Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Qdxgm60FwXKewnk-8KmJ2lPWGIg.roa
File: Qdxgm60FwXKewnk-8KmJ2lPWGIg.roa (raw, json)
Hash identifier: +oREFEwmKBly8WTncIQpdOxUxi/0T3t56s7viirEaIg=
Subject key identifier: 41:DC:60:9B:AD:05:C1:72:9E:C2:79:3E:F0:A9:89:DA:53:D6:18:88
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0182D5B9F243127848C67A8CF76B44E7378F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Qdxgm60FwXKewnk-8KmJ2lPWGIg.roa
Signing time: Thu 25 Aug 2022 15:58:29 +0000
ROA not before: Thu 25 Aug 2022 15:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 89.185.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:b9:f2:43:12:78:48:c6:7a:8c:f7:6b:44:e7:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 25 15:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41dc609bad05c1729ec2793ef0a989da53d61888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:9b:f9:a8:80:9c:0a:fc:d6:1f:65:7e:5c:
83:10:fa:94:b0:66:32:82:e1:00:34:51:30:b4:1f:
ba:6b:ff:46:cc:23:2e:56:12:09:c8:5c:d8:91:18:
07:19:69:48:4c:7b:29:d6:eb:3a:f2:c6:be:cf:bc:
91:56:d6:18:83:8e:ad:32:ff:a4:1f:42:40:77:2a:
8b:d3:2a:ff:89:0e:f7:b5:e9:2c:49:5e:d9:30:30:
76:b6:42:96:66:f7:12:21:4d:5d:fc:07:c5:2f:70:
a4:ef:ca:e4:21:f5:5b:cb:08:32:66:12:f8:29:3a:
1b:a4:05:ab:77:dc:78:56:27:36:08:ad:15:a0:1b:
5b:6c:73:9f:ef:d0:1a:9d:6b:ec:35:31:3d:6b:ba:
27:c9:4d:01:8d:b8:dc:4d:db:eb:2a:21:69:2b:1a:
d8:02:04:66:ce:e4:de:34:53:04:a5:ca:44:d3:57:
d3:e7:37:ad:40:d9:93:52:c4:d1:b0:44:fb:b0:1e:
3e:26:93:fb:1f:00:9a:ab:2c:3a:cf:f4:7f:b5:1e:
b7:72:49:37:17:6d:a1:11:76:15:de:21:cb:06:f7:
22:ed:65:88:9e:ef:29:59:ca:41:f5:2b:70:7d:fc:
89:58:12:c0:85:a1:81:79:d5:3c:4b:48:79:dc:92:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:60:9B:AD:05:C1:72:9E:C2:79:3E:F0:A9:89:DA:53:D6:18:88
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Qdxgm60FwXKewnk-8KmJ2lPWGIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:ce:33:63:0c:a3:a0:a1:57:52:d7:9e:fd:e6:b5:56:80:f3:
e5:d1:6d:25:f2:30:35:eb:aa:90:13:9b:2d:0f:53:94:47:4b:
13:9f:97:1d:b7:0d:1c:ab:c8:73:1c:ec:ed:d4:4e:06:ab:b5:
4d:a1:ee:c9:08:d7:9a:ef:e9:b5:1f:e0:95:7e:4f:2f:9b:bf:
a3:68:0b:40:ac:68:d2:c0:0e:fe:a0:47:96:6c:79:36:d3:d4:
33:21:59:a9:30:e1:50:f6:03:0f:72:56:68:3f:64:80:15:4e:
42:b2:53:0a:9f:ba:0c:3c:43:28:09:9d:6b:ad:d8:1f:80:de:
8d:72:52:6b:c8:40:75:bc:c5:2d:9a:f8:0b:76:71:c8:23:ef:
31:6d:3c:0f:73:8a:68:79:eb:99:f4:c9:45:43:53:d7:d5:fa:
a8:4f:70:6e:e4:90:70:fb:ae:5f:5d:9a:19:66:95:64:5a:ab:
3b:dd:50:d6:10:c2:fe:6e:57:a6:a0:46:aa:4e:ab:a9:b1:1e:
51:94:a8:e4:33:d3:4d:ff:f0:14:de:3c:93:f3:ff:98:34:7a:
71:33:c6:f0:09:aa:72:bf:44:ff:a2:ca:c9:7a:e4:f2:f4:31:
0d:a7:70:29:dd:37:00:af:a1:6d:a7:66:47:4a:2c:18:92:5c:
7e:b9:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org