Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/YrMM1ryTOKV-CZcdapEQi2Q4weA.roa
File: YrMM1ryTOKV-CZcdapEQi2Q4weA.roa (raw, json)
Hash identifier: IC7lihjskBFjnC+HWyBi5eYARMkO5hUOzWDhs0uwzys=
Subject key identifier: 62:B3:0C:D6:BC:93:38:A5:7E:09:97:1D:6A:91:10:8B:64:38:C1:E0
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 37EC0A2E
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/YrMM1ryTOKV-CZcdapEQi2Q4weA.roa
Signing time: Sat 01 Jan 2022 00:54:58 +0000
ROA not before: Sat 01 Jan 2022 00:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208728
IP address blocks: 89.255.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938215982 (0x37ec0a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 1 00:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b30cd6bc9338a57e09971d6a91108b6438c1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:8a:8e:bf:78:62:0e:d8:b8:68:49:e4:bd:
7f:a0:e5:b4:ad:f8:e1:ee:c9:dd:bd:15:d5:98:6d:
5c:a2:7d:63:8b:1e:c2:c2:c4:82:a9:78:2b:b7:6b:
ab:2b:fc:f0:e3:e4:02:d7:24:70:e2:cc:c1:09:9c:
4b:33:5a:b7:4f:1d:71:ff:d3:fd:24:44:6d:16:a3:
d0:7f:97:00:3f:b4:60:3b:59:89:1c:6e:bb:99:80:
b0:fd:d0:fa:7a:3f:9e:3b:f0:8b:bf:a4:e8:bd:a8:
ce:ff:07:d3:ae:55:33:d9:f9:78:03:37:f9:20:da:
99:79:55:da:cb:09:9d:ed:ab:89:10:1c:8b:8d:09:
4a:52:62:be:e2:64:cd:bd:41:59:55:54:4a:cc:3e:
20:5d:5b:dc:55:6d:6c:85:58:71:6a:8c:ec:1d:1b:
af:26:0e:9a:e1:65:18:52:15:c4:1d:8f:35:6e:44:
df:da:bc:ab:11:bd:0b:59:eb:e0:a1:b0:c2:64:29:
77:48:09:e4:93:a6:7c:ac:64:f2:b8:a2:ae:d2:c0:
e0:3f:fb:2f:7e:a7:e3:7c:2e:5a:28:f7:8d:fc:b7:
53:6a:9b:77:21:81:a7:a7:42:b2:47:f7:fd:44:b3:
36:4a:32:76:c3:21:c3:04:75:ce:47:29:96:f7:b9:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B3:0C:D6:BC:93:38:A5:7E:09:97:1D:6A:91:10:8B:64:38:C1:E0
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/YrMM1ryTOKV-CZcdapEQi2Q4weA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e7:66:c9:46:47:13:30:b4:18:1a:20:f6:ed:e8:d3:10:89:
2b:e3:c4:b0:04:12:53:93:ce:76:db:a7:0d:92:aa:b8:09:bc:
f8:eb:9c:8c:64:1f:aa:9d:56:b8:29:9e:b0:0f:52:9c:61:3d:
bc:af:48:ca:83:de:1a:c8:c8:d0:0a:22:55:7c:6e:ec:29:5b:
d2:d9:86:43:68:f5:7b:e3:87:17:21:05:4b:4e:e1:f1:01:c3:
06:a3:c3:f3:ec:36:35:47:6a:6f:3d:d0:f0:a3:4b:2c:e5:f4:
2c:20:bf:61:83:45:b8:35:b0:3e:60:04:34:53:76:6f:29:5b:
42:6a:98:5b:1c:4e:17:d3:7c:88:f3:40:2d:54:e6:5a:1e:bd:
d4:7c:d5:9d:e0:6d:97:cf:75:2f:f6:b4:c3:91:7d:f2:f7:19:
80:e4:e0:a2:29:b0:15:75:f9:a4:b9:11:dc:e5:17:b1:69:f4:
af:e2:44:15:83:58:25:f1:c3:c4:ba:3b:da:a8:a7:e5:b6:d8:
27:5d:d8:ea:a6:df:b1:c6:f1:81:a3:14:7e:f3:b9:04:87:82:
dd:7e:a4:04:49:89:bb:74:b8:74:18:73:ae:d4:9f:84:fa:c9:
00:28:05:b9:a9:cc:85:4a:5e:83:90:f8:ac:21:41:a8:ad:90:
23:b9:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org