Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1uqIFfJKAisB4RD_9_Lrmu5hYDM.roa
File: 1uqIFfJKAisB4RD_9_Lrmu5hYDM.roa (raw, json)
Hash identifier: eh991cCJDUxBRetP2MJUV3Ym8ycgLUjXz3uyhoX1Ihg=
Subject key identifier: D6:EA:88:15:F2:4A:02:2B:01:E1:10:FF:F7:F2:EB:9A:EE:61:60:33
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0992B783
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1uqIFfJKAisB4RD_9_Lrmu5hYDM.roa
Signing time: Sat 01 Jan 2022 05:04:04 +0000
ROA not before: Sat 01 Jan 2022 05:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59505
IP address blocks: 89.40.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160610179 (0x992b783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6ea8815f24a022b01e110fff7f2eb9aee616033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:46:0b:1b:d1:64:6c:e1:6f:b2:5e:13:14:
9c:7e:e5:8a:0b:f1:29:ab:12:18:7b:4a:85:1f:b9:
2d:03:d8:66:4a:21:7c:09:20:2b:a0:1a:8b:c4:c1:
2f:dd:69:c0:a1:35:0d:6d:0b:c0:cf:65:6d:7e:f7:
41:4a:b9:44:bb:55:22:0a:eb:08:5c:a3:90:b0:bf:
00:67:1e:b3:a2:a4:82:31:b1:fd:69:dc:82:df:4a:
48:ca:88:9b:0d:1d:55:18:b9:6a:02:ef:eb:2d:94:
8d:bc:b5:52:d0:c3:36:1d:60:d3:99:2c:a9:2a:f5:
c5:76:d3:a3:70:da:8b:fd:e7:67:2b:26:1c:59:fa:
6d:06:56:37:20:27:21:92:48:1c:a8:ad:14:f2:e9:
2e:e5:12:f1:be:17:af:1d:5a:1c:55:f2:22:f3:7d:
22:54:97:c9:be:2e:56:55:9f:a0:e1:fc:96:16:69:
60:fd:7b:a6:3a:da:fe:17:18:a7:97:0d:04:b3:74:
14:b3:d8:ff:d3:ed:54:31:ee:12:99:c5:6c:8c:cf:
8c:95:e9:52:08:65:90:e8:f8:05:b6:4f:58:ea:8a:
87:d2:89:2c:ab:12:e8:37:fa:72:3c:fb:2a:0b:af:
82:b4:32:79:3d:c6:75:f6:cd:f5:94:5e:d9:23:85:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:88:15:F2:4A:02:2B:01:E1:10:FF:F7:F2:EB:9A:EE:61:60:33
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1uqIFfJKAisB4RD_9_Lrmu5hYDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:af:a3:77:ef:b3:6a:13:f6:f5:9d:a1:70:da:08:3a:43:db:
76:39:ba:69:6f:11:2b:d2:2c:8c:b6:32:76:72:1e:6e:53:ba:
f0:f5:8b:1a:ee:53:ef:18:2f:13:b1:12:c5:22:4b:37:23:c3:
0e:a3:d0:61:db:63:b4:63:95:5b:37:63:a4:98:9c:4c:28:48:
04:18:75:06:7a:5c:29:ec:1f:ee:f0:ce:19:2d:8b:b7:8c:f9:
13:a0:68:e6:61:12:15:94:fd:20:06:8f:d9:7b:b0:77:48:74:
3d:24:6a:7d:b8:2d:ff:e7:63:03:3f:84:5c:85:c4:2a:68:c2:
00:d6:d5:b6:23:04:fe:0e:72:71:49:5c:ff:87:3a:45:4c:59:
0b:0a:40:0a:7b:ae:5a:64:f9:75:b0:a4:61:c8:b8:11:ac:17:
6e:7c:f7:6c:39:4b:3d:e5:1f:58:41:bf:4f:a5:bf:5c:86:93:
7b:00:76:8d:20:41:17:76:f9:8f:e2:33:e9:68:5a:9d:82:51:
e0:2d:48:32:93:5c:6d:34:05:70:02:0b:1b:02:6f:47:42:fc:
36:fc:f1:d7:77:40:bc:7c:d8:9d:f2:80:fc:03:4e:e1:0f:21:
ce:57:ea:4d:77:20:4d:43:01:aa:f8:b6:dc:19:a4:f3:57:7b:
37:d4:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org