Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/1pZsGkTEHFqCP_QX9MWFL9APWh4.roa
File: 1pZsGkTEHFqCP_QX9MWFL9APWh4.roa (raw, json)
Hash identifier: bI8k169aK6kJj0A6qWeUdCiSV61c4PhksXeUM3vN1ZE=
Subject key identifier: D6:96:6C:1A:44:C4:1C:5A:82:3F:F4:17:F4:C5:85:2F:D0:0F:5A:1E
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 0FA8C247
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/1pZsGkTEHFqCP_QX9MWFL9APWh4.roa
Signing time: Sat 01 Jan 2022 09:54:23 +0000
ROA not before: Sat 01 Jan 2022 09:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205015
IP address blocks: 185.189.89.0/24 maxlen: 24
185.189.88.0/24 maxlen: 24
185.189.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262718023 (0xfa8c247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 09:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6966c1a44c41c5a823ff417f4c5852fd00f5a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:b0:42:ed:9f:6d:2b:f0:14:2c:08:74:de:
ff:06:dd:e3:f5:af:59:fe:37:ab:38:a9:a4:7f:e8:
89:b3:41:04:9f:63:0b:71:18:e0:aa:9a:29:ee:03:
1c:c7:21:5e:ba:6d:b2:00:59:2a:dc:39:9f:18:23:
b7:4b:0e:7f:3c:3e:6d:3e:5f:85:46:38:68:8f:4b:
d2:ef:b0:7f:a8:e9:db:7e:f5:48:a4:c1:d1:d9:07:
da:b7:5d:42:7a:26:7c:a5:64:f5:98:a3:0f:6a:f1:
59:02:04:b7:66:af:f4:84:a5:1a:25:cf:52:20:8d:
1e:e7:ac:45:4e:bf:0b:e5:61:53:89:f6:d7:c6:16:
ec:1b:4d:0d:9e:11:79:89:35:55:d2:dc:36:83:fb:
47:bd:0b:5a:ca:a9:7f:be:ac:aa:1c:dc:ef:a9:db:
81:c3:af:c6:1b:8a:35:87:96:93:ba:23:04:bd:89:
92:07:ae:44:30:f7:7b:c4:4d:e0:cd:44:90:05:4b:
44:27:e5:4c:60:e5:6a:6b:ba:0f:bd:67:24:c8:c4:
f7:4c:bc:56:19:ea:64:bd:38:be:fc:97:cd:16:1e:
18:e9:ad:38:c7:6a:a0:86:0a:ac:ed:19:6f:7a:2f:
9c:b3:b5:d6:75:7e:74:4b:4a:e7:76:d3:e6:90:c3:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:6C:1A:44:C4:1C:5A:82:3F:F4:17:F4:C5:85:2F:D0:0F:5A:1E
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/1pZsGkTEHFqCP_QX9MWFL9APWh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.88.0/23
185.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
94:25:65:18:8f:40:b5:e1:bb:17:31:2a:c3:bc:65:fd:0b:2c:
eb:cd:e8:ea:03:b3:ff:2c:a0:d6:a4:dd:97:85:88:60:0a:16:
d6:be:93:a1:35:bd:b8:68:d0:fe:58:22:d0:d8:21:d8:1d:e4:
3f:3c:9a:25:ae:b2:1d:7d:bd:14:c6:bb:aa:ce:2a:b9:3c:97:
83:de:2d:63:29:82:d0:9a:39:46:70:dc:dd:73:35:f7:61:c3:
6a:56:bd:e0:8d:38:4c:0b:e2:bf:80:b8:03:35:b7:a4:15:65:
f4:bd:08:7d:cc:d9:2d:ce:7c:dc:39:71:cc:5e:7d:95:79:43:
c6:c8:54:51:af:60:86:11:09:fc:88:d5:27:18:27:d7:f6:63:
8a:4b:04:75:74:34:19:64:1b:db:a7:3f:26:61:ce:77:91:1d:
90:47:3b:5f:94:e8:6d:90:89:cc:e8:58:51:56:c6:a4:74:5d:
5a:ff:ff:49:76:98:46:7f:50:cd:a2:8c:59:28:12:09:50:c7:
54:12:7a:76:61:c6:cd:8d:c9:2d:58:d3:44:0e:b5:19:42:3e:
e3:b6:e2:b4:81:62:a8:2e:06:c7:52:0f:99:0c:c4:ee:fd:14:
e9:82:3b:f2:c7:7b:ab:cc:f3:e5:a0:57:13:0a:d0:5d:7f:ab:
7f:ff:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-ams.rpki-client.org