Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QHjc4fdlTMGuDdqjtcIxU12llVs.roa
File: QHjc4fdlTMGuDdqjtcIxU12llVs.roa (raw, json)
Hash identifier: 7OmWcOR6GdPvI6fSRyfjZWQZIwSc7ZBUodzDI7kZeCk=
Subject key identifier: 40:78:DC:E1:F7:65:4C:C1:AE:0D:DA:A3:B5:C2:31:53:5D:A5:95:5B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01830396993D421A1707F11D67F019F3CE18
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QHjc4fdlTMGuDdqjtcIxU12llVs.roa
Signing time: Sat 03 Sep 2022 13:42:24 +0000
ROA not before: Sat 03 Sep 2022 13:42:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.185.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:03:96:99:3d:42:1a:17:07:f1:1d:67:f0:19:f3:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 3 13:42:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4078dce1f7654cc1ae0ddaa3b5c231535da5955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:31:db:85:3d:71:02:0d:f4:56:67:b4:49:
90:67:cc:ed:7d:0b:9e:3e:97:94:50:bc:8b:f2:f3:
64:96:96:f9:e6:14:55:95:58:f3:33:c7:f4:ef:a0:
30:40:43:21:81:f4:bf:fd:14:31:16:27:54:22:d8:
09:98:89:5c:cb:47:fc:18:aa:da:24:bb:f9:52:af:
0f:eb:e9:b2:16:0b:1d:5d:ba:f5:0b:52:2b:95:c3:
03:cd:95:70:82:2f:14:68:ca:61:3b:9d:3d:f2:28:
5d:ef:8e:d5:48:5f:4f:69:74:e9:fa:b3:80:e9:fb:
7d:96:50:6f:52:a2:bf:34:ed:9f:06:e5:b0:80:62:
e8:16:51:2e:71:ec:51:bb:08:cb:3a:66:25:32:32:
18:b2:e1:55:13:f9:1e:24:26:3c:4b:d9:89:b3:bc:
63:3b:c4:bc:d2:24:af:9f:ee:4a:f6:57:c3:e9:a0:
81:79:a4:58:5a:e3:93:fc:27:17:06:52:fc:82:0a:
6f:dc:19:25:ae:b0:a7:11:84:1e:ab:7a:96:f6:c5:
fb:ad:e9:37:fb:72:41:20:f8:ea:11:23:2b:e0:4f:
e2:a0:b6:c5:51:8f:ed:af:1b:a6:0f:2f:77:b6:34:
63:a8:87:cf:59:38:9a:d4:3e:19:f8:82:35:a9:f3:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:DC:E1:F7:65:4C:C1:AE:0D:DA:A3:B5:C2:31:53:5D:A5:95:5B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/QHjc4fdlTMGuDdqjtcIxU12llVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:b2:94:1e:d5:87:4d:e3:9d:26:3a:71:d0:9d:b1:df:e7:81:
6a:ee:a2:f9:1d:c6:6a:db:7d:b3:e7:34:6d:73:02:58:dc:5a:
1f:29:b4:e2:0b:14:f9:2f:a1:e7:bf:5f:74:ea:d0:ee:b7:7d:
5d:7e:87:6c:be:16:ef:66:14:63:8b:fa:95:06:8e:a2:36:29:
30:b4:26:89:9c:74:8a:22:60:15:cb:2b:73:41:e1:e2:68:34:
95:d9:c8:b6:1f:6b:d4:bf:d9:40:88:c9:dd:29:eb:4b:73:80:
8b:59:b1:4b:28:31:2b:57:6d:c2:6a:73:50:28:e5:bb:02:95:
f8:51:c4:9f:d9:be:4e:d2:cf:4e:5a:83:19:4e:58:b0:93:e0:
30:9f:ef:49:7d:33:73:a0:4d:9d:b7:c0:f4:24:94:91:9a:90:
83:d5:bd:78:ad:7a:ee:62:f4:d2:ea:a0:f8:5f:7a:f2:b9:0a:
6b:f1:85:b8:36:ff:44:41:15:5a:c4:38:43:74:6d:90:b2:94:
11:75:e3:35:c4:48:45:1a:a4:81:31:a2:51:cc:1f:22:a8:15:
9a:f0:a9:ed:4e:ed:fa:d1:fa:c7:23:f2:04:54:60:d6:01:c4:
16:d3:3e:ab:ee:62:97:d2:83:03:a1:21:72:73:90:f5:93:dc:
a4:ed:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org