Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/vYoJYj-HOob0nuUrM3IRAghXFf8.roa
File: vYoJYj-HOob0nuUrM3IRAghXFf8.roa (raw, json)
Hash identifier: TdmElIATltkxwuDPQfqHjKqK5CjFdEoYOJIxurwg7bs=
Subject key identifier: BD:8A:09:62:3F:87:3A:86:F4:9E:E5:2B:33:72:11:02:08:57:15:FF
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 0D8672DD
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/vYoJYj-HOob0nuUrM3IRAghXFf8.roa
Signing time: Sat 01 Jan 2022 09:54:30 +0000
ROA not before: Sat 01 Jan 2022 09:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210091
IP address blocks: 89.19.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226915037 (0xd8672dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jan 1 09:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd8a09623f873a86f49ee52b33721102085715ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:e4:52:23:60:0a:23:1e:ab:bc:87:ac:12:
cb:99:c9:ab:a9:eb:48:e2:c3:be:e4:f9:a1:54:2c:
3c:60:0c:26:96:14:a5:20:58:b4:2e:7d:39:1d:9a:
67:35:a3:7f:47:ac:57:7c:43:eb:56:c1:13:6d:2b:
29:4b:bd:b8:78:ad:77:06:20:97:53:8d:25:c5:ea:
63:a8:a3:0d:e4:e6:21:67:25:67:60:21:33:8b:37:
ac:e7:25:9b:3c:41:18:2e:2d:fa:6a:99:ea:95:9f:
c9:f3:9d:70:09:d0:51:ec:af:0e:ba:d8:a7:f8:4a:
0a:f1:44:ff:b8:8e:72:21:7e:9e:19:73:a1:8d:49:
c0:41:d8:65:69:89:60:07:d0:ec:bc:d7:eb:e0:11:
51:d4:fd:e0:71:ed:b4:ee:24:b1:a6:c8:87:b4:b7:
35:e0:c2:0a:86:1a:5d:e3:e1:9a:6b:c8:b4:1a:91:
92:aa:97:05:e6:89:65:01:b5:39:ac:30:6d:01:9f:
0c:f9:d5:12:7a:67:46:ad:9b:67:94:b6:a4:c2:ae:
e9:ba:99:b9:af:f8:bb:3f:11:35:47:f9:dd:19:9e:
09:46:bd:cd:a6:31:27:1e:b9:dc:ca:95:19:bd:fb:
25:22:15:b8:58:1c:0c:51:b9:70:8a:a2:36:fc:6a:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:09:62:3F:87:3A:86:F4:9E:E5:2B:33:72:11:02:08:57:15:FF
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/vYoJYj-HOob0nuUrM3IRAghXFf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:05:85:e4:5f:62:2c:e1:1c:01:9c:d1:90:81:cd:3b:82:17:
6e:12:9a:a6:50:10:8e:87:6a:6b:9d:df:f6:5d:83:e9:07:63:
0f:a3:e0:fc:3c:3e:2d:96:be:44:7e:21:38:e4:0c:d9:9b:c6:
47:10:b6:a2:46:88:e4:49:57:5e:88:ac:ef:ff:4f:25:de:d7:
cf:43:92:49:60:a8:78:e1:ce:87:22:81:33:69:5e:6d:3c:a3:
28:98:ce:3f:56:ca:8d:f3:81:05:9c:61:63:3c:58:dd:0f:7d:
42:43:54:66:17:07:8f:38:6c:bc:18:a8:ae:20:d9:2b:44:08:
c3:78:54:cc:41:27:02:cf:45:b3:d1:f8:6e:84:b9:4b:df:73:
51:e6:e9:d8:81:2b:f5:64:44:04:1f:a3:08:3b:24:aa:32:f6:
b4:49:84:c5:d9:c8:eb:e2:6a:41:6e:70:6c:86:b2:86:31:ce:
24:df:1e:34:f2:e7:a1:eb:c1:cb:54:3a:a8:e0:79:d1:3b:67:
c8:8d:28:c5:21:02:d7:2b:31:15:ca:90:af:fa:70:c3:95:78:
c1:f2:3c:7e:f6:d3:a1:dd:28:99:79:39:31:98:42:68:29:2f:
bb:b9:bd:b5:9b:8d:34:bb:e4:f1:c4:da:29:ac:41:65:5c:6f:
71:16:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:30 2024 by rpki-client on console-ams.rpki-client.org