Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/02CqSbZ-H3sax8uAdIiEukVDaiI.roa
File: 02CqSbZ-H3sax8uAdIiEukVDaiI.roa (raw, json)
Hash identifier: e0Y8+xymFF2L/MyOqqjX0BUOTfcUWS6ZdlBQqpR4JQs=
Subject key identifier: D3:60:AA:49:B6:7E:1F:7B:1A:C7:CB:80:74:88:84:BA:45:43:6A:22
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 0181D99EABBC40A2868EEE285CA7B03BBB64
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/02CqSbZ-H3sax8uAdIiEukVDaiI.roa
Signing time: Thu 07 Jul 2022 17:04:23 +0000
ROA not before: Thu 07 Jul 2022 17:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48671
IP address blocks: 89.38.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:9e:ab:bc:40:a2:86:8e:ee:28:5c:a7:b0:3b:bb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jul 7 17:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d360aa49b67e1f7b1ac7cb80748884ba45436a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:4b:a2:48:35:ae:02:84:15:f2:e7:ab:82:
87:70:d2:40:f9:86:b3:92:02:ce:44:86:a5:dd:8d:
0b:d2:cb:a8:50:fa:c6:d1:50:1c:7b:0b:d0:f1:d7:
da:06:17:e2:16:52:db:4b:dc:84:00:27:fb:93:14:
48:51:4c:f1:00:40:02:c7:86:ab:88:05:8f:6a:fe:
5d:95:46:b5:2b:0b:91:f4:c3:d5:89:f2:15:a4:af:
00:fc:44:b2:32:8a:ba:0d:68:28:ce:37:fd:17:28:
d9:57:2b:b3:25:77:bd:e3:a5:47:8d:7d:83:6f:db:
57:bf:d5:ce:ee:42:fa:17:aa:b0:bb:1c:91:8d:ba:
e2:03:f5:fc:ca:d0:f1:3e:53:8e:eb:33:7e:c2:ee:
38:0c:c0:25:de:49:01:81:d2:93:ed:34:3a:07:d4:
eb:2d:4c:34:f0:ea:1a:80:af:f7:5f:d7:ae:9d:c3:
5f:98:32:ba:08:69:52:6a:e0:a3:1b:d0:24:f1:bf:
9f:0b:cb:ba:0c:e3:14:f9:f8:e5:4f:2c:01:70:d4:
1c:77:c7:69:b6:2c:78:17:b2:65:f3:2a:74:cd:79:
e7:c4:ea:66:b6:e1:db:7e:58:e0:60:71:87:c5:65:
c8:0f:b7:bd:6a:25:55:45:43:68:a1:25:ab:d1:20:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:60:AA:49:B6:7E:1F:7B:1A:C7:CB:80:74:88:84:BA:45:43:6A:22
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/02CqSbZ-H3sax8uAdIiEukVDaiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a0:09:4f:7a:7f:5e:be:66:46:b2:2a:63:a4:03:b8:23:bb:
39:80:d2:e0:34:10:45:27:37:ea:33:08:c4:d1:6d:16:a6:bc:
de:c6:d4:d4:f9:36:cc:8a:27:95:1f:f1:b1:f2:75:59:60:45:
9f:f1:00:d8:81:d3:a5:c9:cc:c2:f2:74:20:9b:59:3c:96:4b:
18:b3:5c:d8:64:11:4d:b0:32:94:e8:da:69:34:ca:56:05:f7:
50:b8:ec:98:67:f0:e7:d4:5e:47:52:de:fe:5a:b7:81:1a:68:
55:44:14:97:c2:58:29:1b:41:71:f6:a2:6e:0d:f0:d4:7a:6e:
5f:71:a0:37:77:1d:06:2c:c9:3a:ba:25:f6:79:d0:d7:c7:18:
7e:b1:75:54:99:90:f1:f8:f6:24:50:8d:62:04:b4:22:67:18:
20:b3:ee:60:24:0a:64:f7:06:99:46:33:b3:e7:52:fe:eb:1b:
46:3b:28:93:97:7c:58:3d:c1:f3:40:f6:f7:50:20:4c:0d:ef:
1e:bb:30:7b:52:e7:58:56:5b:9b:0b:8b:08:e5:5f:35:04:75:
18:ac:bc:dd:58:4b:1e:64:cb:40:cd:89:8b:b4:c5:dc:f6:ef:
d1:04:1c:45:67:f8:d8:cb:72:d2:11:68:03:86:7d:eb:00:82:
0a:92:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:54 2024 by rpki-client on console-ams.rpki-client.org