Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EMVMwaQlDPk5K9UseQpC1GXZWBU.roa
File: EMVMwaQlDPk5K9UseQpC1GXZWBU.roa (raw, json)
Hash identifier: k/7nRa7UXxoKQNiY6fDRTmWFI+/n1KW6i2THbhmjNuA=
Subject key identifier: 10:C5:4C:C1:A4:25:0C:F9:39:2B:D5:2C:79:0A:42:D4:65:D9:58:15
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA497B5
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EMVMwaQlDPk5K9UseQpC1GXZWBU.roa
Signing time: Sat 01 Jan 2022 05:03:45 +0000
ROA not before: Sat 01 Jan 2022 05:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203120
IP address blocks: 89.34.74.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463771573 (0x1ba497b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10c54cc1a4250cf9392bd52c790a42d465d95815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:63:3a:5a:1b:15:88:c2:db:34:80:5c:9a:
e4:3c:4b:9d:43:50:9b:29:bd:d6:9e:11:a4:f5:d5:
ab:e7:93:01:cb:4e:2d:c8:71:85:95:2b:8e:6b:66:
df:13:33:c7:5b:b8:12:49:0d:c5:1f:7f:e7:1d:a6:
eb:b0:07:a1:d9:c1:46:c9:19:da:0b:76:11:80:30:
a9:02:4c:3b:d1:4e:c3:cf:b5:40:84:ac:f2:6b:42:
c0:a1:7b:4d:a5:48:66:ab:7e:8e:87:d3:96:ef:37:
1c:1b:ac:bb:17:0b:9e:19:9e:03:da:1a:e7:1d:5e:
fb:a1:34:bd:dc:1d:56:cf:03:aa:ff:61:6e:49:0b:
48:4c:f8:6a:50:85:1a:d6:90:28:8d:0e:9f:89:c8:
b4:8f:a2:15:75:60:e7:6b:43:56:14:46:e1:1b:a4:
8b:2e:68:9e:22:a6:9a:32:f2:f7:f7:d9:a4:5f:e1:
f5:68:4f:16:0c:47:aa:91:f1:1d:0c:6b:d7:db:64:
2b:d8:28:c9:3b:fb:eb:bb:7c:ff:dd:e9:da:14:92:
72:40:2f:c2:1a:a4:b3:f8:4e:bb:bd:c7:f7:c7:5f:
a8:8c:6b:41:c6:e6:c5:49:90:03:c7:3a:37:2e:5f:
cf:3f:8c:f3:1e:ff:68:f9:05:29:98:52:d3:4d:bb:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:4C:C1:A4:25:0C:F9:39:2B:D5:2C:79:0A:42:D4:65:D9:58:15
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EMVMwaQlDPk5K9UseQpC1GXZWBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.74.0/23
Signature Algorithm: sha256WithRSAEncryption
21:94:6b:c7:8d:28:16:5d:ee:46:64:e4:36:ec:48:b9:f0:c8:
1f:fa:47:8e:5d:7c:dd:e9:e1:5a:64:2c:ad:80:e0:d5:5d:23:
91:91:d5:8c:d0:d3:9d:bf:43:06:4a:ca:c7:ce:e4:2c:60:40:
2f:9d:77:00:e9:be:ad:03:05:6d:65:9b:76:9d:9d:c7:22:45:
9c:3c:b3:11:d9:f6:be:b8:52:0a:ec:43:93:bf:4c:ce:e3:f2:
23:55:cb:eb:1e:89:fd:dc:6d:4e:27:ac:2e:fa:99:d6:87:5d:
81:75:4d:2a:c6:03:22:7f:1e:d1:38:1b:ed:78:18:a5:ac:b4:
87:a5:57:0b:a1:2a:9e:41:ff:39:f3:84:30:cb:f3:f5:26:19:
ff:1d:7d:d8:a6:70:2d:85:69:a7:b3:30:03:c5:a1:4f:e2:57:
fe:d5:59:fd:60:8a:59:6f:78:cb:f2:8e:68:e7:79:b0:f1:62:
c5:1c:84:2c:6c:0c:91:65:9c:55:04:b2:3c:de:2b:99:55:7f:
61:09:83:02:a9:39:00:53:7e:6e:83:99:31:99:0a:21:ff:45:
f1:7a:87:1a:06:97:4b:25:b7:f9:ed:18:50:6f:c6:a5:82:17:
b2:48:a3:09:48:10:b0:ba:a0:34:46:74:5d:69:33:0e:a9:49:
af:23:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org