Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/H7ffZ8CYTtszmcd8PJIfhFHlqlM.roa
File: H7ffZ8CYTtszmcd8PJIfhFHlqlM.roa (raw, json)
Hash identifier: /ErP2hLdwBHKkXPG3JbB45R84OgsF4Bmpc5bTGV1NHM=
Subject key identifier: 1F:B7:DF:67:C0:98:4E:DB:33:99:C7:7C:3C:92:1F:84:51:E5:AA:53
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018293D84BC85FB13953F808407D632455EE
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/H7ffZ8CYTtszmcd8PJIfhFHlqlM.roa
Signing time: Fri 12 Aug 2022 20:56:42 +0000
ROA not before: Fri 12 Aug 2022 20:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 89.43.41.0/24 maxlen: 24
89.43.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:d8:4b:c8:5f:b1:39:53:f8:08:40:7d:63:24:55:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 12 20:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fb7df67c0984edb3399c77c3c921f8451e5aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:73:60:43:e2:41:57:b0:0b:a4:67:a5:40:
45:42:75:8d:ff:22:54:b7:5f:98:e3:65:a2:0b:d2:
8f:d0:24:e0:c6:73:b6:68:dd:85:ca:7f:4a:1d:cb:
8a:b2:6a:0b:17:14:21:b1:81:11:63:e2:42:aa:c5:
d1:43:47:af:b6:06:f9:76:eb:27:5c:64:f6:b7:dd:
f5:be:c2:dd:d7:94:f8:f1:46:65:fd:5a:aa:b4:a7:
33:a4:72:2d:ca:ab:90:ff:f3:00:2a:89:76:e1:f6:
19:c5:ae:33:e2:96:7d:49:c1:70:09:9c:30:ac:03:
ba:29:e5:61:57:f1:0c:0f:f6:3e:ae:01:4d:c0:35:
2f:6f:36:e1:15:76:56:a7:4e:62:b1:a4:ea:42:7d:
7a:06:de:6b:66:89:ab:f8:18:b4:7d:c4:8f:74:63:
f2:12:e5:49:3e:5f:ec:1e:e0:a9:27:17:d7:d1:3d:
8c:56:7f:03:57:31:fb:f7:35:31:29:1d:a0:8f:a2:
cc:0d:7f:07:dd:76:6b:02:f4:7b:4c:7b:92:29:d3:
bc:55:c4:91:0a:18:fa:9b:ea:66:94:65:82:40:6d:
6f:e9:53:9d:78:2b:1b:bf:5e:69:a9:dd:a7:53:b3:
b9:62:a9:b5:0b:df:5e:06:28:85:9e:d0:9a:bc:7f:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:DF:67:C0:98:4E:DB:33:99:C7:7C:3C:92:1F:84:51:E5:AA:53
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/H7ffZ8CYTtszmcd8PJIfhFHlqlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.41.0-89.43.42.255
Signature Algorithm: sha256WithRSAEncryption
bf:c3:41:09:88:b6:0e:6d:0a:d6:5e:59:00:1a:c4:c0:63:41:
ed:f4:f0:65:18:db:db:9b:fd:d5:1e:0d:b5:54:fe:69:2e:45:
1e:3b:bc:a3:1c:e9:de:aa:f8:d3:cd:93:ab:d2:1d:19:ab:f4:
0e:df:3a:60:d5:38:52:16:ec:69:6d:8a:f4:10:8d:da:88:5d:
0a:e1:37:17:d1:51:5b:0d:c2:17:ec:34:ae:04:ba:85:8d:a4:
c6:1a:99:68:1b:54:1d:dc:b8:9f:e1:84:83:c0:a5:ce:6b:90:
cd:2b:ca:61:6c:0c:3f:70:13:ad:90:9d:1b:94:ee:b4:90:30:
b9:61:c2:ef:ff:79:ee:01:ae:d2:c7:b3:3f:17:23:21:61:57:
5c:c6:eb:30:c1:92:2e:47:b4:a5:b2:7d:0a:e3:36:5a:bf:51:
63:0c:85:58:cb:23:d5:b9:ce:29:cb:80:e4:5f:e4:e3:f1:94:
e6:d3:a7:53:fc:7c:c2:10:d7:f3:90:f2:78:00:ec:68:3c:bd:
f7:e5:76:63:cc:0a:73:6b:22:36:ea:44:8f:88:a3:8d:8f:4d:
f0:a3:5c:8a:ad:2f:c0:93:59:aa:97:cb:23:5b:e9:1f:6c:14:
02:39:1c:cd:95:66:19:fd:d2:0e:54:3d:08:d8:27:7a:36:82:
61:c2:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org