Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/iU2tS1fA_3NptwVjFLfl_9VLavs.roa
File: iU2tS1fA_3NptwVjFLfl_9VLavs.roa (raw, json)
Hash identifier: EXQkR3WSrce6dVpCWlX9XtBlrgMYV6t98IHAYIUAZ2k=
Subject key identifier: 89:4D:AD:4B:57:C0:FF:73:69:B7:05:63:14:B7:E5:FF:D5:4B:6A:FB
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 0A0489FE
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/iU2tS1fA_3NptwVjFLfl_9VLavs.roa
Signing time: Sat 01 Jan 2022 04:59:27 +0000
ROA not before: Sat 01 Jan 2022 04:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50954
IP address blocks: 91.216.58.0/24 maxlen: 24
185.236.56.0/22 maxlen: 22
2a0d:9d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168069630 (0xa0489fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Jan 1 04:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=894dad4b57c0ff7369b7056314b7e5ffd54b6afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:45:fc:96:87:e3:87:82:06:dd:18:38:89:
52:57:76:20:a0:ad:7f:e6:30:d2:0a:1a:41:0b:38:
bb:e8:95:06:0d:ec:43:e0:15:29:92:68:fc:b6:87:
26:b6:3b:ef:66:d9:41:f9:ec:8f:b5:19:2b:df:13:
34:55:3b:b4:8b:05:c5:35:22:25:d7:df:61:82:81:
76:ee:2f:98:fd:d3:6e:3a:02:b8:8f:29:79:1f:0c:
6a:ce:f5:01:62:7c:7c:6e:3c:8c:0d:9d:cf:09:d4:
92:a0:ca:89:71:dc:69:92:e9:be:7b:95:05:02:1e:
13:d1:dd:7a:eb:62:3f:7f:0f:0f:c5:a7:b2:74:15:
7b:57:df:5e:21:58:f3:f2:ef:78:aa:b1:b7:66:0a:
35:3e:58:13:9f:62:7c:f0:f9:f5:c3:5b:06:0c:06:
c4:12:e1:88:40:b8:a4:04:aa:5f:61:37:5f:6f:39:
09:24:7c:06:83:f6:29:67:a9:59:6c:f4:f8:c2:95:
21:18:0b:48:f5:c0:68:63:68:35:5d:88:7c:0b:44:
31:dd:16:b7:d3:45:51:35:ba:16:82:71:ab:b9:dd:
8c:9a:31:b4:03:3e:e1:44:46:9a:2a:94:d6:7f:1a:
dd:64:c2:7c:18:0f:2d:30:24:cb:a7:92:30:a7:bc:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:AD:4B:57:C0:FF:73:69:B7:05:63:14:B7:E5:FF:D5:4B:6A:FB
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/iU2tS1fA_3NptwVjFLfl_9VLavs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.58.0/24
185.236.56.0/22
IPv6:
2a0d:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
02:b6:86:6d:9f:18:a5:76:f2:0f:ef:fd:c2:e5:10:2f:c7:ff:
2e:07:b0:fc:ef:d2:5e:c5:9b:b2:ed:9f:aa:42:5e:de:15:ec:
20:ab:73:b5:9f:41:0c:38:a3:23:99:5a:7b:93:af:9b:e1:bf:
98:32:7a:0a:c8:a1:87:08:83:e0:6b:10:bc:44:78:aa:ff:c8:
8c:af:ac:fe:85:99:2a:80:19:00:de:9d:8f:cf:74:b6:30:c2:
b0:4f:99:82:0d:13:7a:6e:86:88:d5:1e:b2:98:e2:5b:a0:c5:
41:37:5f:c3:ab:f3:53:ab:d9:16:a3:10:0e:52:34:bd:a7:8b:
e5:1b:05:3a:a2:6b:58:1a:40:00:2c:90:a0:d6:27:be:41:d8:
ab:f1:fe:b1:ef:27:db:f6:20:3f:4d:7a:72:03:c9:d1:85:c0:
79:df:3c:ba:fc:48:79:87:8e:de:53:ea:9c:0f:ed:f3:8e:3d:
8e:c2:fe:46:b3:ac:22:cb:33:0c:05:85:90:9c:7e:64:42:d1:
74:05:be:49:8e:14:c5:ea:9c:02:57:ea:6a:17:ee:45:e3:81:
7a:d7:29:f5:49:7b:7d:f2:0d:73:e0:1a:75:8f:9b:59:c6:c3:
7f:ba:31:9b:dd:29:5c:41:be:d1:03:ba:64:cd:63:84:d6:3c:
5f:7b:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org