Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/myM5B6FQ4Zba8bQ9JoQ4ysyMHp0.roa
File: myM5B6FQ4Zba8bQ9JoQ4ysyMHp0.roa (raw, json)
Hash identifier: y6G08+ogX9baoAPX6Lhk5zyVA7E6XqedMqfCGoNHCww=
Subject key identifier: 9B:23:39:07:A1:50:E1:96:DA:F1:B4:3D:26:84:38:CA:CC:8C:1E:9D
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 0181D6FC5225DC2D9A7473E31CAC2B343B03
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/myM5B6FQ4Zba8bQ9JoQ4ysyMHp0.roa
Signing time: Thu 07 Jul 2022 04:47:49 +0000
ROA not before: Thu 07 Jul 2022 04:47:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51441
IP address blocks: 89.46.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d6:fc:52:25:dc:2d:9a:74:73:e3:1c:ac:2b:34:3b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jul 7 04:47:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b233907a150e196daf1b43d268438cacc8c1e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:f0:94:c5:b2:75:65:97:61:a6:08:78:b4:
6d:d9:11:3a:b3:27:d7:36:d3:22:92:49:42:76:5d:
8a:be:ad:74:59:02:39:0f:ef:af:b5:ef:0e:d4:1e:
77:4f:52:0c:57:f8:ea:7a:2a:47:ef:04:68:6a:34:
dc:5d:76:f0:2a:e1:ae:6a:1f:35:a4:a1:74:37:a9:
2f:0f:35:66:f8:1b:9d:51:a4:60:3f:7c:92:4d:49:
9f:8e:79:68:af:53:d4:92:da:f9:2e:95:f8:7e:84:
6c:82:17:79:ca:06:0f:a2:dc:14:a4:8b:3b:9b:bd:
2e:8e:20:82:af:97:71:c9:58:f9:c1:37:e0:2b:68:
84:d3:f2:3f:e1:87:67:f0:f1:3e:2f:fd:51:95:60:
56:9f:39:f2:8a:b1:f1:8a:77:56:17:d2:01:b1:9b:
3f:41:17:e2:7d:e6:22:7e:a1:70:fa:fc:6a:ac:be:
1c:4b:91:17:ea:6f:af:52:a2:05:d9:11:38:54:81:
87:55:a4:25:f5:e2:bc:91:27:29:98:27:db:73:f1:
9f:0c:bd:27:a5:7e:6b:68:66:2b:dd:ef:b1:a6:25:
d6:96:73:e2:22:2c:ee:40:01:cc:0b:a8:f0:15:15:
51:03:74:b5:66:1e:3e:85:0f:7b:92:ee:be:73:d4:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:39:07:A1:50:E1:96:DA:F1:B4:3D:26:84:38:CA:CC:8C:1E:9D
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/myM5B6FQ4Zba8bQ9JoQ4ysyMHp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:03:67:b8:ed:ba:dc:62:74:13:2c:23:79:8a:ee:37:62:b3:
d4:d4:93:f2:fa:eb:2a:3b:29:72:bd:67:4a:62:b1:a8:56:79:
75:0a:40:07:9c:93:4a:b4:dd:f9:64:37:16:2d:9e:88:95:ab:
34:81:8e:4e:af:aa:c6:a1:fe:98:4b:f3:02:35:a4:47:f8:c9:
73:b8:56:48:26:94:c9:2a:44:49:9b:e2:f4:19:4b:1f:50:ed:
23:23:b2:0e:13:95:ed:cd:c1:63:2f:28:20:1e:fb:e2:dd:ea:
4d:4c:bf:3b:59:5b:09:85:53:bb:93:09:05:9f:26:a7:e4:07:
b9:70:9f:f4:35:47:9b:53:96:89:dd:8d:e0:8a:8e:23:f6:74:
67:3a:c0:32:27:e7:54:52:d2:c4:51:a2:54:7f:ba:f5:70:b2:
92:5d:13:22:c7:56:c7:71:34:d2:bd:45:4f:23:43:ab:5a:31:
39:c6:2d:66:1a:a6:b6:bf:c0:e4:f7:c7:12:69:9e:ad:96:e1:
90:87:89:d6:03:76:88:f7:41:13:4c:16:0e:2d:12:71:c6:e6:
ba:36:8f:08:99:ae:8e:06:66:b0:4e:ce:87:34:f4:58:52:00:
cc:83:67:c5:a9:5f:f4:79:a7:ba:c1:d8:a2:33:57:b5:e6:b2:
eb:91:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-ams.rpki-client.org