Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/m-e6b8IMpQlE5cUmETzjWPR9WZo.roa
File: m-e6b8IMpQlE5cUmETzjWPR9WZo.roa (raw, json)
Hash identifier: llpvusn5z2M1PF6LNOO4809+smwqWCg1azoKC84JPXg=
Subject key identifier: 9B:E7:BA:6F:C2:0C:A5:09:44:E5:C5:26:11:3C:E3:58:F4:7D:59:9A
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 01827C9E922EB3FE446EA1DE648155C4A468
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/m-e6b8IMpQlE5cUmETzjWPR9WZo.roa
Signing time: Mon 08 Aug 2022 08:42:23 +0000
ROA not before: Mon 08 Aug 2022 08:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59590
IP address blocks: 188.241.208.0/24 maxlen: 24
89.44.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:9e:92:2e:b3:fe:44:6e:a1:de:64:81:55:c4:a4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Aug 8 08:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9be7ba6fc20ca50944e5c526113ce358f47d599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:74:72:77:5b:4c:f7:a5:00:3b:83:ad:a0:
91:d4:82:e4:72:f9:13:bd:36:08:b9:78:cd:51:c0:
0b:cc:e1:45:89:87:4c:d4:3f:ba:9e:a3:b7:9b:e5:
d6:e5:a6:d7:13:22:03:70:01:ae:e7:48:36:01:54:
b0:25:66:9d:27:e5:b4:3b:09:2d:84:9e:05:3c:2d:
cc:e1:73:60:39:de:74:45:a6:4c:e0:45:ed:9e:0a:
4a:cc:3b:fc:88:92:72:60:0a:86:e4:d0:0d:2e:70:
9f:4c:40:31:49:ed:7a:ed:5d:bf:a7:02:98:3a:a4:
bf:33:a9:fd:6a:7a:72:ea:c8:a0:97:5a:3e:cb:d7:
b3:5f:d8:a9:18:ae:cd:88:9d:23:07:a1:99:c6:c8:
fb:26:b6:be:94:76:81:52:67:a0:4a:1a:fe:0f:f2:
46:02:26:00:e0:fd:83:e9:ce:16:45:5a:2f:0d:b5:
12:57:b9:38:3d:90:13:ca:7e:1a:31:cb:d5:54:e3:
13:c3:58:6e:46:f0:bb:87:56:d2:3f:73:b6:ff:69:
61:a9:35:3d:5d:ee:51:9a:c2:cc:8c:2b:dc:2f:37:
98:71:e1:26:fd:53:34:9f:ca:70:06:6d:2d:f3:40:
e0:fb:56:7d:a9:b4:b1:06:28:4a:37:7a:32:4e:38:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:BA:6F:C2:0C:A5:09:44:E5:C5:26:11:3C:E3:58:F4:7D:59:9A
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/m-e6b8IMpQlE5cUmETzjWPR9WZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.204.0/24
188.241.208.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c5:cf:1f:09:29:86:18:e4:26:22:74:53:72:f2:c2:f7:64:
d4:ca:56:b8:b0:da:e6:dd:70:d5:2a:7d:38:10:f3:aa:e4:e2:
a9:dc:ff:13:1e:e5:77:d9:39:b9:b4:2d:bc:92:2f:e4:8b:85:
3d:1f:c9:fd:ca:89:8e:ef:e4:da:12:05:2e:f8:93:5c:cb:9a:
55:be:c9:aa:13:88:2a:70:06:b4:c8:ea:c4:37:14:e8:54:35:
60:32:7a:16:6d:ed:60:2f:ab:41:66:3b:56:ff:86:3c:53:ad:
74:a4:9c:7c:99:6c:b0:4d:82:78:98:0e:a6:cb:ba:0f:90:02:
88:4b:2a:e1:13:d2:92:38:ec:fb:d1:a4:18:cb:18:34:87:72:
31:78:c8:f8:10:5e:7c:99:ab:76:5a:95:c3:4f:1e:1d:53:f7:
e7:64:6c:4c:8f:59:c1:b2:2c:fa:19:7e:3f:ef:e3:6e:20:8a:
43:65:95:52:38:65:1b:4c:9e:cc:14:dc:da:d9:60:41:c6:f0:
35:00:60:86:f2:ec:6c:8f:ba:09:fa:c8:93:a7:77:13:59:2b:
1d:63:8e:3a:be:d0:80:80:d4:d1:14:ca:26:40:0a:21:20:a3:
bb:a8:43:e9:08:af:0a:ca:54:e3:12:cd:49:8f:2c:51:b0:f9:
97:1b:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:39 2023 by rpki-client on console-fra.rpki-client.org