Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/87alsV7MaDcesmxZ_8tANFKumhY.roa
File: 87alsV7MaDcesmxZ_8tANFKumhY.roa (raw, json)
Hash identifier: TLiL5Vo5yFHK8gyBuYYrzBvnzVyJJSCDW2aM0ZonySI=
Subject key identifier: F3:B6:A5:B1:5E:CC:68:37:1E:B2:6C:59:FF:CB:40:34:52:AE:9A:16
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 17AF1902
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/87alsV7MaDcesmxZ_8tANFKumhY.roa
Signing time: Tue 14 Jun 2022 12:45:02 +0000
ROA not before: Tue 14 Jun 2022 12:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199753
IP address blocks: 185.89.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397351170 (0x17af1902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Jun 14 12:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3b6a5b15ecc68371eb26c59ffcb403452ae9a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:56:aa:d3:81:82:ac:7f:4c:32:55:67:ab:
7b:ce:03:53:f1:f4:82:50:eb:28:fe:c6:1e:b3:bd:
ba:ae:a5:df:fa:5e:e2:66:b4:5e:2a:21:a2:ea:f1:
a4:de:4d:95:83:54:32:02:29:7a:55:0a:fe:c5:c6:
cd:25:51:be:c9:c7:46:6f:f5:f5:a5:fd:bb:f1:c7:
8b:c0:21:fa:f4:f8:49:61:93:69:cb:fc:58:83:77:
d0:a2:8d:ef:16:4e:7a:c6:2e:90:c7:0c:09:07:f8:
44:ec:64:5e:60:2d:5d:55:69:ff:44:26:db:41:eb:
24:ac:be:a6:03:47:e0:29:80:fc:bf:a8:41:96:10:
3e:bb:e3:00:10:b3:ea:ba:75:cd:17:2e:9f:93:8a:
52:8e:84:20:cf:b1:2f:c7:94:ae:cd:ca:aa:da:06:
2f:c0:18:17:84:af:57:9c:c3:a1:3b:e9:34:9c:14:
b5:f8:31:e4:97:f8:ef:6f:e8:c4:0b:5d:b1:91:8f:
90:50:51:be:7c:4f:bd:b3:a0:b8:a8:1c:25:a4:64:
77:32:58:0c:c4:35:2d:5f:08:c2:87:f6:e3:eb:8c:
d4:d0:41:61:6d:1c:15:0d:62:56:95:a0:c6:31:ad:
8a:5d:ae:08:90:36:4a:4f:5c:cf:e4:e0:52:07:a4:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:A5:B1:5E:CC:68:37:1E:B2:6C:59:FF:CB:40:34:52:AE:9A:16
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/87alsV7MaDcesmxZ_8tANFKumhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.56.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ef:45:11:e2:d9:04:a5:7c:21:87:26:85:df:1f:b4:6e:58:
10:b7:0e:83:46:88:db:29:59:36:c9:32:f9:7e:97:3b:89:6b:
58:be:e5:96:36:08:ca:95:44:29:3f:0f:be:09:e2:d4:e7:39:
b5:4e:7c:9e:c8:2d:fb:3e:7e:3c:27:3c:01:99:6d:e7:6a:16:
36:31:db:0b:50:33:94:bb:52:c6:87:5d:0d:68:7a:28:38:73:
87:4a:8d:ce:30:ff:e1:89:15:85:68:c6:eb:73:5c:9b:0a:69:
e7:40:81:00:53:2d:9b:df:51:80:ca:57:9b:83:6d:32:d1:26:
5d:a2:02:2b:28:c8:21:46:84:0a:e3:2f:f3:84:d9:65:5b:87:
81:e5:f4:91:c3:49:9b:b6:68:94:f6:7b:2b:ba:09:36:9a:e3:
5a:c7:1b:91:2b:a2:b3:41:5d:8a:80:49:0d:e5:6b:ea:e1:89:
8d:6c:89:2e:4d:ac:71:42:e8:e8:b1:f5:d3:13:50:c7:f8:66:
67:8c:97:7c:98:89:f3:8f:5d:fc:97:9b:35:03:fa:ed:2a:43:
fd:57:5f:c8:fa:8f:22:46:d8:46:e1:4a:a3:a0:6f:e4:b0:66:
fa:1e:d4:ab:2e:6b:bc:95:7e:a7:bd:d0:e9:a1:f4:33:22:67:
6c:db:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org