Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iaVXihtuA_UCc_CtxxCpHM6RIAY.roa
File: iaVXihtuA_UCc_CtxxCpHM6RIAY.roa (raw, json)
Hash identifier: MIpVYHmshLw1fAjBcN1as8krWERZir3RAmSiGrDj7GU=
Subject key identifier: 89:A5:57:8A:1B:6E:03:F5:02:73:F0:AD:C7:10:A9:1C:CE:91:20:06
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018440F0242BD4C69E997DB0BEF1A7D0FB00
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iaVXihtuA_UCc_CtxxCpHM6RIAY.roa
Signing time: Fri 04 Nov 2022 04:39:50 +0000
ROA not before: Fri 04 Nov 2022 04:39:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59910
IP address blocks: 86.107.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:40:f0:24:2b:d4:c6:9e:99:7d:b0:be:f1:a7:d0:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Nov 4 04:39:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89a5578a1b6e03f50273f0adc710a91cce912006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:09:c0:97:c6:85:26:4b:0e:1b:76:5c:27:
67:09:2b:c5:b7:fd:c4:d4:19:f9:56:f2:6d:8f:ab:
15:1e:64:88:25:f6:73:72:8d:74:76:91:dc:f9:62:
ba:b7:73:23:f4:55:18:28:1a:f9:cc:da:3c:b6:13:
4c:3f:82:7c:8e:aa:a9:54:9f:ee:63:ad:05:c9:9e:
63:b4:80:8b:ee:5d:b1:91:de:45:a3:fd:23:12:50:
04:da:26:2d:8a:b1:b0:ca:2f:8d:78:42:6e:70:b1:
30:a9:d4:64:60:e1:fa:93:a2:6c:0d:35:ac:02:20:
35:fc:56:27:79:3b:8c:a3:48:e3:10:7d:9d:b8:3e:
77:fa:90:09:94:2e:e1:55:b9:0a:ce:97:85:40:d9:
54:e9:c2:e0:c3:2f:c6:29:ce:85:5a:f8:fa:20:35:
3e:a4:01:77:6e:26:71:82:c5:d4:da:6a:3d:6d:58:
b1:18:6a:e3:8c:cf:8a:5b:0a:fc:62:60:41:6b:3e:
96:00:97:ef:de:79:d7:02:c1:50:8d:96:82:eb:8e:
39:1f:47:c0:ef:51:e1:91:6e:a3:77:10:2f:c3:45:
99:32:31:a6:59:3a:1a:06:ba:b2:8a:e4:2f:d7:7b:
19:89:95:58:b9:4d:94:d2:73:1b:88:fc:ce:fd:84:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:57:8A:1B:6E:03:F5:02:73:F0:AD:C7:10:A9:1C:CE:91:20:06
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iaVXihtuA_UCc_CtxxCpHM6RIAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0f:51:be:d0:22:ac:a8:ff:e0:5c:19:00:20:89:21:49:cf:
44:80:76:e8:04:64:39:e7:3a:a3:51:8b:fd:c2:ce:03:58:a2:
94:0c:e6:8c:e4:7f:d6:dc:fa:ed:b3:2d:ca:b6:49:ad:6c:25:
2a:d5:19:0e:9f:40:7f:88:99:27:7d:8e:24:bc:3f:be:a3:36:
83:75:fc:52:33:50:8d:25:96:fc:9b:b4:be:45:30:50:fc:2b:
76:d3:d8:93:4f:51:dd:54:2c:fe:c0:0b:08:fc:38:d6:1e:87:
d1:67:4d:62:7d:05:70:e8:d5:d6:5b:d6:e6:cc:16:19:a8:93:
dd:e9:61:5d:e5:14:b9:57:81:22:13:eb:7e:6f:1f:18:20:4f:
72:b0:37:9a:ae:0f:17:dc:6b:b7:7a:50:b3:f4:33:56:f8:9f:
f8:99:ff:15:4e:25:7b:5a:20:cb:37:a7:02:a6:8a:a7:1e:9d:
e9:d0:00:49:d8:e4:cc:c5:95:1c:8d:8e:a6:4d:09:64:eb:8f:
16:a4:11:33:b7:5b:b9:fe:e5:65:d8:c7:a6:41:a0:b3:55:45:
e0:32:8e:23:48:c8:53:60:4b:4b:22:3b:d5:47:b5:c5:d1:86:
61:b9:10:ca:df:5d:cd:bb:fd:55:fb:f5:31:26:47:36:b0:03:
87:b8:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org