Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/jvSFN4wbWN01U5tm0SEjNEvH6LE.roa
File: jvSFN4wbWN01U5tm0SEjNEvH6LE.roa (raw, json)
Hash identifier: A1bbQu6Ecqdn9TNewYTDY6NBdeHdotdqJoQROngkg5M=
Subject key identifier: 8E:F4:85:37:8C:1B:58:DD:35:53:9B:66:D1:21:23:34:4B:C7:E8:B1
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 01823CA689E564BD6203706CA266B9F29043
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/jvSFN4wbWN01U5tm0SEjNEvH6LE.roa
Signing time: Tue 26 Jul 2022 22:35:23 +0000
ROA not before: Tue 26 Jul 2022 22:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201735
IP address blocks: 141.170.210.0/23 maxlen: 24
141.170.212.0/23 maxlen: 24
141.170.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:a6:89:e5:64:bd:62:03:70:6c:a2:66:b9:f2:90:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jul 26 22:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ef485378c1b58dd35539b66d12123344bc7e8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:0e:9e:b0:65:45:91:82:21:5b:a7:32:29:
92:a1:d7:99:15:bf:5a:f1:a3:36:69:54:4e:4f:90:
9b:5a:23:b7:e7:93:00:1b:c9:e9:ec:8c:52:3c:f5:
53:42:44:59:a0:9a:d9:89:e4:95:79:5f:fd:a6:0b:
e0:fb:ad:1a:cb:dd:7e:a4:f9:d7:69:78:a1:02:79:
47:f1:5e:2f:aa:6c:1f:3e:36:81:b5:d1:87:35:ff:
e0:69:ea:c0:4d:64:fc:b0:d6:05:1c:e7:07:79:7e:
e5:27:bc:43:d4:f1:d8:a2:3a:9b:f6:5f:65:81:c6:
94:3d:32:44:30:05:22:48:da:f7:35:ac:d8:b4:88:
76:e7:51:44:fa:f0:e0:ab:11:8d:16:bd:48:12:b1:
de:80:a4:d4:41:d2:6e:59:14:d1:3b:e1:be:21:93:
42:bb:6b:e4:82:9d:96:f1:56:9f:d2:d4:4f:43:1b:
5d:48:ec:35:e2:97:6e:cf:b7:4a:5a:4b:3f:67:44:
70:41:15:22:c6:d3:90:15:77:ba:90:93:1c:f4:4d:
a3:99:11:18:3a:6f:32:10:50:70:53:54:d3:b8:5b:
7a:5b:f9:1a:49:fb:c9:c9:a0:05:51:87:e5:0b:c7:
46:bd:5d:04:fe:a5:f7:fe:47:e2:4d:3a:26:9f:a0:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F4:85:37:8C:1B:58:DD:35:53:9B:66:D1:21:23:34:4B:C7:E8:B1
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/jvSFN4wbWN01U5tm0SEjNEvH6LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.170.210.0-141.170.213.255
141.170.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:23:22:b1:1b:bb:30:b3:e5:95:89:6a:2e:c8:a7:10:13:aa:
0e:f6:ad:0b:c8:21:b9:d2:5d:8b:90:6d:86:32:e7:39:90:7c:
ee:81:e5:e4:4e:89:84:45:02:a2:11:d2:6c:7b:f2:2d:86:52:
7d:eb:82:8c:d9:10:4c:fd:22:92:e9:d2:f5:0e:8a:fa:1c:6f:
64:77:76:b0:de:9b:6b:9f:e2:f6:41:cc:9c:79:db:fe:e9:38:
dd:9a:54:a1:18:79:b3:ea:fa:dd:aa:31:6b:1c:cb:a9:7d:04:
8e:c8:c4:41:4b:a2:71:00:e1:91:92:c6:3d:49:bd:89:31:e9:
28:b9:0c:4a:c8:a2:76:8c:77:2f:b5:59:b5:dc:f7:34:a7:79:
91:25:a0:7a:ac:f7:59:d4:7f:aa:41:98:ec:c9:e6:b7:f2:32:
ef:41:13:fc:85:cf:bf:11:76:c5:bf:0f:96:e6:df:1e:84:d3:
82:65:51:3a:9f:b6:e1:46:dc:f4:31:e5:68:12:37:6a:72:fa:
dd:39:f3:b7:e6:ec:75:84:eb:1b:f9:d2:63:46:69:d5:30:24:
48:71:8b:28:4c:de:01:26:cc:b7:59:4b:2a:e3:58:7b:3b:b5:
42:d7:f6:ef:76:61:64:96:9a:7a:9d:ac:1b:54:03:55:b9:6a:
2b:be:39:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org