Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/aQImSE3ji6H-7GNQijeSsOrm_bg.roa
File: aQImSE3ji6H-7GNQijeSsOrm_bg.roa (raw, json)
Hash identifier: ixPaOawq6qINg1Hww4ERUG8HR+FjO7sgBv4mc1UVEi4=
Subject key identifier: 69:02:26:48:4D:E3:8B:A1:FE:EC:63:50:8A:37:92:B0:EA:E6:FD:B8
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0C508A03
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/aQImSE3ji6H-7GNQijeSsOrm_bg.roa
Signing time: Thu 16 Jun 2022 13:17:42 +0000
ROA not before: Thu 16 Jun 2022 13:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28745
IP address blocks: 89.237.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206604803 (0xc508a03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jun 16 13:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=690226484de38ba1feec63508a3792b0eae6fdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:f8:bf:cc:ea:3d:31:d4:76:bd:31:79:5b:
fc:bf:b3:59:b7:f3:e3:c1:b2:ca:7a:ad:fe:9f:29:
99:0f:90:4e:f8:ea:08:29:4b:1b:65:df:ac:7d:fa:
01:90:f2:09:a1:e4:44:34:81:f5:45:26:90:79:bd:
d9:7e:d0:22:8e:c0:9c:53:b0:3e:a7:06:27:27:c9:
1b:6b:9a:26:a9:83:0c:99:08:78:46:57:f4:0d:37:
a2:4c:07:99:60:8d:3a:18:5e:3a:d7:bd:47:67:8c:
ae:4e:7c:46:e5:80:a9:ee:74:17:51:70:a5:80:7c:
e6:40:95:e3:79:84:d9:cb:c0:3d:67:2f:07:85:c5:
ce:6f:2e:92:7e:0f:9d:cf:70:e8:2e:a5:2f:07:31:
f8:d3:f8:a3:61:e7:e3:23:80:31:a1:16:cf:51:df:
47:e4:8a:33:83:9f:60:da:4a:3e:14:57:35:11:50:
db:c7:4e:b6:be:c2:58:b6:9d:32:60:f8:c9:e8:55:
d3:fa:07:d5:17:b2:82:ef:66:4d:e8:a6:c4:82:7a:
6e:5b:bd:c4:e7:ec:04:d4:1a:a7:83:f8:59:29:84:
14:90:2e:44:93:a7:1d:13:5c:d3:7d:66:9d:06:0c:
19:97:fe:54:29:0c:32:6f:88:35:17:0c:ac:6c:83:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:26:48:4D:E3:8B:A1:FE:EC:63:50:8A:37:92:B0:EA:E6:FD:B8
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/aQImSE3ji6H-7GNQijeSsOrm_bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.237.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:91:2b:86:8e:49:a0:8c:ad:fc:0c:2a:0c:c7:6e:14:be:8e:
88:a2:04:e9:bf:f3:3c:fa:98:b4:7c:2c:df:f1:fa:62:4a:f2:
00:42:b7:62:be:63:49:a7:d3:6f:69:ba:3d:eb:38:a7:38:7c:
25:56:29:37:eb:61:0b:0e:ad:44:79:2b:ff:b6:72:90:e8:17:
6a:ab:41:78:4a:5d:c8:93:c0:5a:e3:65:ac:7b:60:61:89:80:
a8:24:6f:4b:f5:5b:56:65:28:9e:21:0f:1d:25:c1:c9:0b:88:
0c:8a:16:c7:dd:e1:41:03:2a:06:b7:e4:72:f1:57:1f:2b:c8:
0c:9b:94:65:02:f1:93:51:d9:73:5c:ff:c3:32:d4:81:df:dd:
db:45:6e:0d:11:45:8f:a1:be:3d:42:e5:b0:7c:55:da:5d:61:
a5:b4:09:1d:0f:06:62:0b:95:de:6b:fc:fd:9b:83:91:47:7e:
8a:0e:10:5d:98:d5:5c:6c:ad:c1:e9:73:3e:89:71:1e:de:d9:
8d:49:36:67:a7:c9:c9:a0:f9:ad:8f:3b:b3:1a:a0:46:42:75:
34:d6:da:5b:84:4f:c4:76:20:ef:91:28:1c:a5:75:b7:f7:e7:
59:f7:2d:28:96:1f:b0:1c:99:5f:54:59:df:a8:f9:4b:53:0f:
96:38:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org