Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_E8X3FHmv694RIdRkowDgJPEwiY.roa
File: _E8X3FHmv694RIdRkowDgJPEwiY.roa (raw, json)
Hash identifier: obsR60UsBXxwv4UUMU5jpQn3L+5YzaQeeEl1uplDegA=
Subject key identifier: FC:4F:17:DC:51:E6:BF:AF:78:44:87:51:92:8C:03:80:93:C4:C2:26
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 04AC63C1
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_E8X3FHmv694RIdRkowDgJPEwiY.roa
Signing time: Fri 11 Mar 2022 18:08:03 +0000
ROA not before: Fri 11 Mar 2022 18:08:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210646
IP address blocks: 89.25.119.0/24 maxlen: 24
89.25.24.0/24 maxlen: 24
213.145.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78406593 (0x4ac63c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Mar 11 18:08:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc4f17dc51e6bfaf78448751928c038093c4c226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:51:94:ce:dc:47:01:f3:b0:d5:dd:d7:83:
e8:b8:38:d6:04:d1:70:76:cd:fe:23:56:af:2b:d3:
48:73:bd:66:ac:da:cd:22:b1:fe:1b:f5:41:5d:f7:
ae:ff:28:3b:26:0f:64:dd:ca:2a:88:be:2a:2e:92:
4d:58:5a:d8:80:22:8b:00:5a:37:aa:51:98:19:68:
1d:91:5c:f8:49:5a:14:aa:c8:9d:23:9d:6f:c2:c0:
1e:59:d8:7e:96:81:e2:bf:97:0c:f5:c5:4e:21:13:
a3:66:ab:56:d3:a8:fd:2c:7a:f2:11:ab:89:26:29:
f9:c0:76:bb:fc:29:ce:62:66:92:15:1c:e3:d4:64:
b2:d8:39:a4:c9:6e:de:ae:87:94:8e:c0:32:4f:6b:
61:d2:5d:4c:2d:10:64:99:50:6b:fb:fe:c5:98:d0:
1f:06:5b:06:86:cb:26:17:ec:f5:17:fd:00:ad:c6:
68:a0:03:38:11:b8:a6:0c:84:17:86:5d:15:de:51:
22:9b:0f:5d:cd:32:e5:00:b8:02:94:1c:81:aa:27:
d9:27:73:c3:37:55:90:33:f7:92:23:47:1d:e3:c8:
47:39:46:06:62:0c:26:a7:6a:8b:0a:b2:34:ff:53:
44:6c:17:c7:04:38:07:3b:ea:1f:6f:28:dc:4f:e6:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:17:DC:51:E6:BF:AF:78:44:87:51:92:8C:03:80:93:C4:C2:26
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_E8X3FHmv694RIdRkowDgJPEwiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.24.0/24
89.25.119.0/24
213.145.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c2:3e:1c:be:a7:9b:2d:c7:16:c6:f7:75:f7:89:f8:7a:f8:
f3:bf:f8:99:ae:54:17:59:8c:f4:57:ee:fb:a3:99:56:7d:a0:
be:b1:8c:f2:73:17:a6:a6:62:0b:c4:1d:69:c3:fb:b9:c7:fb:
fb:9c:f3:67:bd:21:2c:92:e1:86:d9:92:eb:ef:5e:a1:4d:e6:
28:3c:66:0f:31:2a:58:1a:44:ec:b3:16:93:65:9f:20:d4:16:
81:c8:3c:ed:e6:f2:ff:29:14:4b:c6:63:a6:73:7c:12:a9:97:
e3:cb:7a:cb:4c:91:a2:69:6f:95:78:21:0f:e0:bc:d1:c7:a4:
f5:a3:d8:a8:7e:61:20:18:ce:09:ff:89:65:67:10:f5:b8:77:
f2:56:40:5f:8f:63:6d:54:52:55:39:2c:54:25:e0:5e:72:76:
03:ae:7c:5a:1f:18:cb:c5:88:69:70:27:21:25:0d:38:91:7e:
44:c8:92:6b:ce:f8:49:ab:22:54:44:1c:aa:d8:9f:c2:1e:4f:
b5:f8:d8:5d:67:f9:51:75:b6:b6:74:4a:55:b8:47:ce:59:05:
91:e6:30:b4:29:85:68:7d:a6:21:ab:39:d6:57:2c:ee:85:eb:
15:fa:07:05:55:e2:76:e1:1d:d7:f0:12:62:cf:0a:7a:fe:b8:
09:9e:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org