Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/JyfSgcTjRHWUsZ5wml7f5r-fVJc.roa
File: JyfSgcTjRHWUsZ5wml7f5r-fVJc.roa (raw, json)
Hash identifier: 3d6R5sYEQSWrmCgaSeugywbLMZcXbAHuhaPJQX4TAKU=
Subject key identifier: 27:27:D2:81:C4:E3:44:75:94:B1:9E:70:9A:5E:DF:E6:BF:9F:54:97
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 0379C20D
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/JyfSgcTjRHWUsZ5wml7f5r-fVJc.roa
Signing time: Sat 01 Jan 2022 15:02:57 +0000
ROA not before: Sat 01 Jan 2022 15:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 198.205.12.0/24 maxlen: 24
198.205.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58311181 (0x379c20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Jan 1 15:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2727d281c4e3447594b19e709a5edfe6bf9f5497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:36:55:92:4a:e1:5f:5f:38:eb:d9:b1:b9:
a0:75:b7:a5:6a:03:71:26:2e:84:22:92:44:d6:1a:
ce:2f:70:57:a7:64:40:4c:ad:ca:cc:4d:0b:6c:74:
c0:82:b7:22:e1:df:13:eb:d2:d8:5a:c5:5a:e8:4c:
6e:6d:99:59:9c:c7:17:3a:99:83:32:4a:75:6d:52:
cd:47:24:1d:b8:b5:a8:63:d4:5a:2d:99:07:e9:d4:
66:5c:c9:2a:99:66:36:af:60:85:7e:47:20:f2:7d:
d3:83:a7:c2:50:72:ae:ad:a0:99:08:7f:42:41:eb:
db:28:1c:04:24:04:c2:58:61:81:88:32:2e:6d:bb:
c3:09:63:f4:41:27:3a:39:76:aa:d1:da:b5:7c:39:
ba:af:61:bb:ca:4b:7e:10:6c:a6:9a:dc:62:08:34:
18:71:6c:c1:bd:93:19:eb:94:7a:86:66:92:c8:4d:
f4:c3:3c:80:f7:92:b9:83:a8:2d:4a:d4:cc:69:e7:
c4:4c:62:53:e3:24:39:21:d1:0f:e9:81:09:e5:fe:
ef:65:dd:cd:bf:43:05:d6:59:89:46:b3:a0:0c:2c:
d2:f7:4f:a4:b5:0f:2c:5f:1f:a7:66:2f:4e:ce:ba:
b0:59:0f:26:d6:41:02:0d:33:33:f8:78:b2:6d:61:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:27:D2:81:C4:E3:44:75:94:B1:9E:70:9A:5E:DF:E6:BF:9F:54:97
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/JyfSgcTjRHWUsZ5wml7f5r-fVJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.205.12.0/23
Signature Algorithm: sha256WithRSAEncryption
88:7e:88:8b:d0:da:50:b5:1a:81:36:25:4b:c1:78:06:6e:ee:
ee:88:43:7f:14:7b:1d:0a:46:ae:58:f5:e7:34:d2:3e:11:c5:
f9:bb:c6:03:eb:8c:ae:5a:20:d6:11:4c:d6:8f:2e:24:5f:5e:
b9:c6:73:ae:1f:35:ac:1d:c4:aa:2d:11:7b:42:75:08:62:95:
1c:ae:7c:7e:17:6b:62:fe:0b:ea:60:66:19:93:4d:fe:d5:c8:
af:f2:3a:f6:f5:32:eb:63:12:fd:8b:1f:56:be:ba:ba:4e:4d:
f7:b9:1c:5d:10:95:64:df:86:18:f5:78:55:ec:20:43:3a:b7:
b7:09:a3:8d:4d:ce:fe:7f:5a:f1:5b:27:f3:0b:e4:9e:75:7b:
54:1f:27:81:92:ee:df:47:4d:e0:f3:d5:4e:a5:b1:a3:56:fa:
56:45:b0:df:2a:e6:0d:a3:3a:64:a1:4b:2a:da:15:61:a8:ec:
f2:9a:9c:41:62:fd:5e:09:9b:63:ca:db:84:1b:af:57:70:5a:
d8:8b:80:b0:a2:e3:9c:7e:66:80:45:a7:78:f3:0d:5d:7a:0b:
64:5e:05:a0:06:57:4a:a7:be:73:8a:a6:25:3b:73:2f:b3:69:
25:78:0f:cd:ac:43:e6:9e:c1:3c:95:97:c4:85:4a:9b:9e:75:
05:c4:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:40 2023 by rpki-client on console-ams.rpki-client.org