Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/sZpPnJvbo-6bfA-hD-qly_2ZduM.roa
File: sZpPnJvbo-6bfA-hD-qly_2ZduM.roa (raw, json)
Hash identifier: /5BeDt5Dk+EmkFqfDz8sapILUYKDl0Nj3HGROralMNk=
Subject key identifier: B1:9A:4F:9C:9B:DB:A3:EE:9B:7C:0F:A1:0F:EA:A5:CB:FD:99:76:E3
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01835B72C12E73590C1F27D663C14D1C96D4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/sZpPnJvbo-6bfA-hD-qly_2ZduM.roa
Signing time: Tue 20 Sep 2022 15:09:50 +0000
ROA not before: Tue 20 Sep 2022 15:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 89.43.41.0/24 maxlen: 24
89.43.42.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:72:c1:2e:73:59:0c:1f:27:d6:63:c1:4d:1c:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Sep 20 15:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b19a4f9c9bdba3ee9b7c0fa10feaa5cbfd9976e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:7a:0d:3f:39:e6:45:df:1a:9f:85:ad:9a:
e6:8c:38:d0:62:44:10:d4:58:8e:77:c9:1d:10:74:
a3:f5:6b:fc:16:67:d0:0f:2c:58:16:ce:54:04:a2:
61:f2:dd:df:99:50:f9:f7:7c:a3:9c:d4:47:a5:26:
a5:d7:e3:7d:25:d0:78:4c:43:2b:92:e9:a8:b7:56:
77:6b:fd:9c:06:35:c9:4a:c9:34:b0:b3:0d:7e:c1:
ee:a6:26:9c:f2:b5:95:73:49:b7:fc:86:2d:14:f9:
8f:00:73:de:22:ef:bb:01:90:94:27:f3:7b:c6:5c:
22:34:5e:30:cd:ce:65:be:c0:7b:f8:d0:1e:fc:81:
cd:6e:eb:40:4d:6e:e5:be:ac:1f:61:17:ec:a1:89:
9d:e8:ec:73:af:48:fd:3d:55:76:0e:c8:50:df:a1:
84:7b:af:3b:54:cb:72:89:e7:84:d0:f5:d8:e2:1d:
db:74:9c:51:f4:96:9d:95:8f:c4:d8:8f:d9:1f:40:
0b:fa:60:2e:06:4b:ae:f7:43:41:8f:60:f1:28:c2:
9c:3c:52:28:d4:07:9d:08:3d:ee:63:be:94:c9:c0:
f7:04:07:ef:db:6a:70:98:4b:68:93:e2:de:c3:25:
26:aa:34:95:55:92:a1:ac:ef:bb:96:2a:bf:4f:8e:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:4F:9C:9B:DB:A3:EE:9B:7C:0F:A1:0F:EA:A5:CB:FD:99:76:E3
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/sZpPnJvbo-6bfA-hD-qly_2ZduM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.41.0-89.43.42.255
89.45.34.0/24
93.114.171.0/24
93.114.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:3b:d3:36:b6:02:4d:3e:d0:13:ee:49:83:ec:55:60:b6:53:
64:e1:22:0f:a4:74:a9:3a:05:71:03:8d:de:0a:b7:ca:01:f5:
4d:c9:fd:e2:1e:ee:65:72:c8:2d:3a:39:1b:a3:a8:4d:3f:83:
63:40:b2:41:0f:76:6b:e8:75:67:33:0d:6b:7d:8d:f6:d6:35:
db:50:d2:62:12:97:f4:e3:25:cb:1b:8e:02:3f:4c:78:82:c8:
4e:8c:0a:44:82:b9:20:2a:32:32:9a:7e:ea:1d:ab:ed:81:eb:
d6:dd:63:c6:f5:89:ff:40:ee:0f:8d:0d:b5:9e:54:76:3d:11:
cb:01:e3:75:c5:eb:6a:2d:18:2e:ac:ea:c5:42:6a:95:e3:77:
85:ef:2c:9c:b7:0e:21:53:9c:d2:9b:45:1d:87:05:08:ca:11:
da:66:9f:06:54:99:77:3c:3b:01:b8:85:dc:54:83:b5:c2:e9:
a8:62:d8:58:76:04:06:fd:2a:9d:ef:48:a0:f2:5b:c5:5a:96:
12:9a:87:bd:59:04:72:d5:12:1a:63:85:70:b7:76:19:4c:87:
fa:f7:d3:52:be:f8:d3:f1:98:7b:b4:d3:44:13:9e:c0:b5:50:
b8:a1:06:ea:df:96:8b:7b:19:40:59:7e:64:8d:17:9f:58:43:
db:49:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org