Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-9EAEwGgiAeyaR0uFdsUvy6J-Ic.roa
File: 1-9EAEwGgiAeyaR0uFdsUvy6J-Ic.roa (raw, json)
Hash identifier: w7dLGRVxYlIthd/VZSyuT6uNTijFDaXmY7fWf7YLSqs=
Subject key identifier: FB:D1:00:13:01:A0:88:07:B2:69:1D:2E:15:DB:14:BF:2E:89:F8:87
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 0806C1FA
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-9EAEwGgiAeyaR0uFdsUvy6J-Ic.roa
Signing time: Sat 01 Jan 2022 10:04:22 +0000
ROA not before: Sat 01 Jan 2022 10:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49434
IP address blocks: 89.234.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134660602 (0x806c1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 1 10:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbd1001301a08807b2691d2e15db14bf2e89f887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:12:fe:1b:98:7b:bc:27:eb:f4:54:8b:9c:
18:50:a7:c0:22:c7:4a:95:2e:35:45:93:b1:cb:c1:
c8:e3:68:d5:07:2e:14:11:07:ed:e9:63:0e:12:ca:
b7:c4:66:56:86:f8:e3:7c:ec:7a:d7:cf:c4:fe:b2:
ea:0c:cf:e3:d6:cc:07:31:48:18:c5:e0:f5:3b:e5:
d6:10:75:77:be:a3:ed:f3:ef:74:16:83:0e:1f:3b:
c4:34:11:bd:19:83:6b:45:e9:c0:da:e1:ef:41:a4:
9f:99:ee:34:d9:95:5a:7c:01:8e:f4:d3:ba:3a:77:
85:2b:47:c9:36:11:80:73:60:86:be:79:26:be:22:
74:c3:1b:64:4c:39:c3:41:c7:ee:1d:34:f2:4a:97:
e2:d8:d3:9d:fd:b9:29:eb:95:c9:d2:1a:23:ba:8b:
85:c9:57:08:70:8e:18:6e:a4:c9:81:6b:c4:41:e9:
7f:8f:14:ee:8e:e0:62:e6:59:e9:b3:23:ca:98:b2:
79:1f:94:9a:e6:1f:79:7c:2f:10:99:b9:4f:b9:6b:
38:9a:0e:cb:07:72:11:8e:ae:79:b7:83:8d:ba:03:
95:e1:39:c9:0a:b9:b3:25:28:95:8b:30:6f:02:ee:
0d:9d:0b:1b:71:16:da:06:03:4f:81:8d:79:d4:77:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:00:13:01:A0:88:07:B2:69:1D:2E:15:DB:14:BF:2E:89:F8:87
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-9EAEwGgiAeyaR0uFdsUvy6J-Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e1:7e:b7:be:a4:b0:a8:80:69:8f:3e:b3:fc:cd:c2:f5:98:
22:80:fd:98:c8:5a:14:44:c6:24:e3:e2:a0:94:5e:bf:7b:e4:
ab:cf:51:d1:8f:89:78:76:a5:1c:fa:5b:82:30:65:20:84:96:
41:7d:8a:19:af:94:5b:62:91:79:ea:21:77:f0:d4:30:e6:9b:
3d:9b:54:01:68:8c:bc:4c:94:31:21:61:ed:e1:88:71:62:4a:
c2:87:a9:5b:5c:fb:b7:c2:5e:e1:03:e1:82:3f:10:9c:53:3c:
41:fc:48:76:45:08:99:71:7e:93:8a:21:00:27:6c:96:f1:08:
c9:da:07:66:cd:20:d5:31:ad:11:a2:52:5a:c5:8d:1c:88:24:
31:39:85:2c:73:69:bc:fb:70:c7:db:5f:61:fa:e1:7b:34:03:
45:4f:6f:07:c5:6b:3b:30:1b:e8:2a:51:3d:26:04:51:a7:bb:
e1:48:b8:2f:e1:d9:a7:2e:5c:af:52:34:a4:6b:2e:49:b3:8e:
b8:33:39:6d:e7:56:09:98:f6:5d:0f:0a:3f:70:61:ce:5b:68:
1a:22:46:6f:89:b3:25:c9:8a:b9:a4:8a:2a:a7:18:56:a3:a4:
c0:76:3f:5d:eb:83:f8:a6:3a:9f:68:a4:a5:89:88:60:d8:00:
fb:94:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:25 2024 by rpki-client on console-ams.rpki-client.org