Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/jetqIomPsyaDUHRK8Hwbf292FGk.roa
File: jetqIomPsyaDUHRK8Hwbf292FGk.roa (raw, json)
Hash identifier: gZpZLpP2f+CnTEn/A5dPtDBomNsdBYL/guiZkWicvHM=
Subject key identifier: 8D:EB:6A:22:89:8F:B3:26:83:50:74:4A:F0:7C:1B:7F:6F:76:14:69
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 01838EA91339A0817FDAE4A9E028DAD5A01C
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/jetqIomPsyaDUHRK8Hwbf292FGk.roa
Signing time: Fri 30 Sep 2022 13:49:48 +0000
ROA not before: Fri 30 Sep 2022 13:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60695
IP address blocks: 185.228.108.0/22 maxlen: 22
45.88.4.0/24 maxlen: 24
155.133.33.0/24 maxlen: 24
185.225.100.0/22 maxlen: 22
155.133.60.0/23 maxlen: 23
2a06:1e00::/29 maxlen: 48
2a0d:b400::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:a9:13:39:a0:81:7f:da:e4:a9:e0:28:da:d5:a0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Sep 30 13:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8deb6a22898fb3268350744af07c1b7f6f761469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:0b:e6:5a:ae:69:65:27:04:75:8d:3f:c5:
48:b6:2c:ce:fd:80:99:bf:27:e2:f0:c5:d2:3c:7b:
06:d8:8d:13:58:c0:30:ff:86:cd:25:ae:20:52:f1:
dd:31:77:4d:00:30:b8:77:ea:9c:86:23:f7:da:01:
a3:36:aa:b6:0b:bd:84:da:57:31:30:c4:96:ef:ce:
66:15:d1:77:58:63:9a:04:eb:aa:74:fe:95:19:6d:
58:1f:fd:8f:d8:71:59:ab:1b:55:32:89:03:ef:19:
f3:f4:db:8e:37:2d:6c:61:26:13:55:4c:32:dd:3e:
df:e5:f7:85:56:8b:9a:ee:ea:79:7b:9e:78:23:7f:
01:fe:bc:4c:64:9d:c3:6a:6c:79:70:04:f4:8c:66:
4e:b0:a2:86:35:58:e9:a9:a1:6e:66:4d:02:de:d0:
1f:d4:cf:3b:2d:56:0b:a9:a5:54:4c:0a:c6:67:78:
85:44:0a:ea:2a:51:72:30:fa:47:0d:4c:2b:e6:bd:
59:23:fb:0b:42:dd:dc:d4:9d:71:e4:c3:21:3b:d6:
0a:da:f2:75:08:96:86:71:b0:70:33:2d:ce:7b:84:
bd:a1:22:39:d1:2f:9d:8d:71:13:39:a3:17:49:6d:
42:0f:fd:10:99:21:69:f7:77:dc:36:ca:21:0f:33:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:6A:22:89:8F:B3:26:83:50:74:4A:F0:7C:1B:7F:6F:76:14:69
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/jetqIomPsyaDUHRK8Hwbf292FGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.4.0/24
155.133.33.0/24
155.133.60.0/23
185.225.100.0/22
185.228.108.0/22
IPv6:
2a06:1e00::/29
2a0d:b400::/29
Signature Algorithm: sha256WithRSAEncryption
14:d1:f0:62:97:3a:b8:6a:d5:85:4d:73:5e:a5:2d:19:5d:18:
fb:a1:b4:0d:50:9b:5c:55:5b:ba:79:7e:b4:95:8b:52:b2:58:
1d:86:dc:e2:68:e4:06:74:4e:20:98:a2:c0:d1:ba:5f:52:ae:
1f:45:ab:6f:26:74:a7:aa:ea:72:42:28:7e:29:87:4c:95:f0:
12:47:d3:d9:a5:98:af:e5:c3:cb:64:7b:88:10:49:9f:26:ac:
65:a9:7c:fb:36:ca:6e:3e:52:8d:b3:bd:f6:f5:6a:f1:c4:0d:
dc:97:f3:38:51:98:d1:41:73:d4:fe:55:65:5a:03:f1:9c:5e:
93:22:d6:94:52:1c:ea:09:c7:ea:0c:21:a7:ae:8e:da:8a:51:
39:9a:fe:29:c6:94:f9:5f:4c:23:9a:83:59:3f:dc:58:b6:a1:
16:8f:71:db:35:6c:aa:5d:1d:0f:b4:2d:27:f3:42:2c:7c:36:
76:a1:18:9a:6e:6e:74:9f:40:d2:7a:b2:79:bc:96:88:26:ed:
5d:16:5c:3d:03:80:e2:46:15:27:5d:b7:67:ef:b6:0b:0d:de:
29:bb:3d:7c:f6:d3:da:aa:45:75:cb:22:c3:fe:a1:91:9d:b3:
a3:06:f4:57:62:05:a3:14:b0:62:3b:0f:99:45:ee:59:96:2a:
47:1a:f4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:12 2023 by rpki-client on console-ams.rpki-client.org