/0Fj-VREGjKcORrkc-cIiUMTMeyU.roa
Signing time: Sat 01 Jan 2022 07:58:57 +0000
ROA not before: Sat 01 Jan 2022 07:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29240
IP address blocks: 193.143.99.0/24 maxlen: 24
193.143.100.0/24 maxlen: 24
193.143.100.0/22 maxlen: 22
193.143.104.0/21 maxlen: 21
193.143.112.0/22 maxlen: 22
193.143.116.0/23 maxlen: 23
193.143.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57495768 (0x36d50d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Jan 1 07:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d058fe5511068ca70e46b91cf9c22250c4cc7b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:86:60:d3:e8:d0:e1:bc:8f:43:ff:44:bb:
2a:1b:a9:df:13:5a:25:17:4a:39:1e:29:e4:5f:e0:
02:26:4e:6d:aa:2a:af:7f:2e:f9:01:28:ef:c7:48:
6e:46:8b:f9:26:d1:0f:cb:b3:a1:09:ed:12:5a:0c:
e8:2a:ed:5c:37:a8:fc:20:ab:e1:93:b8:32:24:52:
dd:63:39:39:6b:a8:f8:c3:63:bf:f1:22:33:1d:4b:
15:05:ad:62:ee:11:af:53:21:24:07:fa:52:2a:e5:
50:c5:bf:69:eb:9c:f5:03:11:40:af:ba:1f:17:b5:
29:47:f0:28:68:bd:b9:98:6f:4a:0b:1d:0c:37:3e:
e0:55:29:ca:90:13:63:b3:36:52:a2:57:3b:57:5f:
ba:b0:2d:e7:28:f9:69:52:45:4d:45:a6:69:1c:b8:
67:82:66:38:36:35:a4:ad:28:3e:08:39:2a:34:32:
32:6f:d5:38:85:83:97:f0:1f:50:bb:74:66:8c:23:
6d:72:55:e4:f1:9e:b7:68:55:65:bd:22:ba:93:4e:
e8:80:8d:f6:2b:42:f5:44:fa:70:8a:5a:45:6f:32:
87:76:6c:a9:05:5a:e9:37:8a:79:bc:be:b8:ef:7e:
a5:a5:56:85:57:a2:73:53:11:2f:7b:ad:49:4d:7b:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:FE:55:11:06:8C:A7:0E:46:B9:1C:F9:C2:22:50:C4:CC:7B:25
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/0Fj-VREGjKcORrkc-cIiUMTMeyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.99.0-193.143.118.255
Signature Algorithm: sha256WithRSAEncryption
93:05:2e:ab:b0:ab:b5:04:66:25:50:d9:75:93:c1:a4:15:56:
ad:07:62:1b:76:bd:f5:00:61:e1:a9:f7:d4:81:17:68:57:ad:
31:f1:33:7b:ca:28:e2:83:f2:81:57:2e:43:05:c3:4f:10:ac:
03:cc:a8:f1:e8:75:b4:4f:4e:8f:a0:f8:eb:86:06:44:e1:b4:
36:38:77:58:9f:04:5a:12:6b:84:20:82:e1:9b:16:8a:f4:0b:
7f:3f:16:44:11:00:77:67:01:68:65:16:45:19:d3:a3:f7:55:
92:d6:1f:0b:6e:74:ec:3c:1c:8f:7c:a6:9f:cb:da:e5:ff:d0:
e6:f9:30:2c:62:a7:a6:fa:68:fd:34:d5:87:77:25:67:ac:dc:
ed:fe:0d:19:11:4e:5b:7a:3b:2d:24:89:16:31:21:8e:17:a8:
2b:9f:65:67:8a:0e:2a:c7:17:d4:48:c4:70:4a:73:fb:78:a8:
33:de:91:75:3b:b9:d4:f7:36:51:d8:ec:5e:f5:c1:f3:16:e3:
ee:10:62:f2:b4:d7:2e:8f:f5:85:4c:64:90:af:e5:1b:fa:b7:
ef:c3:0b:3f:5b:5c:fb:84:ce:0e:c3:b5:34:a0:8b:5d:8c:89:
a1:5b:31:5f:6e:8f:ad:25:c7:c3:fe:c4:63:15:d0:d8:e0:f3:
23:d0:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:18 2023 by rpki-client on console-ams.rpki-client.org