Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/wyVfoXanc4ve8WvZUzkKmEnUXkk.roa
File: wyVfoXanc4ve8WvZUzkKmEnUXkk.roa (raw, json)
Hash identifier: hL+diBC4d1LNAQ8IGZrRXOLAR97c1AHhBO3xMDxRUJQ=
Subject key identifier: C3:25:5F:A1:76:A7:73:8B:DE:F1:6B:D9:53:39:0A:98:49:D4:5E:49
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0182C4808F5F15F0275154770C22C49F88F8
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/wyVfoXanc4ve8WvZUzkKmEnUXkk.roa
Signing time: Mon 22 Aug 2022 07:42:15 +0000
ROA not before: Mon 22 Aug 2022 07:42:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 89.46.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:80:8f:5f:15:f0:27:51:54:77:0c:22:c4:9f:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 22 07:42:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3255fa176a7738bdef16bd953390a9849d45e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:28:cd:44:de:81:21:ea:3b:f5:5f:b4:fe:
ee:66:50:f7:3c:a6:6c:c5:4e:a9:95:39:6a:0a:ae:
21:16:f7:8e:f6:42:e2:73:4e:cc:8d:3c:56:13:cc:
23:d4:c2:ec:c0:bb:04:33:8d:32:4d:5b:11:ac:96:
32:83:f5:5d:98:a0:32:d0:cc:62:7a:5f:1b:98:65:
d2:40:d7:b3:8a:8e:d3:4d:dc:9d:12:2d:0a:19:0a:
c0:e6:49:ec:dd:27:e0:05:5b:92:d3:a3:8b:95:57:
d8:83:77:da:1d:1a:44:e8:28:6a:b7:80:aa:07:68:
7a:a6:f3:90:84:54:a8:c5:0b:23:5a:86:78:93:e3:
24:37:99:e7:89:6c:1c:82:04:dc:02:94:1c:f8:8a:
e7:e3:07:be:48:d8:60:ae:89:bf:11:be:2a:98:a0:
cc:27:e4:60:2e:21:b3:2f:11:f4:9c:b7:20:35:24:
24:64:a5:7d:97:c4:ee:dc:9c:b2:61:10:48:c2:25:
1b:3e:98:a4:59:bc:cc:4d:5d:c0:54:31:f2:50:c0:
cd:45:42:8c:70:fa:16:e5:f9:9d:af:3a:1c:39:0c:
8d:bf:b5:f9:13:91:75:5e:02:ff:d3:c0:da:73:0b:
c6:bd:9b:a0:22:dc:74:2f:87:6d:fd:a3:61:d3:d9:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:5F:A1:76:A7:73:8B:DE:F1:6B:D9:53:39:0A:98:49:D4:5E:49
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/wyVfoXanc4ve8WvZUzkKmEnUXkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:03:23:8e:5f:64:26:ec:e0:5a:af:ad:ac:92:98:d2:6b:ad:
7d:43:83:0a:a2:6a:db:cd:ff:cf:55:3b:6b:e4:3a:51:64:27:
a3:b9:b4:35:72:7f:32:22:b7:3d:6e:14:4c:97:94:17:d3:31:
bd:9e:ae:8d:18:68:c3:82:9e:a0:0f:7f:fc:41:2f:11:cc:cf:
fd:61:fb:96:d7:17:e5:ba:0f:70:ce:48:01:ac:af:15:ef:f8:
fb:36:c2:16:11:d8:02:45:80:a8:8e:ae:52:44:96:37:bc:82:
a0:f9:34:f7:1c:88:ec:78:50:c0:19:0d:d1:0b:5d:94:0e:69:
53:0c:75:5f:9d:2f:f1:ab:0c:40:42:16:bb:a4:37:64:14:22:
79:99:5f:83:17:ef:22:54:a5:bc:64:6b:eb:11:4a:f2:30:a9:
07:37:7b:3b:ca:34:44:78:12:14:6e:d6:7f:ad:a5:4f:d5:71:
91:40:f1:04:f1:bd:34:3e:81:1f:38:6d:78:f6:47:32:f6:e8:
fa:d8:00:a3:05:5e:5e:a3:6f:d9:25:85:fd:c3:58:d6:49:ee:
5a:f3:92:87:d6:bd:4f:d0:a5:c8:be:a8:16:6d:b8:53:8c:02:
a4:43:94:50:7d:31:42:cc:db:55:52:94:a0:29:63:62:d6:94:
6f:71:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:14 2024 by rpki-client on console-ams.rpki-client.org