Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/SmQzV1NYEIJd3tu1QwxDxPosuOo.roa
File: SmQzV1NYEIJd3tu1QwxDxPosuOo.roa (raw, json)
Hash identifier: B3CrB2Al33lwSi5Sn4J0FuiTSEszgs6b3twLZ78oy84=
Subject key identifier: 4A:64:33:57:53:58:10:82:5D:DE:DB:B5:43:0C:43:C4:FA:2C:B8:EA
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 05960517
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/SmQzV1NYEIJd3tu1QwxDxPosuOo.roa
Signing time: Sat 01 Jan 2022 07:03:56 +0000
ROA not before: Sat 01 Jan 2022 07:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8751
IP address blocks: 89.42.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93717783 (0x5960517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a643357535810825ddedbb5430c43c4fa2cb8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:71:f4:5f:86:b8:1a:a3:71:e7:c2:16:7a:
b5:5a:96:8e:81:c0:e7:55:ef:92:8a:c2:c4:7d:be:
68:4b:f4:52:48:7b:03:c3:35:ea:b3:9e:25:33:1a:
24:32:4a:f5:b5:76:56:c3:5e:62:4f:0a:68:9e:5d:
78:f0:93:39:d6:41:51:68:bb:52:ab:73:e4:5b:9f:
0e:be:53:35:8b:98:a2:6e:18:63:14:9d:0a:a1:49:
9f:8d:dc:cf:3f:d2:d7:ae:50:18:e4:98:86:2a:68:
3a:14:4f:b9:b7:55:61:1c:35:b9:15:67:c2:06:d4:
ca:5b:8e:bc:2a:4d:53:e7:3e:1b:91:a3:33:0c:c6:
bb:97:3f:b5:0e:88:db:78:95:62:71:00:6c:ae:35:
8d:48:f0:bb:a7:c9:de:38:e6:bb:65:1b:db:f1:6d:
f5:01:f9:b7:2c:c9:c2:c9:a8:3c:86:a7:b0:94:27:
2d:66:c7:29:d9:68:7f:6c:ec:7e:75:3a:9b:79:c5:
55:29:05:f8:de:c8:75:19:1f:b3:75:5e:e1:77:c2:
52:8a:4c:f5:89:15:0d:36:6b:20:b1:4d:3a:72:02:
45:a8:1b:08:29:a7:6b:a1:e9:58:18:c7:81:d5:a6:
92:5d:3d:b6:45:37:cb:62:13:7b:e5:96:ca:e7:aa:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:33:57:53:58:10:82:5D:DE:DB:B5:43:0C:43:C4:FA:2C:B8:EA
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/SmQzV1NYEIJd3tu1QwxDxPosuOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.132.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8c:df:ec:2d:7f:b9:7e:de:21:40:f8:a0:2a:86:90:c9:a5:
79:0c:c7:26:c8:c7:3a:44:08:d4:b9:3e:15:6b:e6:c8:7f:64:
46:ec:66:37:03:7a:3a:43:d8:77:cd:8b:02:91:2f:03:31:36:
3d:fd:26:3c:9b:3b:26:76:7d:dc:86:cd:42:73:2e:d0:f5:b0:
22:40:6b:b0:f0:95:7c:74:6f:87:61:43:88:d8:89:93:1c:64:
41:5c:4c:3e:f4:6e:7a:1c:63:ff:b0:bf:0c:1c:cc:08:c6:cb:
ac:0d:bb:ce:25:74:d4:9f:76:78:64:06:10:3d:7e:a8:91:47:
65:3b:83:99:c4:46:ac:61:dd:57:c4:7b:ff:50:05:5b:b0:31:
80:6f:1c:c7:e9:eb:b3:b2:da:00:b3:8f:fb:3e:15:31:4e:34:
73:5a:77:63:53:15:c2:af:2b:16:06:46:be:09:d7:1f:49:60:
6f:19:b2:81:32:16:28:71:ef:2c:ae:74:af:cd:4a:db:fc:f9:
67:7e:3f:f4:d2:ed:f9:a7:7a:f0:0e:4d:ed:b8:ba:c8:75:10:
07:39:19:c3:c3:42:c0:1f:9b:bb:a0:11:73:ae:8c:1c:62:fd:
d0:c2:97:4e:1a:ad:27:b8:db:12:40:20:f9:51:a8:dd:0f:f6:
bc:19:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org