Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Q07zIhnHKJoHq6BC1cqnnmkd2Cs.roa
File: Q07zIhnHKJoHq6BC1cqnnmkd2Cs.roa (raw, json)
Hash identifier: M/CU6tPRD8iAHZhBHzXlmFT+QMRmWZFbKuiNo3P6S8A=
Subject key identifier: 43:4E:F3:22:19:C7:28:9A:07:AB:A0:42:D5:CA:A7:9E:69:1D:D8:2B
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0B45C56A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Q07zIhnHKJoHq6BC1cqnnmkd2Cs.roa
Signing time: Sat 01 Jan 2022 13:04:57 +0000
ROA not before: Sat 01 Jan 2022 13:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39391
IP address blocks: 89.33.176.0/22 maxlen: 24
89.47.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189121898 (0xb45c56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 13:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=434ef32219c7289a07aba042d5caa79e691dd82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0b:a9:e3:55:07:56:87:8b:19:41:ca:43:c9:
0a:b0:85:e2:5b:9d:70:d4:29:a6:db:6a:f0:96:ac:
96:2f:d0:51:b8:67:c3:98:55:81:87:7d:76:1b:c7:
37:b3:74:29:08:a1:df:f1:ea:cf:85:ff:7c:de:3d:
79:18:68:e3:ef:40:c4:13:31:df:88:61:83:c4:d7:
bc:7a:09:a6:0a:ab:ee:a5:09:bd:00:4e:41:c5:d5:
26:fd:97:d2:68:43:fe:62:77:05:f8:43:52:df:77:
b8:d6:27:99:79:6e:06:65:73:92:ae:b6:b7:2b:a5:
61:3f:0e:40:89:fa:fd:cf:df:b1:aa:58:ee:a9:0e:
d6:9f:f5:ea:2d:e3:6b:fe:dd:13:1d:e4:ac:36:b9:
53:8c:95:19:23:70:8d:fc:de:ca:9e:7d:b8:a6:86:
e0:e7:f8:60:35:d0:54:a5:cf:f7:ac:90:d1:2f:4c:
94:28:91:c1:f4:8b:36:ab:70:17:3d:ba:c2:26:71:
ae:90:24:bf:53:0d:38:e4:83:05:1e:86:da:8c:6a:
e1:29:dc:8a:dc:a0:42:29:5c:dd:d5:5f:63:c4:ea:
ec:fe:5a:2b:31:6d:dd:5f:21:ad:e1:1e:72:97:63:
8e:c8:f9:0d:97:3b:20:f2:7c:36:5c:f4:1a:cb:20:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:F3:22:19:C7:28:9A:07:AB:A0:42:D5:CA:A7:9E:69:1D:D8:2B
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Q07zIhnHKJoHq6BC1cqnnmkd2Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.176.0/22
89.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e5:75:3d:1c:96:84:79:29:b6:25:72:f3:fc:49:d1:f4:02:
84:7f:cd:eb:8f:d7:0b:de:ab:b7:44:13:36:0f:cd:2e:3c:3d:
02:30:0c:a9:53:9b:13:51:fe:43:b2:1a:3c:40:ad:56:38:df:
4d:93:e2:b8:c2:7f:a6:9c:a9:04:d3:5f:1b:e7:8f:28:5b:0f:
b1:d9:7d:c9:bb:40:bb:46:89:f3:ac:a2:29:77:4b:dd:47:28:
c3:0c:2b:25:2b:85:f0:4f:0e:2e:a0:f7:95:ae:00:3d:8e:dc:
56:29:c4:21:c6:12:02:1c:d6:d8:cf:e1:cb:e4:d6:43:4b:c8:
7d:f6:d5:13:de:40:c6:94:4f:bd:40:fb:e3:37:47:e0:80:e4:
1f:8b:fa:bc:3a:d0:5d:73:40:a3:eb:b6:e1:ae:f5:a7:3d:7c:
f3:fb:89:7f:5d:54:d7:53:55:cf:09:38:c6:05:ca:3e:a1:26:
c1:f9:c5:07:2a:b2:3a:31:6f:e7:44:ba:93:b1:75:05:61:88:
35:12:43:ab:2e:f3:c3:90:e1:56:69:31:3b:06:d6:69:d1:f9:
59:78:bb:86:a4:63:4d:e3:c0:db:69:12:8b:50:e1:22:b2:a9:
0e:11:e0:35:31:ac:4b:ce:60:48:af:6a:12:ab:27:8e:15:73:
6e:9d:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org