Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/jAKIArbgt5YPYU-YY0QpGqOytHw.roa
File: jAKIArbgt5YPYU-YY0QpGqOytHw.roa (raw, json)
Hash identifier: ssAz7iZ8kCkhSOHxvy2MKADrWiaV9xbFbRx1tI4G4Hs=
Subject key identifier: 8C:02:88:02:B6:E0:B7:96:0F:61:4F:98:63:44:29:1A:A3:B2:B4:7C
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 1937D5FD
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/jAKIArbgt5YPYU-YY0QpGqOytHw.roa
Signing time: Sat 01 Jan 2022 08:55:18 +0000
ROA not before: Sat 01 Jan 2022 08:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 89.35.174.0/23 maxlen: 24
89.35.2.0/23 maxlen: 24
89.191.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423089661 (0x1937d5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 1 08:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c028802b6e0b7960f614f986344291aa3b2b47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:5a:2e:9c:15:b6:cc:2c:18:70:c8:8d:76:
0a:9f:64:72:2d:85:4b:59:73:ae:84:15:ef:a8:1d:
32:c0:58:4f:22:18:ec:20:b9:1c:d0:c7:c3:ff:bf:
e0:d8:5f:ab:1e:7d:2f:60:ac:26:18:62:f9:69:6f:
10:fa:ea:83:f2:bb:4a:07:fd:6e:0b:40:77:bb:3b:
58:b1:66:b2:96:64:0c:7d:5a:55:31:5a:f8:45:3f:
c9:dd:1b:2a:4f:bb:31:91:7d:29:5d:cd:fb:ce:4d:
b9:97:3a:43:ce:3e:5d:6a:81:e8:14:a3:65:64:fa:
fb:05:2c:3d:ef:e0:12:88:82:73:3d:a5:9a:fe:f8:
ba:6f:3c:e3:c1:68:0e:4b:f3:05:ec:d7:ba:80:1e:
c3:d3:81:65:41:44:c0:ab:0a:a4:b1:c5:8c:0c:57:
ff:fb:60:99:09:d7:50:6d:4a:1e:c1:3f:c0:8f:b5:
a1:bc:6d:30:eb:34:f7:61:3a:07:5e:6f:c5:ef:03:
aa:62:1e:cb:ea:19:88:6a:a1:6f:66:ce:f9:3e:f4:
d3:e9:a3:89:5f:6c:02:45:77:2a:62:c6:e0:b0:ae:
15:6a:8b:b0:58:7f:55:16:44:eb:f5:09:37:60:9f:
c2:8a:5b:2e:43:dd:0e:a6:4b:f6:88:ac:ee:36:20:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:88:02:B6:E0:B7:96:0F:61:4F:98:63:44:29:1A:A3:B2:B4:7C
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/jAKIArbgt5YPYU-YY0QpGqOytHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.2.0/23
89.35.174.0/23
89.191.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:29:6d:c2:19:a9:72:11:88:0c:e6:3c:97:4c:0e:a7:36:1e:
71:4b:3a:1e:8d:ac:bf:73:d0:65:74:f6:67:23:71:5c:87:03:
a7:a4:88:f0:2d:9a:89:fa:c5:73:4f:04:1f:65:77:04:b6:69:
cd:db:cc:4e:bd:e7:fe:2c:21:1c:bc:1e:43:70:df:62:26:22:
41:0b:de:3e:68:59:51:78:5e:7f:37:5f:47:76:be:7a:6e:00:
7e:fe:44:6b:e4:cd:e6:07:04:bc:b9:6d:1a:71:84:d1:92:09:
71:f4:a5:72:43:a0:19:4b:b9:88:97:49:6f:8c:6e:c7:24:2c:
e4:34:93:4c:1c:1c:8a:bd:b1:44:68:9e:b9:70:ab:f2:d2:94:
fd:44:4a:77:68:57:26:bc:02:c7:a7:6f:d9:55:83:f9:e0:fa:
1f:1e:be:92:b7:8e:9b:95:9e:ef:71:d0:0d:42:59:14:47:fa:
a9:96:d7:c6:6a:13:34:1e:4a:81:09:12:3b:3f:83:73:b6:f4:
ad:3e:db:2f:15:f4:6b:9b:b7:c3:6e:41:c9:0a:36:03:e2:0f:
03:17:13:b9:b2:8c:c3:51:1a:1f:b2:3c:16:23:75:9b:45:ed:
6c:fa:40:cf:a6:00:51:22:79:eb:7a:9f:da:05:83:e0:96:30:
43:65:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:26 2024 by rpki-client on console-ams.rpki-client.org