Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/j96TBmDVTo4dMCwFsTquc7fLBEM.roa
File: j96TBmDVTo4dMCwFsTquc7fLBEM.roa (raw, json)
Hash identifier: dOIMot9tHaJ/9WWJunO+QCm3MGzPDxICGnKwclLZe1k=
Subject key identifier: 8F:DE:93:06:60:D5:4E:8E:1D:30:2C:05:B1:3A:AE:73:B7:CB:04:43
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0183FBFCCC2766B59C363E7BCA2D6938905C
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/j96TBmDVTo4dMCwFsTquc7fLBEM.roa
Signing time: Fri 21 Oct 2022 19:19:52 +0000
ROA not before: Fri 21 Oct 2022 19:19:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 87.254.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:fc:cc:27:66:b5:9c:36:3e:7b:ca:2d:69:38:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Oct 21 19:19:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fde930660d54e8e1d302c05b13aae73b7cb0443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:5e:01:03:87:5a:cc:9b:d7:62:ad:16:3e:
e1:43:0b:0d:af:b8:e8:0e:14:ea:47:48:e2:ca:d3:
bd:7f:72:c9:83:06:fb:55:b2:56:16:63:1a:57:f3:
f6:c5:a3:1f:9d:19:1d:94:84:0d:c3:32:27:5a:5c:
d6:61:26:8f:4c:c5:c1:aa:89:31:78:c3:f4:43:a8:
d3:0a:12:1a:2e:fa:dd:37:87:2a:f7:c7:2b:05:c2:
50:05:a6:78:03:fe:b8:4c:6c:3a:3e:d0:c8:d3:7d:
6c:77:b8:3c:b1:b9:d5:00:e1:b4:6c:01:43:5b:4a:
ae:00:59:e8:95:31:da:60:5f:3a:9d:16:be:88:4e:
49:ca:3e:db:46:44:95:6b:8c:74:2a:7b:83:ea:e4:
a9:8f:2a:1b:01:94:5e:fa:9d:88:38:48:94:3c:a0:
be:64:9b:d3:a2:b7:a2:5a:70:98:19:50:a6:da:74:
ac:26:ac:55:34:d9:5d:f9:7a:03:44:9d:4e:45:af:
f5:51:19:98:08:3d:74:f3:3d:c1:28:a1:14:ee:2f:
f6:16:20:3e:9f:47:82:b9:38:69:b1:7b:0e:04:a0:
ef:c7:2f:68:1e:67:54:ad:30:03:00:1c:81:d2:00:
79:cb:fa:52:c8:11:12:a7:59:72:a7:2e:b8:04:6c:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:93:06:60:D5:4E:8E:1D:30:2C:05:B1:3A:AE:73:B7:CB:04:43
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/j96TBmDVTo4dMCwFsTquc7fLBEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0a:b7:43:03:c8:60:12:c2:67:10:2f:a0:7e:07:a3:89:22:
c2:db:36:2c:03:77:8e:8c:4f:78:0b:88:57:3a:49:ed:f1:18:
90:26:b4:85:45:a2:8a:b1:44:da:7d:1e:48:eb:e3:fe:91:ea:
f4:4a:31:3e:28:c7:4b:64:3d:a2:b7:92:c0:e0:32:8b:eb:f8:
3c:1e:7b:96:d6:56:a1:8a:b5:62:d9:99:65:be:98:c3:d4:c2:
21:2f:91:f6:55:3e:d4:53:5e:cc:df:0d:a8:32:80:94:66:71:
47:a8:73:07:a0:07:83:9b:8b:e4:f9:47:6b:fa:f4:e1:b8:8c:
f5:de:07:bf:11:0e:86:d9:a6:27:2e:e3:6b:3b:37:b3:bd:27:
0a:fe:c6:20:b3:9d:94:64:b7:67:34:91:93:74:87:51:93:71:
19:35:35:b4:2f:08:ca:df:f7:c0:c8:30:0c:5a:90:48:3b:9f:
e6:34:25:5f:84:74:e7:24:76:64:28:e1:1c:77:ea:24:0f:8f:
b3:4c:db:c2:6a:8a:d6:8a:8f:0c:48:95:4f:68:c2:0c:a6:24:
b5:b8:16:ba:86:35:c9:e2:da:90:6d:98:4c:50:b9:57:ab:e8:
9f:4d:2e:35:53:46:cf:10:d1:a2:a0:bf:92:26:57:03:b7:1e:
ab:a7:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org