Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/V6igsAfZRrpdCfS5SzqPI6KPCkI.roa
File: V6igsAfZRrpdCfS5SzqPI6KPCkI.roa (raw, json)
Hash identifier: oof4Fkl45de3UFnH1kEKD5YQEwpjJlAzIouXWTwmXGA=
Subject key identifier: 57:A8:A0:B0:07:D9:46:BA:5D:09:F4:B9:4B:3A:8F:23:A2:8F:0A:42
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 03E62E3E
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/V6igsAfZRrpdCfS5SzqPI6KPCkI.roa
Signing time: Sat 01 Jan 2022 06:57:58 +0000
ROA not before: Sat 01 Jan 2022 06:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47860
IP address blocks: 89.188.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65416766 (0x3e62e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 1 06:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57a8a0b007d946ba5d09f4b94b3a8f23a28f0a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:9a:9f:3f:59:90:7d:32:1f:70:b0:a2:96:
9e:dd:d4:f0:a6:47:b7:95:96:f8:09:e5:06:ac:db:
95:41:b1:b8:15:29:e9:db:98:f6:71:76:65:c9:78:
57:a3:1b:fe:c9:ac:fc:6d:10:55:58:1a:0a:a5:04:
98:f7:e6:95:05:a4:8a:a9:e0:60:85:09:c7:27:70:
19:e9:33:8b:2c:27:eb:72:0a:39:40:c2:4e:e6:a0:
4f:60:d6:94:a5:a1:a5:29:92:a7:2d:b8:62:0c:32:
48:81:9f:87:b1:87:e7:40:8e:82:43:f9:37:ce:04:
47:a4:ac:d8:5f:20:57:e4:4b:31:7f:07:b8:e4:02:
d2:c1:5a:9f:21:af:c7:fc:2a:55:e6:79:91:c6:05:
71:61:47:c5:3f:98:72:f2:1a:41:cc:d4:80:9d:da:
77:60:f2:e6:3d:99:45:d3:bf:50:d4:a9:48:02:9b:
88:7e:d9:6a:b7:b6:9b:ce:08:78:dd:b1:05:1c:a0:
08:8c:5c:d5:b2:f0:a0:c7:bb:ee:1e:47:e8:cd:81:
ff:90:40:d0:62:5c:69:ff:12:18:3e:62:f5:35:9d:
65:5c:d3:94:2f:e5:ba:dd:77:55:ab:c4:39:42:87:
03:d8:0a:f5:bd:68:30:25:e7:83:f3:91:35:43:87:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:A0:B0:07:D9:46:BA:5D:09:F4:B9:4B:3A:8F:23:A2:8F:0A:42
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/V6igsAfZRrpdCfS5SzqPI6KPCkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.160.0/24
Signature Algorithm: sha256WithRSAEncryption
98:37:0d:df:40:4d:14:18:d4:7c:4f:ed:b7:f8:af:4a:93:89:
5b:b8:9d:b6:bf:ad:d3:77:23:93:d3:56:3b:40:00:63:4e:55:
e2:fe:ac:b7:7e:c8:e2:fb:43:bb:3f:88:eb:5a:a2:a9:75:dc:
26:90:12:59:33:dc:2f:72:06:16:2d:3f:67:58:1c:3e:b8:2f:
ba:d2:ae:02:64:6a:17:56:32:0a:41:18:b6:16:17:06:87:b2:
ff:6e:f1:ef:1e:15:47:51:f3:c7:f2:aa:c8:c6:ff:31:82:96:
6b:41:c0:78:44:4a:e0:d9:21:4d:0c:6f:20:43:e5:48:82:f2:
6c:96:a0:ee:0c:76:9a:aa:57:0b:fc:ed:72:1b:83:f2:ec:5b:
c0:66:85:41:dd:6f:46:0c:24:67:70:c7:64:68:9b:ee:03:d6:
56:64:52:18:cd:67:16:9c:3e:46:c5:92:68:33:20:80:02:34:
3d:e2:f7:e6:74:3b:f7:dd:db:f8:30:2f:f1:b4:69:7c:de:32:
1c:2f:8e:d5:8c:d1:9d:2d:90:42:c0:cd:f8:4e:96:83:af:c1:
4e:9d:42:cd:e4:67:e2:58:27:b6:d1:bb:75:6a:ab:5d:6c:9a:
10:79:37:e1:fb:a0:28:48:d9:b4:d1:8f:3b:f7:c2:d8:4e:f2:
16:1d:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org