Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/CNZRz4tIF4MR8RGRhOVPwp8AWkc.roa
File: CNZRz4tIF4MR8RGRhOVPwp8AWkc.roa (raw, json)
Hash identifier: x7+JRuNBaOXyOW7hUl7BL66S7Ay5tiwrWbpojHG506k=
Subject key identifier: 08:D6:51:CF:8B:48:17:83:11:F1:11:91:84:E5:4F:C2:9F:00:5A:47
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 051134A5
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/CNZRz4tIF4MR8RGRhOVPwp8AWkc.roa
Signing time: Sat 01 Jan 2022 12:03:27 +0000
ROA not before: Sat 01 Jan 2022 12:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60331
IP address blocks: 89.30.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85013669 (0x51134a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 12:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d651cf8b48178311f1119184e54fc29f005a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:4b:2e:02:d0:31:4e:e7:4a:01:c8:55:c2:
61:42:e4:7b:4e:4c:58:0a:83:07:11:62:c0:52:04:
b8:15:07:30:3f:d8:a3:e1:7e:01:b4:29:62:07:3a:
59:5b:70:9d:fa:c5:06:c9:0c:b2:3f:70:ab:92:28:
4d:87:d5:0d:d1:f6:2e:61:73:36:9a:0c:94:be:4c:
ec:7f:d3:20:fd:f6:50:95:6e:aa:a9:43:37:96:0e:
55:28:73:92:34:1f:97:ae:2e:29:a8:1b:5f:92:45:
78:21:45:a9:67:e9:e9:f8:10:3a:17:4f:9c:6d:c2:
2d:c0:7a:32:27:87:40:89:75:fb:a0:59:5a:5d:3a:
65:3d:11:65:91:ee:6e:3f:cc:83:8d:d2:59:10:86:
28:fa:ac:6a:12:a8:07:9e:07:6e:ea:b8:64:33:29:
d9:5d:49:d9:ca:d6:44:17:d8:5b:a8:0b:bc:f1:0c:
34:2e:dd:23:b5:bc:4e:65:53:8e:b5:ec:6a:cb:27:
3f:72:88:c9:e9:41:fe:b7:86:bf:18:2e:7d:6b:83:
ce:84:74:32:f4:7c:da:b3:93:c0:1f:a0:16:27:35:
e8:56:4c:e3:2d:74:7e:b5:df:2e:74:b3:40:ba:49:
4f:7e:55:0d:dd:35:4a:e6:b3:46:88:6d:6f:fa:4a:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:51:CF:8B:48:17:83:11:F1:11:91:84:E5:4F:C2:9F:00:5A:47
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/CNZRz4tIF4MR8RGRhOVPwp8AWkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:76:69:96:d4:79:9f:d5:3c:48:03:ce:8a:04:e7:52:8c:f6:
fe:ab:3e:bf:02:59:39:c8:02:99:d5:cb:43:8e:b0:23:d2:33:
83:b5:05:e9:27:6d:34:ca:66:a2:08:03:97:c1:f2:be:7e:8a:
ce:db:8b:f1:38:41:5e:15:d3:91:6d:dd:60:dd:79:8e:21:71:
02:a2:3c:bb:5e:44:31:d0:10:48:d6:e8:59:d4:42:54:a6:c8:
a9:c9:c9:47:a0:fc:36:55:ce:ef:d0:22:61:38:58:4d:ed:d1:
97:e3:85:a9:f4:2e:e4:64:28:02:1f:10:80:5b:1c:7a:cd:95:
d7:05:15:f6:6e:9a:cf:15:98:e4:d4:86:06:79:c0:d1:e9:c5:
b2:42:64:48:34:ab:27:22:b8:75:e4:88:43:92:7b:ed:30:12:
45:d5:71:06:28:f2:fc:86:cc:43:9a:df:b6:d7:1c:8a:37:e1:
10:a7:db:b6:64:e9:b8:4e:98:fe:72:6f:a7:47:ff:27:71:59:
fd:6f:0b:8d:dd:a5:18:52:72:6f:c9:20:54:62:6a:ce:f8:a4:
57:28:cb:6d:02:7e:92:7b:d3:fa:a9:b3:13:da:ec:10:29:77:
4f:b8:65:60:1c:e8:af:cd:54:c9:70:53:5b:f7:08:4c:d5:e8:
80:86:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org