Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/7GoUcX7Ra1joivX34L73gZvr6SA.roa
File: 7GoUcX7Ra1joivX34L73gZvr6SA.roa (raw, json)
Hash identifier: Ensr8ujNRnUw9sOV3Ac8aQ/moN3uetltqSLBcxS+k8M=
Subject key identifier: EC:6A:14:71:7E:D1:6B:58:E8:8A:F5:F7:E0:BE:F7:81:9B:EB:E9:20
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0184866DF826AB2DFF6DC017394B86BA9585
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/7GoUcX7Ra1joivX34L73gZvr6SA.roa
Signing time: Thu 17 Nov 2022 16:31:04 +0000
ROA not before: Thu 17 Nov 2022 16:31:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 89.185.24.0/22 maxlen: 24
89.185.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:6d:f8:26:ab:2d:ff:6d:c0:17:39:4b:86:ba:95:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Nov 17 16:31:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec6a14717ed16b58e88af5f7e0bef7819bebe920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3e:1f:1b:9e:06:eb:ac:b6:e3:c0:48:26:3b:
d4:3f:4e:29:80:b9:da:7d:51:9b:99:ee:f1:96:56:
a4:10:d9:1d:28:14:c8:90:c9:7f:84:d7:db:31:55:
c4:8b:f9:55:38:e1:2c:5d:4c:a6:a4:62:e6:4c:92:
78:4a:cf:40:9c:bb:b9:c3:cd:66:0f:99:e6:1a:38:
cf:c8:cf:c3:80:f6:7d:0e:51:79:c6:5a:4c:09:42:
be:f3:c4:58:70:0d:84:f9:3d:b0:38:b6:d1:8e:0f:
2e:f6:46:c1:5a:1d:97:26:96:1c:23:e6:3a:c1:55:
03:8c:95:7d:79:2d:ab:15:33:c6:b0:f3:dd:20:1a:
4b:78:89:92:2d:f0:9b:72:15:5f:2d:32:73:be:1e:
29:0a:e3:df:7b:20:2a:c9:db:1a:ec:9c:ca:6d:c2:
e1:60:a0:d7:d6:a8:ca:ff:f6:5f:e6:5b:b4:99:bc:
f7:f4:26:d1:f5:b6:2c:7d:85:8e:b8:c3:a9:90:6f:
15:b1:53:00:ea:68:3e:0e:d7:15:13:bd:06:69:c1:
65:21:e1:f2:39:57:ba:66:d9:68:22:2d:93:02:b9:
96:8b:d3:16:3a:c2:ed:36:da:ff:14:cf:9e:84:be:
f5:ee:6c:79:e5:fe:f8:f3:1f:ae:08:9a:00:c5:4d:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:14:71:7E:D1:6B:58:E8:8A:F5:F7:E0:BE:F7:81:9B:EB:E9:20
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/7GoUcX7Ra1joivX34L73gZvr6SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.24.0/21
Signature Algorithm: sha256WithRSAEncryption
04:68:7d:99:6a:9a:8a:8c:00:34:7d:0e:65:37:c2:35:8d:7f:
81:8c:4b:40:ec:b7:35:32:71:ea:23:0b:8e:82:b1:69:2b:3b:
a7:d0:25:d3:5c:42:4e:e4:2a:75:cc:35:a2:fe:c0:95:bc:a8:
7b:33:8e:5c:da:9c:ed:8a:29:ad:e8:34:94:cd:3b:de:6e:5b:
51:b1:a7:c3:68:9f:78:8a:4d:30:aa:c9:d3:88:50:4f:13:83:
dd:28:6b:a8:b8:6e:5c:6d:d9:40:64:54:41:a7:eb:13:c1:17:
de:ef:39:4c:4f:25:f0:ba:17:fa:96:6e:ba:0e:11:32:f0:bf:
37:c6:f6:b4:fb:09:cb:b8:05:bb:c2:f4:dc:f6:40:a8:f4:38:
4f:1b:8d:f9:95:a8:ed:f5:97:28:c2:1a:de:4a:f7:e8:15:bf:
c5:3b:5b:bf:b8:54:80:d0:6d:3a:8a:ca:dc:c0:17:2f:34:29:
4f:3d:59:3e:6d:60:26:88:71:54:50:3d:5b:3c:97:bd:c1:46:
09:b9:58:d8:75:c6:f3:4a:ce:f4:29:ac:b4:5a:10:6f:fa:06:
a0:fe:89:a6:e2:3a:bc:78:13:97:14:e9:88:d6:76:de:9c:bc:
b8:a4:8f:8c:88:c7:24:4e:3d:f6:30:70:18:f0:e1:27:2a:21:
c6:15:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org