Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/U8lG4LCST8qJL4athThAUWxEdxg.roa
File: U8lG4LCST8qJL4athThAUWxEdxg.roa (raw, json)
Hash identifier: Y1kf6e+sDeALrYI0AKRmG15f7ndpVe6qCaKU55UQEsw=
Subject key identifier: 53:C9:46:E0:B0:92:4F:CA:89:2F:86:AD:85:38:40:51:6C:44:77:18
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 38B4DF
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/U8lG4LCST8qJL4athThAUWxEdxg.roa
Signing time: Sat 01 Jan 2022 02:56:47 +0000
ROA not before: Sat 01 Jan 2022 02:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211103
IP address blocks: 185.89.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3716319 (0x38b4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Jan 1 02:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53c946e0b0924fca892f86ad853840516c447718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:1e:75:ca:16:44:7c:31:d3:3c:f9:71:80:
ed:45:4e:a6:cd:b3:8e:53:fa:2f:c1:15:fe:5c:d6:
ce:7c:49:b3:30:a1:be:48:8f:96:64:0f:2a:d8:03:
57:70:d0:be:5b:f9:bd:73:31:4e:4b:1f:c8:5a:77:
c1:bd:db:a0:b3:a8:0f:cd:66:c0:de:cf:67:62:49:
13:75:96:de:e5:7e:97:8f:02:f9:4c:09:dc:3d:67:
cc:ab:15:18:f5:b6:c9:02:30:4c:17:75:02:b7:15:
6f:3d:b5:ee:a7:29:c6:02:67:0b:79:33:99:3c:01:
7f:a4:3b:a5:18:2d:37:70:7b:b2:68:03:5e:98:5e:
43:ad:80:f3:cf:3b:8c:c6:00:27:e5:b1:85:e0:b9:
fd:6d:a0:2b:53:0a:32:89:f1:ed:1b:75:fd:3c:eb:
2e:d8:6a:fb:75:6f:6d:f1:db:9a:f5:2a:fc:db:ec:
b9:a3:54:d1:f3:9d:76:1f:92:43:8a:a4:2f:8e:f7:
df:97:00:90:9b:4d:8b:3d:86:40:b1:57:67:ad:5a:
19:aa:8a:52:6c:0a:46:2a:a0:ab:86:7c:82:9a:7c:
cd:4e:11:dc:27:79:79:40:84:b0:78:85:51:cd:03:
06:77:6c:c9:8b:79:79:8e:07:fd:9d:b3:6c:62:d7:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:46:E0:B0:92:4F:CA:89:2F:86:AD:85:38:40:51:6C:44:77:18
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/U8lG4LCST8qJL4athThAUWxEdxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.21.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b3:59:63:d6:e9:be:88:59:5f:ff:f3:bb:93:c4:08:75:f7:
c4:eb:37:5c:a4:75:48:a3:c4:13:43:14:27:5d:09:61:69:ee:
1c:f2:58:12:b3:5d:65:87:d0:b1:07:68:58:63:ee:06:5f:03:
b9:ca:bd:63:28:c2:bf:e2:37:5c:aa:9d:83:30:b7:24:58:38:
8d:7f:78:70:e1:66:42:4e:fc:7f:32:0b:92:bb:ff:27:09:f2:
86:80:a6:85:8c:85:ca:d4:31:17:99:4d:f1:35:41:86:af:1f:
40:05:7e:a8:47:44:0e:0f:b2:23:72:ba:29:f8:8f:b8:c7:4f:
3f:bf:9f:f5:0a:08:14:6c:8c:88:93:e6:b9:a1:34:ed:6d:0b:
79:1a:67:e7:61:46:a1:2f:74:32:69:34:aa:8a:31:7b:7b:a9:
ed:31:14:5e:5b:eb:26:2d:4c:e8:c7:ba:3b:ff:dc:e7:74:22:
fe:cc:84:31:78:e6:25:77:c7:6a:81:a1:3c:c1:1f:54:41:8c:
08:97:0d:8c:5e:67:43:ae:41:70:ce:1c:3a:22:36:16:b5:26:
39:2b:67:cd:bf:7a:b3:e2:61:44:68:a8:2d:7e:76:b2:ce:44:
b7:96:ab:ad:60:68:cc:7c:b4:cf:93:ed:94:7d:59:ee:7e:52:
3b:6b:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-fra.rpki-client.org