Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SLP30I8XFsEdANhdB5JzX0XyZaA.roa
File: SLP30I8XFsEdANhdB5JzX0XyZaA.roa (raw, json)
Hash identifier: z9iC1sxyU/RQgNJQ6pLoTjrexAnd4bOycXQLpBR7sbM=
Subject key identifier: 48:B3:F7:D0:8F:17:16:C1:1D:00:D8:5D:07:92:73:5F:45:F2:65:A0
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F84EE1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SLP30I8XFsEdANhdB5JzX0XyZaA.roa
Signing time: Sat 01 Jan 2022 16:00:17 +0000
ROA not before: Sat 01 Jan 2022 16:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22439
IP address blocks: 89.190.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150490849 (0x8f84ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b3f7d08f1716c11d00d85d0792735f45f265a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:c7:b1:0f:33:ca:df:27:49:c1:a0:cc:a2:
7a:0c:e7:3c:b0:e0:08:c5:29:b7:7f:d8:e3:53:9e:
75:da:9e:69:42:59:0b:22:f6:96:42:46:a0:13:7e:
72:fb:e3:ca:08:68:58:bc:d1:a6:d6:64:d1:53:b9:
53:74:b6:c3:e8:47:51:cf:9d:b0:29:98:b0:12:c2:
17:f8:e3:bc:2e:a3:04:55:0e:20:1e:e2:37:20:95:
91:d3:61:17:a1:b5:b1:83:53:78:06:0c:eb:87:96:
af:31:37:a4:01:81:52:86:2a:42:24:58:1e:f4:3d:
62:7f:f4:a4:a8:36:c3:12:87:2a:e7:c9:6c:90:da:
0f:ca:2b:1d:8b:5d:91:9d:02:48:ef:e4:54:ee:11:
17:d5:6d:6b:64:bc:19:95:79:56:86:7b:51:a1:c8:
97:d5:38:eb:d7:42:14:42:80:33:60:88:20:2b:48:
2b:ab:b9:cc:89:ff:e7:8d:69:8d:a3:36:a8:a7:4d:
23:b2:fe:b8:42:68:fe:7b:d1:be:9a:9b:10:50:f3:
37:d4:ae:27:30:6e:c0:94:4f:35:fe:17:de:c1:1b:
de:64:5a:2d:75:ed:04:19:bb:4e:44:f0:ba:8c:66:
14:6f:da:10:c9:f8:d4:6f:a1:40:78:7b:25:34:f8:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:F7:D0:8F:17:16:C1:1D:00:D8:5D:07:92:73:5F:45:F2:65:A0
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SLP30I8XFsEdANhdB5JzX0XyZaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.158.0/24
Signature Algorithm: sha256WithRSAEncryption
03:47:40:7a:9e:28:bb:c6:be:0a:0f:ad:58:79:8f:59:a8:99:
df:63:0c:bb:33:a9:c9:b6:4f:c5:d8:bc:a9:53:b9:37:0d:f4:
5b:1a:f2:7d:8a:3a:25:d7:f1:84:1c:bd:57:6d:c4:ae:db:bb:
e2:ca:62:22:3c:7f:c3:71:51:a7:53:b1:ce:0b:12:34:fe:6e:
d8:7d:25:41:cd:07:62:a0:6d:ec:d9:91:bc:cf:7b:71:04:1a:
af:f1:39:a9:e4:cb:a9:d3:e0:a9:d8:4f:62:88:b6:a5:52:5c:
86:ec:39:1d:2a:14:cd:36:10:65:3c:b7:74:53:6f:1f:db:e5:
ee:df:f2:4d:57:92:6b:4c:e2:47:f9:7d:49:cf:68:c7:ae:10:
f9:7a:92:da:d6:ad:8a:8a:94:b2:b1:ca:34:fe:5a:b6:c2:44:
77:41:2b:79:6e:b8:f0:c3:41:76:61:44:59:27:89:59:8b:34:
ca:c7:df:e4:1d:f1:0a:95:7a:e2:50:a0:63:3a:ed:04:ad:45:
7e:bb:89:4a:04:2d:c6:de:b7:eb:d2:28:c5:d5:9f:ab:42:03:
3c:3b:55:9e:91:6c:be:25:b3:cc:ca:63:7c:78:41:b8:e0:57:
60:44:ab:df:91:ab:e1:ab:7e:0f:93:a5:8e:87:81:8a:82:6a:
dc:df:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org