Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jjKOoZ7SvwxkWGFzLlBgebkk8eo.roa
File: jjKOoZ7SvwxkWGFzLlBgebkk8eo.roa (raw, json)
Hash identifier: xCSLem+Bwh4t1I/yXozLrYGU4NrKblfSCwU3z81WWio=
Subject key identifier: 8E:32:8E:A1:9E:D2:BF:0C:64:58:61:73:2E:50:60:79:B9:24:F1:EA
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018347AE47813EF0A984E8615C013AA7F169
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jjKOoZ7SvwxkWGFzLlBgebkk8eo.roa
Signing time: Fri 16 Sep 2022 19:02:27 +0000
ROA not before: Fri 16 Sep 2022 19:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 87.254.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:47:ae:47:81:3e:f0:a9:84:e8:61:5c:01:3a:a7:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 16 19:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e328ea19ed2bf0c645861732e506079b924f1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:74:8b:0a:61:fd:52:08:18:ad:9a:32:90:
20:28:b6:92:2d:2c:ef:00:a3:48:8f:9a:9b:44:63:
ae:0a:ea:b4:7f:5b:50:ca:b9:4b:10:ca:f9:7b:37:
8a:97:e5:40:6a:57:48:78:62:10:34:b3:c1:62:86:
66:f8:4f:a1:31:da:ea:eb:1e:02:25:f4:f3:d1:f3:
f0:63:f4:2f:04:6b:42:d8:c1:7b:3e:82:a9:06:ad:
7f:79:6c:e2:4d:72:16:c9:30:f6:3a:2a:35:78:eb:
b9:3d:2c:cb:cc:e1:d8:e5:ce:c8:58:7c:7d:2f:ff:
e3:b4:3a:cb:72:50:47:4d:1c:2f:c5:60:a0:05:ae:
b8:79:ad:26:a8:f6:31:70:9f:20:c3:13:b8:02:d4:
1e:83:e9:ba:d5:e7:f2:69:81:ac:62:fa:33:e0:18:
b4:cb:65:46:00:6a:41:da:13:d1:34:69:c1:4d:41:
39:1b:90:48:fc:0b:74:90:f8:4d:75:db:85:16:87:
39:59:b4:1d:6d:e7:05:10:79:ab:81:2b:12:83:4d:
de:bd:ab:94:3e:37:18:b5:f2:bc:0b:20:7e:0b:be:
aa:80:c6:54:f8:1f:15:e8:d6:ca:c1:0a:e9:ca:2e:
22:e8:23:ba:8d:a0:28:ee:e5:a4:3b:3a:57:5c:02:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:8E:A1:9E:D2:BF:0C:64:58:61:73:2E:50:60:79:B9:24:F1:EA
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jjKOoZ7SvwxkWGFzLlBgebkk8eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1a:11:53:41:62:fa:f0:fb:98:46:56:92:e9:32:18:b4:1e:
38:5a:a9:e4:62:de:8b:48:7f:6f:0e:48:a6:b6:03:d5:99:6f:
3d:62:a1:a8:0f:98:8a:3d:fc:05:d6:d5:72:d1:e5:f9:b6:6b:
d5:39:e0:0c:57:ff:3e:3a:05:b8:de:9f:ac:24:72:0b:6e:bc:
65:56:51:38:ce:6d:39:12:36:c5:f3:8e:dd:d7:41:8c:1b:21:
e7:03:ac:a7:33:83:76:60:7d:1c:31:4c:33:36:ed:cd:be:8b:
ff:e8:f7:8b:ac:02:5e:db:82:69:dc:b9:07:7f:f3:35:6a:44:
4b:25:9c:ba:c7:15:4d:17:ae:37:92:9f:91:7b:09:8f:39:7c:
8f:2d:0a:39:0b:e4:18:3f:ea:a6:5c:b1:16:94:e2:59:17:84:
64:66:2e:0c:62:dc:dd:53:f4:b0:0e:48:18:fc:29:2c:37:f5:
a6:23:81:b6:40:4a:c1:ce:cb:50:2a:6f:a5:b7:34:3e:47:42:
a1:e7:2d:e0:0d:fb:fd:fe:94:3b:26:86:43:2c:7b:2e:0b:cf:
41:a5:7f:56:60:70:2a:23:6c:ef:dd:04:b5:3d:4c:ec:95:98:
cf:8c:64:7f:04:c1:c2:88:9a:db:24:f7:1a:a3:67:38:b5:d7:
ed:04:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org