Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FaDE-VNqh5L7BnJcx9p5upUoDdI.roa
File: FaDE-VNqh5L7BnJcx9p5upUoDdI.roa (raw, json)
Hash identifier: M4kg03Pou0+DABXz70YGUPtODPc2UZRyrYbw0SqZFUk=
Subject key identifier: 15:A0:C4:F9:53:6A:87:92:FB:06:72:5C:C7:DA:79:BA:95:28:0D:D2
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01843C8834581AB2A396379096F63339164C
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FaDE-VNqh5L7BnJcx9p5upUoDdI.roa
Signing time: Thu 03 Nov 2022 08:07:49 +0000
ROA not before: Thu 03 Nov 2022 08:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209271
IP address blocks: 89.111.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:88:34:58:1a:b2:a3:96:37:90:96:f6:33:39:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Nov 3 08:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15a0c4f9536a8792fb06725cc7da79ba95280dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:fc:40:af:68:ba:24:3d:f7:f8:c7:eb:ae:
92:aa:6f:1c:c0:a8:91:99:31:b6:69:25:08:e4:0d:
5b:10:6b:8d:1b:93:b9:44:97:fb:7d:f5:11:84:a7:
39:86:b3:09:a0:40:9d:ed:bf:c0:03:d4:60:33:ff:
bb:a0:46:18:ee:1a:41:14:59:b4:a3:47:16:9a:cf:
12:f0:50:86:88:22:b6:db:b6:b9:49:0c:3b:14:1d:
d9:79:47:3c:41:3b:4d:88:57:b2:b5:62:5e:04:04:
56:fa:41:76:71:9c:6d:1c:87:8e:ff:65:77:fe:ea:
9d:3a:f2:21:79:0e:db:fc:1d:30:f3:bc:3c:30:7d:
9c:8a:ee:b2:50:d8:af:c8:6b:7b:c0:db:b5:b3:d1:
ec:ad:62:db:f1:eb:4a:c9:a4:a0:fc:b2:bd:94:0b:
42:f9:fc:10:1c:c8:a7:e5:ba:37:b7:7c:53:af:c2:
73:e8:15:15:74:90:c9:62:67:97:f6:74:c3:52:75:
a0:74:d1:59:c2:96:0e:81:af:04:2b:90:2c:fd:b9:
5b:f6:ce:76:6d:92:41:e7:1e:1c:0c:aa:9c:31:9d:
e7:f6:0c:29:da:ea:f6:0f:01:89:33:90:42:9b:c8:
e0:40:aa:e8:aa:e6:77:5e:0b:99:5b:7a:10:19:77:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:C4:F9:53:6A:87:92:FB:06:72:5C:C7:DA:79:BA:95:28:0D:D2
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FaDE-VNqh5L7BnJcx9p5upUoDdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:41:85:bc:85:a7:98:00:4a:63:6e:fd:0a:3d:6e:0a:85:44:
d7:95:11:4c:d3:0a:e1:40:a7:49:8f:ea:d8:45:1f:ce:c7:09:
bd:9e:e9:dc:de:9d:84:c2:b5:b4:ff:4b:24:42:91:49:1c:a7:
64:10:0d:9d:fd:6c:75:89:82:ce:a0:01:b5:54:fc:8c:2d:e4:
0f:b0:43:64:0c:aa:b3:47:88:bf:b4:e9:f7:25:65:47:15:42:
09:68:f3:f0:aa:d8:35:cb:db:60:1a:9c:f8:5e:3e:bf:3d:57:
fb:a8:12:cc:a8:4a:09:ec:30:a6:f6:aa:f1:28:b2:bf:72:e1:
8f:f5:4c:b5:02:64:dd:a5:be:5c:3e:9d:92:ef:74:13:42:66:
52:d2:78:b6:68:d2:27:10:49:ef:99:83:4b:4a:09:15:3e:79:
54:7a:ff:a6:20:4b:6a:65:9e:ad:de:55:cb:0c:f1:57:c6:0a:
71:e6:0c:7e:60:35:a4:93:60:6d:6e:bc:bc:14:e9:0c:cf:44:
d3:62:93:30:ae:2a:ae:1e:92:37:89:c7:cc:53:1b:80:03:a5:
b5:bf:3e:a7:07:a0:0c:9a:83:dc:ea:f2:57:72:fd:80:75:a3:
f8:95:8f:c2:58:7a:60:93:f4:df:54:bc:b0:0d:a9:e0:47:97:
c7:3d:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:28 2024 by rpki-client on console-ams.rpki-client.org