Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/pQujSRFBF5uBWTO5dJx5urHbB9o.roa
File: pQujSRFBF5uBWTO5dJx5urHbB9o.roa (raw, json)
Hash identifier: Xr6YQwRVMi6NYn0kUqVjg1HcCJjTwBEIu8C3CwlCNlU=
Subject key identifier: A5:0B:A3:49:11:41:17:9B:81:59:33:B9:74:9C:79:BA:B1:DB:07:DA
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 021FCCD2
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/pQujSRFBF5uBWTO5dJx5urHbB9o.roa
Signing time: Sat 01 Jan 2022 05:56:03 +0000
ROA not before: Sat 01 Jan 2022 05:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54238
IP address blocks: 89.255.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35638482 (0x21fccd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Jan 1 05:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a50ba3491141179b815933b9749c79bab1db07da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:85:b8:fa:e2:80:96:b1:36:bb:5d:79:52:
8e:13:10:98:15:f9:a7:83:bf:16:92:82:0a:d3:c5:
4b:ba:ea:43:6d:d4:98:1c:bb:03:ee:e9:46:f4:b6:
89:75:16:d4:90:c0:80:0b:b4:95:72:bd:d2:fc:89:
71:af:37:87:a4:c9:d8:ad:ca:80:ac:22:0f:a2:65:
a1:67:54:4d:41:3e:fa:8a:4a:24:03:60:8a:da:a0:
74:d7:7f:33:72:85:a0:e6:a8:b8:99:cb:c1:d9:c6:
b1:58:a7:89:ab:72:0c:c0:d6:c3:f1:2b:c9:a0:05:
a7:ce:75:b4:c3:a3:16:bc:ee:ee:b8:d8:9c:0f:97:
a6:39:08:0a:c8:a3:f4:68:ae:4c:92:66:52:ba:3d:
e4:6c:db:a8:0e:f8:f1:77:ff:1d:97:c7:f5:a7:d1:
6c:e8:19:a0:c8:9a:88:90:a0:75:99:8b:96:c8:31:
50:15:1c:03:9a:50:46:14:11:fa:5a:46:74:02:d7:
53:ea:8f:b4:07:72:c0:a8:0f:fa:fb:aa:7a:42:b7:
63:ad:f3:db:2f:18:5c:80:1b:44:17:cc:95:65:fd:
1a:3e:ea:d8:0f:6e:3f:d1:53:fd:07:1e:18:8e:53:
55:2e:b7:88:83:83:3d:47:6c:37:cd:d0:a2:b1:84:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0B:A3:49:11:41:17:9B:81:59:33:B9:74:9C:79:BA:B1:DB:07:DA
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/pQujSRFBF5uBWTO5dJx5urHbB9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.208.0/21
Signature Algorithm: sha256WithRSAEncryption
72:6d:06:87:bf:ca:9e:59:57:16:ad:07:43:1c:5b:43:13:a1:
3a:18:44:87:38:c7:03:a0:1e:65:70:06:ee:c9:44:b1:45:23:
f0:38:5c:1e:ae:e6:e9:e0:5c:ae:af:ba:53:3b:d4:d6:a2:42:
d5:a8:c0:66:d9:78:86:a1:6a:c1:8e:f3:ef:c8:bd:02:09:b3:
10:d0:1a:da:32:30:3a:07:49:24:30:f3:0b:4c:62:7d:79:0b:
47:8e:a1:35:54:ba:41:e0:8b:43:78:02:f3:b2:ff:db:5f:d9:
dc:b9:b8:81:20:48:6f:78:cb:84:9b:85:47:71:61:70:5a:9f:
3e:ab:5e:f2:6c:7e:9b:80:4b:61:31:81:ca:a7:e5:bb:01:2f:
97:89:ed:ad:6a:c8:09:d4:ac:12:d8:4d:8d:c8:b9:14:a1:4b:
5d:88:b7:e8:dc:33:68:fd:39:7a:6d:a8:14:86:5e:48:0b:04:
a6:01:a7:cf:33:fa:0e:30:a0:59:6e:b2:fd:b6:37:41:5f:08:
5f:ba:11:51:82:70:18:3f:f6:8d:a2:53:69:3b:a1:7e:d3:7a:
11:c7:8d:4b:4f:1c:e7:88:f7:1d:d5:8c:2f:6b:e1:7d:81:3c:
03:a5:5f:0d:36:e6:da:1c:b5:60:2b:7b:3a:5b:02:6d:8e:04:
84:64:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-fra.rpki-client.org