Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/j8uHoeikH3qmGeD3QcnbH0j4QPU.roa
File: j8uHoeikH3qmGeD3QcnbH0j4QPU.roa (raw, json)
Hash identifier: vpkKR82Qut1xJidj5kvRj0j30B6CbJYY91asZ3Qw97I=
Subject key identifier: 8F:CB:87:A1:E8:A4:1F:7A:A6:19:E0:F7:41:C9:DB:1F:48:F8:40:F5
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0184430B626D6ECDAA43FD88548F9D97908C
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/j8uHoeikH3qmGeD3QcnbH0j4QPU.roa
Signing time: Fri 04 Nov 2022 14:28:50 +0000
ROA not before: Fri 04 Nov 2022 14:28:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48629
IP address blocks: 185.170.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:0b:62:6d:6e:cd:aa:43:fd:88:54:8f:9d:97:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Nov 4 14:28:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fcb87a1e8a41f7aa619e0f741c9db1f48f840f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:0a:0d:90:ce:c4:4b:76:36:30:76:a5:2b:
cb:58:28:33:39:4b:33:f7:2a:ea:a2:c3:01:65:cc:
fa:81:a0:b5:b6:fe:f3:4d:dc:f7:94:06:a4:17:0e:
cc:be:c2:93:7b:35:8d:9f:54:e0:08:12:36:4b:95:
e8:74:d7:80:59:58:e6:a4:9b:69:a3:4b:73:6d:5d:
b4:a3:b6:92:0f:45:55:79:ab:3c:39:21:3a:9a:92:
7a:66:b0:13:a8:47:ef:60:76:50:d0:31:84:48:3e:
8e:79:c2:57:cc:f3:3c:d6:d2:25:d3:78:0c:0c:9b:
ba:6b:3d:fd:61:e6:a2:78:70:55:35:48:5d:41:e3:
97:67:55:41:c0:fb:72:56:d0:db:a9:e1:61:b2:24:
2b:e7:8a:c5:31:aa:50:be:35:0b:50:c1:ab:93:be:
1e:cc:83:d6:d8:8a:6f:23:c7:45:e5:8b:94:b1:01:
f6:46:98:f2:68:5e:f9:a3:de:03:7b:7f:0e:31:8b:
21:ca:e2:55:49:57:71:5c:83:00:ce:90:f1:49:c9:
6b:20:c8:71:dc:30:2e:36:a1:80:35:db:c8:02:c1:
07:e8:a4:7a:e9:35:04:dc:8a:f6:79:b3:9d:b0:2f:
78:ef:2b:94:54:d8:54:f2:97:7a:5a:f2:cc:d3:65:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:87:A1:E8:A4:1F:7A:A6:19:E0:F7:41:C9:DB:1F:48:F8:40:F5
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/j8uHoeikH3qmGeD3QcnbH0j4QPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.131.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4e:89:cb:cf:07:57:07:31:40:a4:82:ce:77:5c:e8:88:1c:
c6:d8:ba:a1:58:5e:33:64:20:ba:cc:15:48:17:dd:fd:6d:5f:
f3:61:b5:73:4e:ae:bb:10:91:bf:9b:6b:3e:30:ff:32:d4:3d:
5a:91:36:7d:f8:aa:83:41:18:9a:3d:ef:3b:f0:88:e3:af:ef:
cf:de:dc:d7:67:36:8f:9a:8c:ac:8c:a6:1e:4a:a8:a0:e1:64:
32:a0:1d:13:f3:df:48:02:3b:e2:9a:06:2a:38:31:bb:eb:e5:
64:b7:e6:c2:5c:98:e1:69:6e:24:02:aa:35:4e:c3:b7:d9:a5:
11:9d:cd:f6:35:86:b4:60:48:ca:03:82:fd:45:29:12:2f:a1:
43:77:93:56:4c:e5:30:00:54:e2:26:fc:89:a3:c2:86:93:8a:
f1:f5:f8:30:b7:b6:ec:d8:ab:ea:f9:8f:72:36:38:34:a2:e8:
da:21:80:8f:7b:be:93:b7:15:28:05:02:28:9c:ca:9c:fd:31:
b1:ea:c3:0d:09:a9:5d:96:22:09:0c:dc:b0:a8:97:6b:0c:53:
80:a6:70:72:b8:98:b4:81:30:88:20:7d:66:5f:a7:a7:2d:2e:
d6:b1:56:c6:ff:3f:0c:6c:75:b8:bd:77:33:a0:63:fe:58:12:
78:9e:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-fra.rpki-client.org