Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6N8Wvuawcs7v4V4uO0aIT3JYp4k.roa
File: 6N8Wvuawcs7v4V4uO0aIT3JYp4k.roa (raw, json)
Hash identifier: wQE7VHAIUd+YTcV49wu703H14VbScIcxsFulUGtAoic=
Subject key identifier: E8:DF:16:BE:E6:B0:72:CE:EF:E1:5E:2E:3B:46:88:4F:72:58:A7:89
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 436121BD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6N8Wvuawcs7v4V4uO0aIT3JYp4k.roa
Signing time: Tue 07 Jun 2022 07:33:20 +0000
ROA not before: Tue 07 Jun 2022 07:33:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 89.40.104.0/23 maxlen: 23
188.213.22.0/24 maxlen: 24
188.213.19.0/24 maxlen: 24
89.40.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130439101 (0x436121bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 7 07:33:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8df16bee6b072ceefe15e2e3b46884f7258a789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:60:6e:35:a1:ba:c8:ae:b0:cc:86:97:69:
7b:af:66:65:5a:28:98:9b:ac:16:80:c3:84:c0:0f:
56:2a:31:ea:0c:d4:6c:c0:d7:44:29:25:00:5b:b6:
4d:55:c9:f9:0a:ca:b4:96:ba:5c:31:8f:73:d9:72:
06:ea:2b:be:6b:94:ee:00:3f:00:e0:08:7f:26:01:
c2:41:df:f3:a1:c7:75:4c:b6:6b:2f:29:2e:45:7f:
5b:f4:db:df:84:32:c8:d4:17:ba:60:b7:89:61:5f:
44:9a:a9:d9:ef:da:ad:8b:68:78:a6:58:27:e5:73:
3c:b4:f8:b0:54:c8:0a:c5:62:b0:b2:0b:d1:d8:dd:
45:f5:79:94:a9:92:eb:7c:7d:b2:24:ca:df:97:44:
77:91:aa:15:8b:e6:2f:37:6d:57:0f:36:9e:f5:a6:
c8:96:e9:08:f0:c8:79:ee:6e:13:1b:35:70:3f:bc:
06:20:40:d6:16:05:9f:8c:7f:60:f3:94:4b:a8:cf:
ee:20:d7:95:45:b8:c0:8e:06:a5:03:5d:0e:ec:62:
5a:b8:85:c2:8d:d1:87:28:79:9e:68:61:18:bb:ba:
db:5d:e0:ba:05:25:b1:ff:bd:e7:b0:45:4c:8d:55:
37:5d:ce:c9:b8:ff:9b:9f:ca:a0:e6:90:49:91:67:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:16:BE:E6:B0:72:CE:EF:E1:5E:2E:3B:46:88:4F:72:58:A7:89
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6N8Wvuawcs7v4V4uO0aIT3JYp4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.104.0/23
89.40.233.0/24
188.213.19.0/24
188.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
24:24:31:b8:03:06:aa:d4:a2:64:c2:1f:0d:12:88:f8:74:92:
09:61:6d:59:50:85:9d:8f:01:f7:17:ae:ca:ad:f6:a6:9b:04:
91:ca:ab:40:55:e7:86:83:67:27:b8:60:43:16:be:ab:5d:dd:
29:20:48:66:e4:57:d3:ed:d1:ae:90:a3:51:e5:74:73:df:9e:
61:f7:d6:cb:1c:3f:92:0b:1c:d6:53:2b:0c:67:86:ae:d3:1f:
d5:d1:2d:f5:00:96:d4:4c:b5:06:45:51:dc:d1:be:e4:fc:66:
87:24:ee:d6:1d:c2:fa:28:7e:3b:e1:9b:ae:09:44:74:f7:68:
4e:10:ca:f9:8f:f9:09:fb:72:b3:04:af:48:42:37:a6:f5:28:
43:7d:58:54:d8:86:b2:fa:5b:75:0b:5b:d0:34:ff:76:76:6f:
e4:c6:8a:d4:f5:36:a9:d5:0f:ec:5d:1c:2c:21:eb:15:dc:89:
37:97:de:b4:0a:98:93:09:a1:da:58:fa:f5:75:f1:68:b3:9f:
17:a9:09:65:a0:38:ed:5f:1f:dd:80:97:f1:c1:d4:68:a8:da:
f3:42:7a:28:04:6b:70:27:bf:a4:65:64:de:40:15:ff:28:20:
38:c4:4a:a2:4d:93:e5:9d:57:b6:a7:52:34:85:21:64:6c:69:
0c:10:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org