Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/r0JD5IGqSjfW9ZX1phe4JakGJBg.roa
File: r0JD5IGqSjfW9ZX1phe4JakGJBg.roa (raw, json)
Hash identifier: BxNrbQsMNWGWL5qdNUmyvyUKSoEJBXEc9G6Ixo/dUyM=
Subject key identifier: AF:42:43:E4:81:AA:4A:37:D6:F5:95:F5:A6:17:B8:25:A9:06:24:18
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0182EAD8B338551B1D2957B601CEAA72037C
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/r0JD5IGqSjfW9ZX1phe4JakGJBg.roa
Signing time: Mon 29 Aug 2022 18:24:06 +0000
ROA not before: Mon 29 Aug 2022 18:24:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 89.43.41.0/24 maxlen: 24
89.43.42.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:d8:b3:38:55:1b:1d:29:57:b6:01:ce:aa:72:03:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 29 18:24:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af4243e481aa4a37d6f595f5a617b825a9062418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:8d:cc:61:76:9a:97:36:95:55:1f:f8:73:
8b:9c:1c:72:a7:0b:c2:1e:8b:c8:ee:36:e1:c3:3f:
9a:a2:8a:fb:13:5e:78:18:1e:6e:a7:b9:52:c8:68:
18:77:34:72:c7:3e:78:e8:8e:6c:88:6d:54:c9:58:
99:6b:98:c3:4c:d7:a6:e1:c9:6c:71:4f:59:cd:6c:
6b:3f:95:32:15:18:29:77:af:e3:74:15:ed:63:6a:
df:8a:21:52:99:76:39:f5:96:f8:f2:ee:e0:f7:61:
94:45:0d:f5:f1:42:41:74:12:c3:6e:eb:f7:80:80:
8f:5e:af:01:de:74:29:2b:7d:1a:5c:1c:fb:4a:3e:
9b:af:7e:af:3a:36:8b:6b:e2:b4:7f:ee:89:3b:30:
80:ac:6f:28:b4:18:e8:41:2f:f9:28:b6:5a:84:48:
af:78:48:7e:93:9f:d5:03:a9:4a:4e:7c:23:f1:2f:
e8:b0:d3:c2:11:9c:3a:62:50:92:36:39:f3:5b:3b:
55:cf:a3:65:42:62:c5:da:83:cd:05:54:6f:74:1e:
ee:a5:14:14:2e:75:1e:b3:58:da:d5:24:6a:6b:ba:
bc:ee:b6:ba:a2:b2:aa:03:75:cd:e4:0f:51:a9:ae:
00:65:42:e2:62:88:f0:cf:9a:44:81:70:52:ad:3c:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:43:E4:81:AA:4A:37:D6:F5:95:F5:A6:17:B8:25:A9:06:24:18
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/r0JD5IGqSjfW9ZX1phe4JakGJBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.41.0-89.43.42.255
93.114.171.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fd:34:c8:42:c9:af:d7:8a:a0:bd:6d:04:88:0a:d3:06:d1:
72:b4:b5:11:9e:27:af:53:53:e9:ac:09:a2:fd:3f:22:f7:52:
6b:5e:1a:93:5b:f2:7a:83:1d:fe:93:a2:af:50:f3:2d:49:ce:
cf:84:08:0c:3b:51:dd:eb:3a:a9:db:0c:22:70:5e:67:79:3c:
5f:51:94:46:27:b4:c2:b7:31:8a:84:67:6c:51:6a:a8:7c:bc:
2e:b8:7d:3d:37:00:0b:57:ab:8b:12:3b:cd:be:07:47:de:3f:
4e:97:bd:61:ed:0d:d5:93:e2:f9:1c:5c:c9:50:e8:ec:79:a1:
5c:b5:36:20:b3:26:40:ea:1f:88:2b:52:4a:c4:e1:f8:44:c3:
6c:59:40:05:f9:e5:20:b2:9b:14:96:6e:1b:f6:ed:df:15:84:
a7:05:d2:66:eb:7f:83:19:57:24:30:85:7f:21:7b:3e:59:98:
ef:d8:8f:93:09:df:c5:7d:87:5c:43:8d:eb:1f:e6:fb:9d:90:
34:93:36:d9:cc:a1:91:ae:f7:64:b7:20:9c:f7:47:e3:2e:ba:
14:fa:5e:86:ab:24:f3:00:ab:85:11:76:7a:99:e2:e4:26:40:
08:bd:a4:06:7e:bf:47:83:18:0f:88:31:b5:e2:79:33:92:66:
27:d7:d7:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org