Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/1-4AcSRU6fLAQYHkhwxIEMJXi-pE.roa
File: 1-4AcSRU6fLAQYHkhwxIEMJXi-pE.roa (raw, json)
Hash identifier: T/AspsR7Usl0jpUvck8RYyou19+hwJhzDQVy2IlDc8w=
Subject key identifier: FB:80:1C:49:15:3A:7C:B0:10:60:79:21:C3:12:04:30:95:E2:FA:91
Certificate issuer: /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial: 0F3B213D
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/1-4AcSRU6fLAQYHkhwxIEMJXi-pE.roa
Signing time: Sat 01 Jan 2022 11:03:46 +0000
ROA not before: Sat 01 Jan 2022 11:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.198.89.0/24 maxlen: 24
185.198.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255533373 (0xf3b213d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
Validity
Not Before: Jan 1 11:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb801c49153a7cb010607921c312043095e2fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:e8:3d:a2:2f:4d:6e:f3:16:3f:23:5d:17:
a0:10:a5:66:64:2e:3f:90:a1:1f:db:76:e1:bd:b4:
1c:aa:02:01:5a:46:02:bb:89:d0:70:65:82:ad:72:
70:5a:d9:4f:0e:b2:f0:34:d6:58:ea:54:cb:6a:82:
1b:67:fb:f9:a7:b4:09:f9:10:6e:46:73:22:13:aa:
77:9f:14:db:cc:d5:d7:8a:63:a9:8f:ac:ef:7a:8e:
92:29:eb:40:5a:df:4e:07:4d:9f:d7:c2:1f:66:14:
d4:c9:53:c5:20:16:7d:b2:0f:e7:d7:db:85:42:10:
98:e8:96:de:ec:84:65:fa:73:a6:17:21:35:48:a4:
d4:e2:8f:85:a6:9f:03:ad:d1:ce:1d:ca:f8:7f:d7:
e0:57:72:5b:df:51:d5:28:b2:fc:c7:fb:b4:04:43:
2a:92:a8:0b:d8:59:72:94:80:a4:df:ce:77:e5:9d:
39:b4:8f:bf:5f:a1:43:58:ed:82:7d:66:97:fa:2c:
d0:65:29:18:53:75:f8:14:96:86:50:3b:d8:ff:8c:
cc:9c:0c:2e:a0:04:86:01:ed:4f:ae:4d:24:52:9b:
af:04:e4:b9:90:e4:ed:7d:24:61:93:aa:49:50:9d:
52:4c:72:ab:33:db:82:f2:bd:dc:39:43:62:a6:33:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:80:1C:49:15:3A:7C:B0:10:60:79:21:C3:12:04:30:95:E2:FA:91
X509v3 Authority Key Identifier:
keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/1-4AcSRU6fLAQYHkhwxIEMJXi-pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.89.0-185.198.90.255
Signature Algorithm: sha256WithRSAEncryption
9e:a9:12:90:79:b6:c0:10:cb:84:99:05:19:46:a9:a2:d2:d6:
71:fe:29:ae:2b:6f:35:f2:a4:b2:fc:87:f9:f1:27:d0:c0:a8:
9b:9b:d9:c2:a0:ee:9e:6a:f2:6e:62:d8:ca:9a:60:dd:54:02:
92:3d:0b:ae:03:84:4c:76:f7:a0:65:15:76:c7:7c:86:d1:66:
66:b6:b4:99:07:04:6d:1c:4d:70:2c:0a:32:46:f0:80:41:e1:
49:91:54:28:58:86:f9:dd:8a:f5:2e:02:4e:1c:7d:3e:1f:41:
a6:b4:f8:f8:85:20:d5:8f:83:00:56:8f:de:4f:bc:69:ad:27:
b9:d3:18:46:75:c1:98:a3:d2:db:e0:ba:82:3a:e9:a4:e6:1e:
60:b7:5f:22:1a:08:aa:1d:c8:b4:0b:03:a5:bd:21:37:f7:f8:
cb:33:57:30:7e:a6:f0:65:76:ec:3a:8d:3d:c6:31:f3:58:d4:
e3:d6:8a:a9:b2:52:be:3a:e7:ad:39:b5:a7:16:35:cc:fc:23:
ae:4e:10:07:61:a0:16:c7:e2:72:77:ed:95:b5:18:0a:74:66:
e1:fc:04:0f:84:19:f2:e4:1e:3e:99:83:d3:72:07:31:db:ae:
de:56:e4:fc:b4:02:e3:13:43:0c:f1:0d:89:3d:5b:92:ef:93:
a0:4a:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:51 2023 by rpki-client on console-fra.rpki-client.org