Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/6AHxRUsaSb9qLUokKF5hNhfEeAc.roa
File: 6AHxRUsaSb9qLUokKF5hNhfEeAc.roa (raw, json)
Hash identifier: 8Ckuqk8i/hfaJv7zcjsWDppicM5mMR945z7o8VGBkCg=
Subject key identifier: E8:01:F1:45:4B:1A:49:BF:6A:2D:4A:24:28:5E:61:36:17:C4:78:07
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 2AF072AB
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/6AHxRUsaSb9qLUokKF5hNhfEeAc.roa
Signing time: Fri 17 Jun 2022 08:07:44 +0000
ROA not before: Fri 17 Jun 2022 08:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33875
IP address blocks: 89.35.218.0/24 maxlen: 24
89.35.219.0/24 maxlen: 24
89.35.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720401067 (0x2af072ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jun 17 08:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e801f1454b1a49bf6a2d4a24285e613617c47807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:00:d7:56:d5:bd:e9:f2:90:52:c3:52:ce:
eb:d1:fa:a2:87:44:7f:ad:7c:4b:15:ed:80:1a:fd:
97:62:26:e2:d3:ff:ca:86:7c:e0:27:b7:46:e1:a3:
95:18:5b:40:14:a7:19:3d:70:4b:1b:17:36:f9:3e:
58:37:10:ec:33:4e:75:73:65:cc:b7:a5:e7:1a:82:
f8:9b:58:3d:a6:ca:c5:65:4f:ba:05:95:65:a6:a8:
c8:9d:93:c2:05:85:a4:12:2e:3c:b9:a2:86:42:02:
61:40:8a:ac:7e:12:c7:11:53:e6:17:b2:ba:2c:63:
a1:ca:a4:68:c1:d0:b6:ab:c3:f9:97:4b:64:42:ed:
fd:c6:cd:11:51:e6:00:3d:77:af:c3:71:c2:ed:44:
b7:12:86:5b:51:c6:bb:c2:d4:7c:44:11:3e:6e:e6:
2d:e3:f1:20:f0:b0:ef:e8:fb:79:7b:0d:4c:a8:77:
f7:c8:60:66:f5:1a:14:03:b1:0c:c2:0d:7c:77:2c:
d2:32:2b:de:ed:72:44:e6:75:09:e8:ab:f1:e0:1d:
03:6e:95:ac:52:56:3f:1e:d7:96:d8:92:92:d2:fc:
b4:75:c0:d9:a7:8c:c5:2e:eb:b5:38:5e:b5:b9:2c:
86:9d:aa:c8:0e:77:5c:b5:ca:2d:6a:ae:46:bb:af:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:F1:45:4B:1A:49:BF:6A:2D:4A:24:28:5E:61:36:17:C4:78:07
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/6AHxRUsaSb9qLUokKF5hNhfEeAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.218.0-89.35.220.255
Signature Algorithm: sha256WithRSAEncryption
8e:a3:18:de:3d:9e:53:e3:49:1a:af:06:b1:49:08:8e:97:9e:
ca:40:10:3a:33:40:9a:3f:81:c6:e5:23:06:d2:97:2f:46:a9:
d4:e9:e8:77:ab:53:9b:bf:b4:18:3d:16:fb:a7:d2:77:2d:94:
2b:bb:55:2d:32:83:45:c7:8a:1d:4d:a0:9b:db:19:94:21:c2:
28:3d:39:8a:85:fc:04:18:df:93:e0:d8:26:e1:da:2f:18:27:
d9:82:48:8d:1c:69:26:35:aa:74:1a:9e:2a:a5:9b:0d:08:26:
c1:9e:73:dc:a2:fb:b6:b7:54:9f:07:4c:41:15:50:23:f1:03:
42:81:30:db:a7:79:e8:81:8a:1e:b0:b8:e6:64:f6:fe:6d:18:
ab:39:b9:54:6d:c8:5a:88:da:97:14:10:b7:61:60:70:64:fb:
f0:96:f6:dd:b0:68:a5:80:a4:9e:90:2f:92:69:09:25:30:44:
c4:ad:73:28:b3:af:6c:cb:70:da:8e:9d:3f:58:ed:c8:d3:d3:
28:f2:da:7f:ed:f1:54:a4:f1:d5:e5:68:5f:33:fe:75:16:0b:
e0:30:c5:c2:83:ea:9d:ea:14:b2:9e:21:97:e7:7f:e7:36:e1:
0c:55:b3:0e:37:94:52:51:54:29:3d:b6:05:07:75:9f:aa:bf:
3a:e2:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:49 2024 by rpki-client on console-ams.rpki-client.org