Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/x1-9eecKEJcljauSU8f47Q3UVW0.roa
File: x1-9eecKEJcljauSU8f47Q3UVW0.roa (raw, json)
Hash identifier: NQr49vR4e26N1DmC35N90pWM41LMWqaWFLPRibbBYSo=
Subject key identifier: C7:5F:BD:79:E7:0A:10:97:25:8D:AB:92:53:C7:F8:ED:0D:D4:55:6D
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 040296A9
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/x1-9eecKEJcljauSU8f47Q3UVW0.roa
Signing time: Sat 01 Jan 2022 01:52:30 +0000
ROA not before: Sat 01 Jan 2022 01:52:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49226
IP address blocks: 89.25.95.0/24 maxlen: 24
94.155.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67278505 (0x40296a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c75fbd79e70a1097258dab9253c7f8ed0dd4556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:09:04:e6:c8:dd:ad:45:92:3d:8f:c9:65:
51:52:20:d0:6a:ce:a3:c7:81:ba:bd:54:33:0b:0f:
41:c6:0f:42:56:22:ff:75:60:74:42:58:f4:8c:9d:
a0:bf:0e:3e:84:8d:77:28:56:8c:c7:f7:46:9a:76:
bf:16:55:93:c7:35:9e:76:06:e7:e8:41:bf:69:fc:
77:db:8a:14:01:11:1e:cf:ac:2d:c6:e5:a9:88:df:
06:a9:0d:43:2f:6f:3a:8a:fb:3d:a0:6d:0e:d6:f0:
09:ae:f9:4b:54:54:95:7e:c2:8b:ff:a8:32:3c:7a:
4a:29:20:2d:83:4f:09:a7:dc:b5:fd:22:83:1c:02:
24:e8:9f:87:1a:2a:d9:42:07:ef:da:41:02:e6:4b:
a3:d4:a7:1b:76:6c:f5:f4:c9:27:e5:eb:43:3f:71:
af:b6:3a:e5:f5:42:49:80:76:00:62:8b:af:57:6e:
33:41:ae:71:81:fe:fd:b4:21:de:22:f5:45:b5:a3:
48:6c:7c:1f:9a:d7:5a:21:6e:f5:f8:48:a4:d6:a6:
21:36:e5:4a:02:cb:bb:e3:10:56:bc:49:aa:0d:5b:
5b:68:75:20:70:ab:d4:cc:ba:54:26:4a:af:b8:70:
68:9c:c4:fd:bc:f2:83:2e:1f:d8:7d:37:b7:49:02:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:BD:79:E7:0A:10:97:25:8D:AB:92:53:C7:F8:ED:0D:D4:55:6D
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/x1-9eecKEJcljauSU8f47Q3UVW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.95.0/24
94.155.15.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7a:06:f5:d0:f3:dc:55:22:b5:f1:b2:a8:4c:47:a3:3b:dd:
a6:d4:27:e4:a4:99:67:27:e9:d5:24:6f:1b:3e:8f:e1:05:84:
c4:9a:a1:8c:54:70:3a:09:5b:36:a7:24:1e:35:cc:91:9d:14:
c2:d5:31:a5:2f:86:2d:a5:d6:1b:24:f8:87:28:02:64:2a:6f:
61:91:42:de:af:e0:d2:b4:f1:77:96:0c:34:b6:a6:c2:01:88:
53:02:90:d1:2f:c5:f2:cd:ee:4b:e4:88:23:4a:41:46:8f:60:
7b:62:34:f4:8a:93:cc:55:ed:5b:9c:d4:cc:53:fa:31:36:da:
4c:39:f4:3e:7a:33:6f:75:50:a7:11:f5:bf:88:1f:88:5f:b5:
17:cd:66:45:0f:07:69:3a:27:14:4f:3d:91:b3:a7:d7:9a:0f:
0c:b8:6a:6c:2b:5e:26:d8:ae:34:12:73:27:db:9a:46:20:9c:
85:4e:37:d3:a8:34:54:03:cd:ed:fd:6b:64:14:bd:85:cb:68:
b4:42:18:18:b8:57:37:6f:a9:d8:e5:3e:f6:e5:3e:1e:03:e7:
1d:cc:14:e3:61:22:6f:55:26:29:98:b7:0d:79:86:c6:38:8b:
a6:46:8b:2a:7f:d6:90:70:7d:31:4f:94:f6:6b:fe:15:e6:ad:
3c:7a:46:32
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBAKWqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MDdkNzU3M2FhY2FlODIxYzg3ZDZkMzY0MzFjZmU0YjI4MDFhYjQxMB4XDTIyMDEw
MTAxNTIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzc1ZmJkNzllNzBh
MTA5NzI1OGRhYjkyNTNjN2Y4ZWQwZGQ0NTU2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJHmCQTmyN2tRZI9j8llUVIg0GrOo8eBur1UMwsPQcYPQlYi
/3VgdEJY9IydoL8OPoSNdyhWjMf3Rpp2vxZVk8c1nnYG5+hBv2n8d9uKFAERHs+s
LcblqYjfBqkNQy9vOor7PaBtDtbwCa75S1RUlX7Ci/+oMjx6SikgLYNPCafctf0i
gxwCJOifhxoq2UIH79pBAuZLo9SnG3Zs9fTJJ+XrQz9xr7Y65fVCSYB2AGKLr1du
M0GucYH+/bQh3iL1RbWjSGx8H5rXWiFu9fhIpNamITblSgLLu+MQVrxJqg1bW2h1
IHCr1My6VCZKr7hwaJzE/bzygy4f2H03t0kCecsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTHX7155woQlyWNq5JTx/jtDdRVbTAfBgNVHSMEGDAWgBTQfXVzqsroIch9
bTZDHP5LKAGrQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBIMTFjNnJLNkNISWZXMDJReHotU3lnQnEwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvNTcyNWNjLWFkNzAtNDZmOC1iYjYyLWNmOWRjNWJhYWE3OS8x
L3gxLTllZWNLRUpjbGphdVNVOGY0N1EzVVZXMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
NTcyNWNjLWFkNzAtNDZmOC1iYjYyLWNmOWRjNWJhYWE3OS8xLzBIMTFjNnJLNkNI
SWZXMDJReHotU3lnQnEwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFkZXwMEAF6bDzANBgkqhkiG9w0B
AQsFAAOCAQEAB3oG9dDz3FUitfGyqExHozvdptQn5KSZZyfp1SRvGz6P4QWExJqh
jFRwOglbNqckHjXMkZ0UwtUxpS+GLaXWGyT4hygCZCpvYZFC3q/g0rTxd5YMNLam
wgGIUwKQ0S/F8s3uS+SII0pBRo9ge2I09IqTzFXtW5zUzFP6MTbaTDn0Pnozb3VQ
pxH1v4gfiF+1F81mRQ8HaTonFE89kbOn15oPDLhqbCteJtiuNBJzJ9uaRiCchU43
06g0VAPN7f1rZBS9hctotEIYGLhXN2+p2OU+9uU+HgPnHcwU42Eib1UmKZi3DXmG
xjiLpkaLKn/WkHB9MU+U9mv+FeatPHpGMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:46 2024 by rpki-client on console-ams.rpki-client.org