Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/iUCA0Jk1kAfRBmnKn1VRvs63nls.roa
File: iUCA0Jk1kAfRBmnKn1VRvs63nls.roa (raw, json)
Hash identifier: RnJzL0N/Ovxfp1sj8IG/q7M/Enw4PQrrPC4b04mbwPo=
Subject key identifier: 89:40:80:D0:99:35:90:07:D1:06:69:CA:9F:55:51:BE:CE:B7:9E:5B
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 127140B7
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/iUCA0Jk1kAfRBmnKn1VRvs63nls.roa
Signing time: Sat 01 Jan 2022 13:01:31 +0000
ROA not before: Sat 01 Jan 2022 13:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39759
IP address blocks: 89.186.32.0/20 maxlen: 20
89.186.32.0/19 maxlen: 19
89.186.43.0/24 maxlen: 24
89.186.42.0/24 maxlen: 24
89.186.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309412023 (0x127140b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Jan 1 13:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=894080d099359007d10669ca9f5551beceb79e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:e3:1d:a6:7b:44:33:93:c5:fe:22:4b:5e:
81:17:86:bb:ca:a0:ba:b7:1b:a4:09:3f:b2:f9:b9:
ae:ca:8b:b8:1f:fc:8b:a8:0d:79:66:84:0c:1f:cf:
7f:29:a9:d6:34:23:5a:5c:19:56:cb:eb:24:f9:f6:
cc:f3:74:fc:e5:e1:83:f3:0f:c1:98:54:6b:a4:96:
51:58:96:0e:13:75:81:3e:2e:15:90:0c:a4:ec:e3:
da:a9:52:53:2f:90:e8:5d:9a:ec:df:3f:1c:42:da:
1c:1b:9e:32:a2:b4:df:8d:85:d8:bd:26:cc:07:85:
22:be:7a:c6:89:3f:8c:c4:c4:15:a1:13:a1:04:bf:
e8:82:17:d9:8e:74:21:7f:6b:87:60:9e:ca:1b:16:
f1:40:f8:10:85:8e:1b:91:5c:4a:b9:b2:92:22:c3:
55:b5:29:d1:6b:7f:81:76:76:6f:8e:75:bb:00:5a:
85:3b:d9:55:73:7c:c5:ae:e1:0d:b0:90:04:3d:64:
78:85:3d:04:d7:20:39:9d:a8:be:d9:b2:46:70:56:
75:d6:d3:ea:02:dd:e4:35:b0:a4:97:17:b0:66:dc:
ed:57:51:7e:ce:e3:e4:8e:9a:8f:ea:39:82:8b:9a:
70:28:d5:97:96:ec:1e:eb:85:77:fd:cc:ef:a4:ca:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:80:D0:99:35:90:07:D1:06:69:CA:9F:55:51:BE:CE:B7:9E:5B
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/iUCA0Jk1kAfRBmnKn1VRvs63nls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.32.0/19
Signature Algorithm: sha256WithRSAEncryption
22:a1:7f:08:0a:c9:f8:79:d4:29:3f:c9:af:68:00:12:f8:29:
6c:2e:86:54:1b:43:7e:16:a0:43:c6:46:6f:98:2f:7e:7d:15:
f6:fa:35:b3:8c:cd:72:ec:20:90:91:c9:43:a2:a3:af:a8:d9:
d9:79:26:7d:92:d4:50:c4:c8:61:ed:69:f5:2a:15:ac:f9:09:
b8:a2:be:58:d4:bc:bc:ce:75:b6:36:83:31:8a:36:93:75:2f:
1a:bc:a7:a2:d5:8e:4f:ac:80:11:fa:de:4a:7b:49:26:23:d5:
50:48:3c:d2:77:ab:0f:ad:a7:17:0e:d3:ff:92:55:5a:24:f1:
eb:38:00:54:50:41:fd:2d:7f:39:1f:52:0b:44:ba:04:9d:65:
b8:c5:3b:9f:61:bc:ab:16:a2:d3:64:41:ba:b7:48:b9:d5:11:
7d:80:d3:af:2d:d6:be:1e:64:27:12:de:4b:47:c8:6f:4a:1c:
49:53:4b:76:7d:2c:20:66:c5:f2:a8:e4:ac:77:bf:a2:0f:38:
7e:e2:80:82:36:b2:8c:ad:9f:67:91:34:be:3e:6f:a0:76:54:
1a:bd:87:72:d4:48:13:8c:32:57:37:24:50:d5:23:56:39:37:
d8:c7:1c:f6:58:b1:14:b5:4d:a8:35:c0:73:70:77:ca:0e:c7:
68:0c:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:33 2024 by rpki-client on console-fra.rpki-client.org