Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/N9mbx8MgjVLlTYyB1HsSt0VwBuE.roa
File: N9mbx8MgjVLlTYyB1HsSt0VwBuE.roa (raw, json)
Hash identifier: CImRKI0v622vCLgUxe0axAkZ6o3dd+QO7/yRm7XoR9A=
Subject key identifier: 37:D9:9B:C7:C3:20:8D:52:E5:4D:8C:81:D4:7B:12:B7:45:70:06:E1
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 01851C66289383CBED99057FFF6288B2E427
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/N9mbx8MgjVLlTYyB1HsSt0VwBuE.roa
Signing time: Fri 16 Dec 2022 19:25:35 +0000
ROA not before: Fri 16 Dec 2022 19:25:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41088
IP address blocks: 89.190.64.0/19 maxlen: 19
89.190.85.0/24 maxlen: 24
2a00:bfe0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:66:28:93:83:cb:ed:99:05:7f:ff:62:88:b2:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Dec 16 19:25:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37d99bc7c3208d52e54d8c81d47b12b7457006e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:a3:e9:36:c2:21:4b:07:56:57:2f:0e:af:
99:f2:18:56:7d:4e:c2:c6:a8:ab:16:63:69:93:ac:
80:2d:4e:0d:98:4a:a4:d2:b8:de:9c:0e:12:76:0c:
8f:80:84:c8:d9:3c:a5:f3:b6:a6:c7:cd:26:70:b1:
23:5e:8e:54:75:68:18:69:83:68:18:ad:23:30:11:
2e:c6:ef:3b:fc:a5:bf:e0:22:e2:7d:de:1c:8f:63:
27:76:38:46:ad:e9:7d:47:22:e4:9c:75:ca:a8:7e:
76:4b:be:05:fa:d9:85:d9:0c:4f:8c:9f:f6:7b:8b:
f6:a0:32:00:e5:c2:12:d6:de:15:75:00:6d:c9:1d:
04:46:0e:22:4c:6e:63:3c:45:27:fe:50:16:d2:c7:
e2:0a:24:ec:29:1b:4c:07:a5:b0:80:21:90:8b:77:
34:91:ab:80:12:b9:ef:2d:b9:ac:05:59:7b:f2:e7:
ee:87:cf:77:2c:40:39:55:86:94:65:d4:47:13:a7:
60:bb:8c:85:33:52:29:42:5d:7a:dc:84:a7:97:e5:
ea:66:52:01:2f:2e:50:8a:00:90:99:1e:51:28:b2:
b9:00:fa:86:ea:ed:d0:66:37:7e:3f:40:f3:a1:75:
3a:07:69:eb:28:7e:b3:68:0e:3d:ce:11:c2:19:74:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D9:9B:C7:C3:20:8D:52:E5:4D:8C:81:D4:7B:12:B7:45:70:06:E1
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/N9mbx8MgjVLlTYyB1HsSt0VwBuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.64.0/19
IPv6:
2a00:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:cd:77:2f:41:48:6d:fb:f0:c2:a8:8e:91:81:a4:f3:5a:9c:
e3:2b:4a:04:ba:04:7e:51:5b:1e:98:1b:d4:54:33:15:6d:d4:
6e:8c:2c:69:30:47:65:3f:ab:ee:45:2b:2c:53:22:5b:4a:bd:
f8:6d:d5:aa:cd:9f:95:d6:07:e5:96:51:3a:a3:5b:9f:4d:39:
35:94:65:6f:95:64:1f:4b:33:37:88:8a:d9:53:4d:b9:49:12:
8c:54:83:21:3e:36:6e:b7:14:8f:87:e8:85:15:51:3a:0b:58:
6a:ba:9f:f3:b1:bb:76:52:e8:65:2b:56:8e:76:b2:44:bc:a6:
f9:e3:d0:85:4b:71:4e:b7:5d:3a:a9:35:c0:5f:c3:2c:1f:66:
76:a6:12:e3:cc:77:fd:10:0b:9f:5f:91:7a:49:3e:98:e6:27:
ed:76:e9:73:6b:8f:86:2c:65:7d:f8:9d:3d:d3:7a:81:e4:96:
9e:ee:02:26:45:a0:6d:ee:85:d2:06:6b:f6:bb:16:f2:7d:02:
4e:bc:ab:ee:42:78:f7:e3:73:04:ea:77:78:64:15:e6:cf:d2:
78:7d:92:38:15:02:83:5e:47:17:d7:f1:ae:f2:ac:fe:69:8c:
ea:5d:ff:6e:21:d5:ae:f8:35:32:76:ee:60:c6:80:6c:95:1b:
f3:d4:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:34 2024 by rpki-client on console-fra.rpki-client.org