Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/1VJlG99M7xi0alUms8ndWR66IeY.roa
File: 1VJlG99M7xi0alUms8ndWR66IeY.roa (raw, json)
Hash identifier: y6ycgcfZG5ZktJLEfj2RjRz2RJOo75Db+WKQA3BBor0=
Subject key identifier: D5:52:65:1B:DF:4C:EF:18:B4:6A:55:26:B3:C9:DD:59:1E:BA:21:E6
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 09F29649
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/1VJlG99M7xi0alUms8ndWR66IeY.roa
Signing time: Mon 28 Feb 2022 12:20:22 +0000
ROA not before: Mon 28 Feb 2022 12:20:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207790
IP address blocks: 89.56.0.0/16 maxlen: 24
185.12.88.0/22 maxlen: 22
89.57.0.0/17 maxlen: 24
2a03:7840::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166893129 (0x9f29649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Feb 28 12:20:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d552651bdf4cef18b46a5526b3c9dd591eba21e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:35:c4:ea:e0:c6:91:73:7b:c6:cf:d2:70:
7c:36:30:82:49:67:00:43:cb:ee:b2:ac:61:70:69:
0c:e8:0c:08:33:f8:04:49:d5:01:7e:d9:02:43:c9:
99:44:b2:87:6f:06:38:d3:44:bf:c2:91:0b:01:3c:
ca:84:2c:39:19:5f:7c:d5:29:b3:7a:56:ae:e2:4b:
14:fb:00:b7:9a:d3:87:8b:b2:c4:d0:a3:b5:78:14:
cb:fe:6e:9d:31:e0:b8:ff:4d:1e:64:2d:2d:3e:46:
14:c5:37:ce:93:d0:b1:5b:f8:96:59:24:ae:41:3d:
20:b7:04:8d:1a:ed:be:99:86:25:c9:9f:b9:e3:0a:
9c:9a:17:e6:b5:39:6d:14:88:04:0e:e6:50:fd:04:
a9:96:c1:13:87:27:8f:a9:0b:d3:ae:67:6f:fa:75:
70:e3:82:e9:37:24:91:cd:8b:9a:ce:53:cb:3d:e9:
e6:0d:77:9d:d9:de:e9:b9:15:87:43:ce:f8:4c:1c:
21:5b:0f:63:d6:bc:2c:ca:be:f0:8d:3f:f3:24:8b:
b1:04:61:3b:7e:df:57:20:b4:ec:7a:fa:0e:85:cf:
12:4a:29:98:f0:9f:63:ba:4f:60:9e:1d:30:35:15:
67:9c:23:14:d2:a3:75:d8:17:c2:fa:4f:8a:45:f7:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:65:1B:DF:4C:EF:18:B4:6A:55:26:B3:C9:DD:59:1E:BA:21:E6
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/1VJlG99M7xi0alUms8ndWR66IeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.56.0.0-89.57.127.255
185.12.88.0/22
IPv6:
2a03:7840::/29
Signature Algorithm: sha256WithRSAEncryption
8b:48:4e:f7:94:12:61:86:bc:df:67:cd:1f:e1:0d:ef:0b:04:
81:57:13:10:91:44:42:a3:0a:87:89:b5:31:5b:09:6a:7d:03:
67:a0:8b:08:16:f4:c5:98:68:4c:11:07:30:66:b9:89:9a:c3:
d4:a6:53:19:86:0c:d3:9b:4c:46:f6:6e:40:77:4b:00:18:5e:
19:12:f4:4a:61:3c:2f:b2:a2:75:e0:fa:06:b1:57:df:03:06:
67:44:df:e1:5e:c3:a4:d5:c6:33:5d:63:39:63:3f:89:c4:f2:
2d:a5:f7:61:93:11:28:b8:fe:40:46:a7:eb:49:ef:d1:37:e2:
3f:f3:09:8f:ff:90:6f:ab:c4:e5:ec:de:93:44:6b:e6:62:ca:
f6:48:55:8b:9c:af:8b:d7:f0:3b:31:a0:94:f1:2e:98:c9:ae:
1e:1b:32:c0:b5:e5:c7:b8:33:e0:a0:47:78:72:8b:c4:d2:34:
c3:33:8b:5c:31:9b:f5:4b:89:8f:81:f7:c6:1a:8d:2a:58:5e:
06:b7:5a:3e:1b:82:6f:bd:9c:b7:4c:61:8d:e1:75:b8:b4:12:
2c:9f:9b:91:f7:48:92:99:d8:d2:ed:a8:cd:23:f7:86:67:5b:
54:b8:d6:c2:8c:9d:d8:e2:eb:1c:9b:04:0a:d6:b8:45:17:77:
98:36:19:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org