Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/jPT25sxTH6utiTvoqEw96YKUfI0.roa
File: jPT25sxTH6utiTvoqEw96YKUfI0.roa (raw, json)
Hash identifier: 04dAVT7jl/+yQ1TAlchuP30iS29+MgwYiaT7CoHTu0c=
Subject key identifier: 8C:F4:F6:E6:CC:53:1F:AB:AD:89:3B:E8:A8:4C:3D:E9:82:94:7C:8D
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01849E70FDFB1A21E7ACCC91A8B98915DC38
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/jPT25sxTH6utiTvoqEw96YKUfI0.roa
Signing time: Tue 22 Nov 2022 08:25:15 +0000
ROA not before: Tue 22 Nov 2022 08:25:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210539
IP address blocks: 185.162.90.0/24 maxlen: 24
185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:70:fd:fb:1a:21:e7:ac:cc:91:a8:b9:89:15:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Nov 22 08:25:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cf4f6e6cc531fabad893be8a84c3de982947c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:7f:3d:0a:bc:94:79:c2:11:f6:8e:45:d6:
d1:8b:c8:58:8f:75:c2:0c:6e:e7:f1:cf:b7:4a:af:
68:22:ce:3b:7b:20:8e:67:8a:39:d6:9b:e2:74:b7:
3b:14:30:c4:cf:9b:29:a0:ae:44:4e:9d:d9:67:e5:
97:66:04:d6:a9:52:03:d7:82:93:b0:66:26:95:73:
1c:7f:d1:56:3d:0e:f9:a9:4c:4d:ea:78:4d:74:35:
bc:0d:c4:0c:09:a5:83:4a:4c:f2:34:3f:88:86:9f:
e8:53:5a:e6:9d:e7:1b:ba:f4:81:fb:23:98:15:ee:
72:c1:cc:91:50:df:b5:94:26:f4:78:50:33:4e:e3:
c8:57:62:09:e6:d8:bb:c0:97:83:93:86:29:73:6a:
94:3f:cf:b6:1d:2c:6d:ba:42:d7:99:50:25:0f:a8:
86:d8:c3:05:93:51:67:1d:98:85:7b:27:9c:59:e7:
5f:48:6f:aa:d3:3c:e4:ab:89:e2:28:cf:69:b7:84:
a5:4f:1e:4f:36:38:52:e4:1e:48:aa:05:65:93:9e:
a7:91:64:0d:c9:19:2e:c9:56:69:bc:79:5d:9f:12:
6c:21:43:9d:2a:21:a8:e6:13:7d:66:e6:f3:a7:24:
ca:ed:86:7d:1b:65:e1:5a:bf:9a:f4:ff:e2:52:14:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:F6:E6:CC:53:1F:AB:AD:89:3B:E8:A8:4C:3D:E9:82:94:7C:8D
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/jPT25sxTH6utiTvoqEw96YKUfI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.90.0/24
185.170.128.0/24
185.170.130.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d9:b2:4c:5d:34:ff:33:40:b5:22:fd:5c:5e:ba:8d:2e:11:
dd:2d:63:11:aa:e2:e4:3f:13:20:b5:df:f8:3f:1e:15:4f:43:
05:6b:e6:6d:5e:df:01:85:77:9b:2e:0e:23:4d:12:47:36:74:
f6:80:2e:32:57:58:ac:78:a6:02:1a:b6:30:11:5f:52:96:9d:
6c:19:dc:ac:b7:60:78:d6:11:b1:7e:f9:8f:0f:79:4f:f4:dd:
c0:f7:09:8d:bc:f6:b7:33:d9:d8:38:e5:1f:b0:3b:6b:2c:5f:
97:79:0d:22:e5:d1:0c:be:34:98:47:df:10:b0:65:28:61:a6:
a2:a8:c2:67:66:5e:a9:80:93:96:36:bd:12:61:2b:ff:7b:45:
12:94:82:5d:85:d2:77:3a:43:d2:c4:8b:94:80:9d:92:bb:b0:
80:bf:b2:e6:46:c1:a8:43:eb:3e:d3:0b:06:40:52:0f:1a:98:
48:78:63:f3:88:f7:59:d6:93:10:51:d9:0b:bd:ce:08:ee:05:
bd:f9:bc:4b:66:5d:fb:1b:81:9e:95:b3:71:c3:2c:ac:ce:9f:
97:89:cc:fe:d6:e5:f9:c9:bb:5c:3e:75:cf:7c:93:55:85:0e:
73:a1:1a:ed:b5:ef:3e:e7:e5:15:2d:65:3c:da:30:b8:59:b1:
8e:e0:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-fra.rpki-client.org