Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/u5cBN9NA7vvzDZ5VhlgUk67VwjY.roa
File: u5cBN9NA7vvzDZ5VhlgUk67VwjY.roa (raw, json)
Hash identifier: QRJjEBiU4r0habUQ5K4tjHxgzd/qUiJZ7UlY9C6g0o4=
Subject key identifier: BB:97:01:37:D3:40:EE:FB:F3:0D:9E:55:86:58:14:93:AE:D5:C2:36
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 0182159AA08237F73F855974FDB0C538F39E
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/u5cBN9NA7vvzDZ5VhlgUk67VwjY.roa
Signing time: Tue 19 Jul 2022 08:37:11 +0000
ROA not before: Tue 19 Jul 2022 08:37:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 939
IP address blocks: 89.105.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:9a:a0:82:37:f7:3f:85:59:74:fd:b0:c5:38:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jul 19 08:37:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb970137d340eefbf30d9e5586581493aed5c236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:24:65:ba:24:5a:5d:92:ba:d5:7d:bb:5c:
ce:e1:84:98:97:78:ff:6f:b2:5a:52:8a:54:84:37:
88:7a:03:7d:c4:59:53:04:dc:49:d3:96:ef:ff:43:
37:0e:18:3b:db:5f:44:67:71:fb:1c:39:6b:64:3b:
65:e7:a6:83:e7:a4:a9:d0:73:78:3c:d2:8f:bc:19:
ba:93:1f:3f:d6:15:24:6e:78:23:58:a7:17:08:eb:
b3:5d:04:84:b5:a1:6d:74:df:f4:f9:49:65:4c:c9:
5f:83:ea:97:af:98:8e:5c:6b:ec:d8:0e:4f:33:19:
24:50:69:9f:4f:9d:c4:47:68:9b:aa:92:84:f9:53:
0f:cc:23:58:a9:a0:b3:ae:b0:28:cf:2b:d9:99:c6:
14:0d:04:72:85:02:4a:b0:71:e4:74:ff:7f:9a:1d:
38:fa:7f:b1:cd:e9:c2:03:a7:37:f5:f3:ff:09:fd:
da:17:6e:be:f7:58:54:ef:0b:a8:99:af:49:c7:9d:
4f:49:4a:13:a1:72:7d:3a:ba:52:35:ff:de:63:82:
f0:e6:cb:90:a2:1b:59:2f:df:10:ad:73:8d:50:4a:
65:f1:bd:f6:0c:5d:80:31:d5:55:9b:07:e5:13:85:
3f:bc:6b:78:a6:34:ab:9f:39:43:41:28:b2:bb:b8:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:01:37:D3:40:EE:FB:F3:0D:9E:55:86:58:14:93:AE:D5:C2:36
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/u5cBN9NA7vvzDZ5VhlgUk67VwjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:53:77:26:d8:85:08:ff:e1:d9:f2:42:25:43:8f:ea:9d:49:
9e:0f:e8:26:41:ed:4e:12:ff:c6:f3:39:f1:05:b1:7e:b0:70:
3f:41:bd:aa:89:02:0c:6c:e4:79:23:90:67:66:88:cc:9c:f6:
04:87:da:f9:17:1b:f9:da:56:5e:7f:70:63:a7:bd:5d:e6:d6:
46:27:d2:34:40:e9:ec:76:1a:2f:5a:62:d4:3c:0e:38:6e:9f:
ee:fa:f6:c3:f6:3f:94:2b:d6:22:18:a6:fd:2c:cc:85:f3:dd:
66:0a:ea:8e:19:f9:9b:5a:d3:f7:00:f8:24:e4:00:6c:11:fb:
0e:95:59:6e:f2:c1:e6:78:29:a6:19:31:55:18:57:f3:07:d1:
2e:e2:c5:7d:8b:64:31:6d:b8:6a:c3:3d:2c:c1:bc:e8:dc:9d:
9c:3c:6e:53:7f:1f:82:58:7a:42:bd:1a:8c:c4:fb:1b:c5:de:
6e:e1:bd:0f:1d:7c:5b:7a:05:1c:44:10:8e:4d:b5:46:60:31:
14:d1:79:0d:99:1c:a0:ef:6c:27:39:11:f2:f0:2e:a4:4a:ac:
47:d0:8d:7b:f6:18:ec:7a:9d:fc:03:e1:ed:b3:d4:ae:4e:f6:
6b:68:e5:cd:b4:ed:3a:69:cd:7a:93:c4:2e:64:63:da:3d:31:
c1:54:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:34 2024 by rpki-client on console-fra.rpki-client.org