Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/d6xSavOPgK7mj2vgYj6OV7igo18.roa
File: d6xSavOPgK7mj2vgYj6OV7igo18.roa (raw, json)
Hash identifier: 3vwpRcRUxkCeM2WgHk5sRjl/wOeh2OdIGN6iahCfFW8=
Subject key identifier: 77:AC:52:6A:F3:8F:80:AE:E6:8F:6B:E0:62:3E:8E:57:B8:A0:A3:5F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09733D10
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/d6xSavOPgK7mj2vgYj6OV7igo18.roa
Signing time: Fri 21 Jan 2022 13:40:25 +0000
ROA not before: Fri 21 Jan 2022 13:40:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62068
IP address blocks: 89.190.159.0/24 maxlen: 24
185.242.226.0/24 maxlen: 24
194.50.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158547216 (0x9733d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 21 13:40:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77ac526af38f80aee68f6be0623e8e57b8a0a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:cb:4c:79:1d:97:3d:19:2a:f6:f9:9d:4a:
61:4a:b2:ad:2e:5f:86:6d:2e:61:97:ec:ec:4e:77:
a4:c9:09:f8:e3:be:49:54:ce:4c:5a:b1:43:49:08:
db:60:a2:30:63:b9:d4:4a:66:a2:21:78:d0:fb:f8:
42:67:1f:62:a7:17:7f:92:5a:99:1e:e3:f8:03:9e:
87:30:60:6f:b8:96:1b:db:d5:be:43:a6:73:02:e7:
bc:be:41:bb:bd:e1:a8:e3:2b:97:84:1b:fe:ba:96:
f1:bc:3b:be:23:7c:87:b2:52:21:2e:d1:58:ff:14:
85:33:49:e5:c1:67:8d:f7:78:1e:0e:4a:bf:0e:d1:
0b:5e:5f:7f:af:4d:cb:68:6e:5a:1c:94:79:20:27:
0e:44:07:41:a7:6a:50:60:ce:2b:d8:be:59:f3:1b:
60:46:e8:7c:07:84:e8:53:e0:bd:ab:8e:77:74:89:
d3:0d:34:53:04:92:35:0c:ec:4b:2f:ff:47:8c:e5:
8e:14:46:49:46:32:38:d9:19:46:a6:ce:e6:37:c5:
86:ae:84:26:b9:a5:98:45:68:45:90:4b:03:9b:6a:
74:3d:cc:a1:80:75:15:dd:d0:08:cd:13:8c:5d:49:
08:4b:0e:36:df:71:7a:b3:7f:ea:31:65:8c:90:2b:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AC:52:6A:F3:8F:80:AE:E6:8F:6B:E0:62:3E:8E:57:B8:A0:A3:5F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/d6xSavOPgK7mj2vgYj6OV7igo18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.159.0/24
185.242.226.0/24
194.50.16.0/24
Signature Algorithm: sha256WithRSAEncryption
98:27:5d:c9:00:fd:14:95:91:60:72:f5:89:12:e2:5d:69:e9:
e2:c6:90:23:99:c3:f3:0c:96:f0:f1:30:d8:83:53:c2:65:65:
d0:30:bb:59:2b:34:23:a9:e1:86:92:ed:ce:d3:2d:bc:d9:db:
86:71:06:87:45:ff:6c:f2:c5:d0:17:65:ba:e5:41:2b:ba:93:
21:99:49:70:a6:50:11:ed:95:01:05:51:cf:4d:b3:dd:84:db:
5b:85:49:39:e0:fc:3e:35:14:10:81:85:f9:95:bf:16:4c:35:
c8:60:89:84:c9:62:03:ce:b8:da:dd:b9:1b:9b:4a:f7:d7:22:
da:79:b9:63:25:09:b6:8e:6c:2e:7e:73:c8:cc:3e:14:98:ba:
5b:85:20:6e:2c:55:34:9c:60:67:ac:ff:df:58:ce:fd:5c:3e:
5f:8d:86:96:98:c2:78:bd:a9:ef:71:ad:6d:c2:9a:5a:de:25:
aa:2d:31:d3:92:98:a1:de:ec:00:9c:93:16:af:0f:18:03:80:
65:ff:7d:c5:9c:04:e3:4f:59:14:a3:7f:51:f4:ac:74:8a:0f:
c6:66:d0:14:fc:fa:2f:3f:8d:c9:a0:41:27:b8:76:67:85:67:
cd:d7:1c:4c:7d:56:16:99:a9:93:e7:23:eb:99:77:fd:b4:7b:
da:0d:95:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org