Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PwNCIb3pbrKOTAVPa7FaVZ1hK9o.roa
File: PwNCIb3pbrKOTAVPa7FaVZ1hK9o.roa (raw, json)
Hash identifier: DenGDqhHPVJtm3YoPINwjytPlxGUR6LVhGT2pLptWNs=
Subject key identifier: 3F:03:42:21:BD:E9:6E:B2:8E:4C:05:4F:6B:B1:5A:55:9D:61:2B:DA
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: E568D5
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PwNCIb3pbrKOTAVPa7FaVZ1hK9o.roa
Signing time: Sat 01 Jan 2022 11:04:38 +0000
ROA not before: Sat 01 Jan 2022 11:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39810
IP address blocks: 89.187.0.0/23 maxlen: 24
89.187.0.0/19 maxlen: 24
89.187.2.0/24 maxlen: 24
89.187.3.0/24 maxlen: 24
2a10:e400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15034581 (0xe568d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 1 11:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f034221bde96eb28e4c054f6bb15a559d612bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:50:10:4d:3e:b8:57:6d:d0:fd:d5:e1:57:
5d:df:bf:26:8d:29:d1:31:70:c0:b0:ea:23:4a:2c:
94:df:c5:6c:db:5d:f8:e3:e7:01:e7:0e:ce:78:b2:
41:ae:c2:4d:87:bb:84:39:7c:0a:92:30:bd:4b:7d:
98:41:70:f4:01:8e:ec:e3:3e:d6:a8:52:a3:17:5a:
b1:c0:18:8f:be:46:df:f6:9a:f3:97:bd:41:a1:a4:
10:01:22:4f:56:0b:8f:09:58:df:3b:d2:3c:8d:37:
50:a7:3f:d8:3a:61:0e:8c:40:85:e6:05:4b:17:7e:
11:40:42:f5:86:6c:6f:b6:b2:e2:e5:f7:5f:9a:b8:
25:0f:2b:3b:25:41:01:84:23:48:42:2b:fa:ad:9a:
a6:4f:0f:75:82:88:dd:ed:11:2a:85:c1:92:13:11:
5f:8c:24:36:22:1b:b9:c3:c5:e6:de:3d:7d:d0:0f:
0a:71:47:7e:f8:33:b9:38:f8:47:bc:4a:d7:14:ef:
c7:42:d0:57:56:0b:2b:6c:51:a6:d9:a8:f5:2c:b7:
ef:06:3a:a9:11:7b:72:40:89:96:6c:5c:59:99:25:
82:4b:28:8d:87:f6:63:27:17:18:df:f0:a8:d2:79:
0f:e5:ab:8a:c0:17:46:6c:de:dc:f5:68:83:8d:e7:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:03:42:21:BD:E9:6E:B2:8E:4C:05:4F:6B:B1:5A:55:9D:61:2B:DA
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PwNCIb3pbrKOTAVPa7FaVZ1hK9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0/19
IPv6:
2a10:e400::/29
Signature Algorithm: sha256WithRSAEncryption
ca:95:43:01:30:f4:ba:14:37:9b:ee:0b:74:75:84:d0:d0:02:
74:99:d3:f3:b1:14:99:b6:e4:32:0b:de:cf:16:5f:2b:0f:33:
55:2c:cd:95:de:62:86:07:ce:9d:9f:44:c7:ac:f8:ec:ac:6d:
d6:09:ac:f7:f8:b5:b5:e4:ad:2d:dd:c3:ab:3a:3d:77:76:54:
93:6e:ce:2f:ed:1f:60:0a:94:b0:13:dd:5a:3a:6c:b7:b4:7f:
89:7e:30:55:de:bb:01:a1:ab:e8:ce:7e:08:a7:36:a4:66:bb:
d9:6d:aa:b3:98:da:f5:5f:70:6a:9f:35:a5:f7:38:7e:86:17:
37:73:a5:35:08:5e:75:3a:7b:d2:e3:ee:ff:ff:97:a2:b7:23:
ea:65:ee:6c:ad:b7:5d:08:c5:c0:6a:56:50:3b:66:4c:7a:7c:
ef:21:ee:be:42:43:d6:07:cd:6e:12:32:52:4a:ae:6b:a9:51:
35:24:60:c9:96:34:ff:d7:20:f8:e2:9c:0c:2c:6b:e0:3a:76:
0f:92:b9:0d:9c:f4:89:07:37:25:ea:79:3f:dd:eb:12:a5:c1:
f4:c0:17:57:7e:92:ad:6d:45:df:3d:4c:10:a3:f4:f9:20:bb:
dd:e7:c7:85:0a:32:8c:77:59:3f:ee:21:02:1a:cd:61:90:5a:
8f:0f:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org