Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/h5yFjIrdMlEJR1sQcVdaW0eBDnA.roa
File: h5yFjIrdMlEJR1sQcVdaW0eBDnA.roa (raw, json)
Hash identifier: 5wQjmL+VJTHFD5qazGfcQc74EeCdTImWcPU+RNzY/WE=
Subject key identifier: 87:9C:85:8C:8A:DD:32:51:09:47:5B:10:71:57:5A:5B:47:81:0E:70
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: AA13F8
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/h5yFjIrdMlEJR1sQcVdaW0eBDnA.roa
Signing time: Sat 01 Jan 2022 03:59:48 +0000
ROA not before: Sat 01 Jan 2022 03:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34312
IP address blocks: 195.95.206.0/23 maxlen: 24
193.111.6.0/23 maxlen: 23
89.200.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11146232 (0xaa13f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Jan 1 03:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=879c858c8add325109475b1071575a5b47810e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:ea:a6:85:0a:46:e6:8d:a4:63:33:92:db:
26:e1:88:8c:85:ca:37:28:99:c1:34:c0:0f:0a:24:
d5:62:25:6b:fa:9d:af:74:9d:14:0b:19:1e:ed:f5:
03:0c:4f:28:e9:40:e7:0c:da:ea:ce:be:d3:63:1d:
01:28:84:0f:ca:bd:41:6c:75:23:ef:04:ec:c0:5f:
d9:72:84:e0:f8:fd:fb:5e:7a:99:50:36:0d:87:f9:
2b:89:7e:79:45:e1:52:de:41:07:bc:fe:a9:d9:6e:
82:68:9f:55:cf:b2:ad:9f:0e:29:a1:3e:39:8b:f4:
ac:8f:a1:03:6b:97:09:c9:4a:92:3e:1d:31:6f:3d:
31:e4:9e:bb:19:6f:a0:1e:19:e3:e9:d3:a5:66:40:
d2:79:e1:63:1c:c2:b7:9d:03:6b:3d:48:53:d5:c7:
5a:99:35:a3:24:01:22:c8:b5:8c:15:81:2d:08:7c:
4c:bb:84:69:11:ce:d2:56:ef:83:50:96:90:a1:ab:
bb:01:5c:85:88:12:51:e5:6b:e9:c6:ff:48:2f:30:
15:4e:12:a2:3e:a8:33:c6:7c:1d:26:38:5d:fd:6c:
84:dc:e2:a4:f2:32:02:12:88:07:93:40:b9:c9:78:
cd:3e:87:a7:80:62:ab:df:63:28:be:60:74:0e:58:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:85:8C:8A:DD:32:51:09:47:5B:10:71:57:5A:5B:47:81:0E:70
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/h5yFjIrdMlEJR1sQcVdaW0eBDnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.200.248.0/21
193.111.6.0/23
195.95.206.0/23
Signature Algorithm: sha256WithRSAEncryption
51:1d:3c:15:69:ad:83:6b:c9:77:3c:8e:14:d1:00:43:c0:20:
46:9a:ef:e5:75:27:11:22:d1:12:4f:f4:cd:e9:e3:22:34:18:
0f:cf:c1:20:ce:4b:e7:4f:d3:1d:03:51:fc:af:24:7e:3d:e0:
11:ba:37:78:1f:13:a4:e0:8f:75:ea:59:7f:b9:3a:96:3a:32:
54:79:20:06:5c:c7:e5:bd:5f:2c:51:a1:af:a0:b1:a0:c5:62:
62:4b:7e:70:29:c6:3d:a9:a9:38:47:9e:f1:2a:e7:02:ee:8d:
09:01:ef:42:1a:84:30:0c:c9:6c:66:a1:08:53:82:eb:f2:ec:
a2:bc:aa:52:cb:d8:ab:de:5a:d6:98:02:c8:95:e2:b5:f7:d6:
8c:0c:a9:18:7e:cb:11:d5:6f:3c:c7:2a:2e:d7:ca:a5:1f:23:
df:df:33:ed:01:80:dd:97:41:29:d9:3b:3a:a0:5e:9c:42:14:
a7:77:c2:2b:50:2b:67:0a:a0:14:1c:f6:ba:7b:ff:2d:be:cb:
87:74:e2:4f:ad:f3:3e:78:5f:42:3f:29:00:40:56:92:97:7d:
88:bb:5b:ae:88:14:8c:91:b2:c5:6b:e7:f2:0f:ff:fc:86:eb:
25:c1:4c:4e:3b:59:15:a8:e8:6b:f1:0a:44:9f:87:f2:e4:b2:
d5:34:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org