Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/mVgxBP-_afHlxyc92cuQBcTuutE.roa
File: mVgxBP-_afHlxyc92cuQBcTuutE.roa (raw, json)
Hash identifier: cfUC3brCMuXZjHtvvbOa88cCjOSffFYIueK1PYznJ/g=
Subject key identifier: 99:58:31:04:FF:BF:69:F1:E5:C7:27:3D:D9:CB:90:05:C4:EE:BA:D1
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0184C2A62DEE130E6D7DFEF7569F24B8DFC2
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/mVgxBP-_afHlxyc92cuQBcTuutE.roa
Signing time: Tue 29 Nov 2022 09:09:41 +0000
ROA not before: Tue 29 Nov 2022 09:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39205
IP address blocks: 89.33.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:a6:2d:ee:13:0e:6d:7d:fe:f7:56:9f:24:b8:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Nov 29 09:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99583104ffbf69f1e5c7273dd9cb9005c4eebad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:aa:aa:06:4d:92:5c:d4:ca:62:ba:dc:ad:
a6:6d:33:a3:ac:34:a5:d2:01:f0:0b:f2:8b:e2:e4:
bd:64:7e:21:ea:2a:e3:ae:20:60:2d:38:c0:74:d8:
f2:2a:a8:5a:a3:7c:92:d3:4a:5c:51:b9:67:70:21:
54:29:ba:98:fd:ef:c1:fb:84:bd:2d:19:69:09:bd:
0e:c8:34:25:64:3b:1a:80:df:60:96:d2:8b:3c:fa:
10:40:38:73:20:15:df:81:0c:0f:c1:5a:41:31:30:
fc:5b:2b:28:0f:82:30:b9:72:49:d1:f3:c5:98:0e:
60:0e:68:90:a3:1e:28:17:b5:96:aa:ac:be:97:31:
20:8e:6e:f1:44:bb:6e:99:96:45:de:8b:7e:a7:ec:
d2:7c:34:7f:92:1c:b4:c7:61:3b:e9:19:ef:5a:59:
22:39:a4:f2:80:66:cf:95:ae:1d:57:52:50:e4:32:
0d:86:a7:69:e1:e8:1c:f9:a0:b3:2a:c0:a1:12:f8:
5d:aa:7a:2c:68:35:5b:14:d9:07:e8:bc:07:31:02:
71:1a:7b:e0:34:e4:96:7b:b2:73:d5:34:04:72:05:
f1:11:8c:3b:63:11:2f:ff:39:14:9d:e6:a0:45:7a:
32:76:d7:10:b5:3e:c7:d2:3f:6c:8d:38:46:83:35:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:58:31:04:FF:BF:69:F1:E5:C7:27:3D:D9:CB:90:05:C4:EE:BA:D1
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/mVgxBP-_afHlxyc92cuQBcTuutE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.253.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:69:21:80:61:20:98:78:36:7c:48:4e:e5:95:b0:f9:42:36:
32:e1:af:6d:db:2f:46:c9:68:01:c3:de:ee:6b:9a:08:1f:fe:
77:e5:1a:0f:0f:4a:12:fa:5a:bc:dc:1a:67:bf:98:91:7a:b0:
05:6c:21:fd:ac:44:95:e4:d5:17:94:cd:39:2a:23:d4:f7:76:
01:bd:a7:85:ae:76:bc:63:91:ef:c9:12:93:b2:04:10:6c:33:
35:43:5f:87:e4:48:0f:fd:fe:11:b0:3f:6c:28:e7:15:41:f4:
61:7b:a4:e3:83:34:e2:fb:af:dd:de:e0:d4:58:b3:8d:b7:60:
d0:7e:c9:01:0e:af:7c:a1:3d:ab:8c:d3:46:89:27:a5:88:ff:
a1:ff:25:a3:95:a7:75:47:4c:1d:61:0e:94:39:8c:5e:2e:db:
00:ac:d2:f9:10:cb:50:e6:34:fc:04:9a:b7:1a:61:b0:8d:e7:
8f:d3:48:5a:16:a2:16:bd:9e:50:c5:e1:3f:12:14:41:a8:05:
82:7c:9f:ba:76:ca:c4:d4:d1:b3:f3:3d:9d:de:a8:01:a3:64:
e7:22:80:3e:ff:2c:f3:bd:97:e7:68:17:d2:db:e7:f1:ce:cc:
8b:8c:e2:ae:1b:a7:3d:97:50:ee:6f:7b:7b:9b:a4:18:69:4a:
26:2d:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org