Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/X0FTRCmAfc95ytIlnorY4jcRP6o.roa
File: X0FTRCmAfc95ytIlnorY4jcRP6o.roa (raw, json)
Hash identifier: o21fVgjlPrYqliPmtetnn9xepEPcxwbXN+7t6tzvm5c=
Subject key identifier: 5F:41:53:44:29:80:7D:CF:79:CA:D2:25:9E:8A:D8:E2:37:11:3F:AA
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0595E51A
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/X0FTRCmAfc95ytIlnorY4jcRP6o.roa
Signing time: Sat 01 Jan 2022 07:03:56 +0000
ROA not before: Sat 01 Jan 2022 07:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 89.34.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93709594 (0x595e51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f41534429807dcf79cad2259e8ad8e237113faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:8a:7c:53:88:13:c4:48:a5:b3:92:38:96:
39:84:0d:7b:20:a3:36:d5:83:4f:a1:b0:65:1d:a1:
3b:1c:ba:e0:e7:38:6a:f5:60:e0:0c:36:5b:06:de:
7a:eb:96:d6:a9:d2:8d:07:33:8f:64:6b:11:31:21:
6d:9c:c1:05:07:1f:44:ad:e7:06:31:b8:e2:f2:93:
57:28:e2:ac:b8:2b:64:12:94:39:a2:a4:c4:5d:ec:
51:97:72:bb:c6:68:b4:58:03:a2:66:ff:de:1f:93:
4f:76:01:e3:ba:ba:0b:1f:ff:e4:f3:ac:8a:36:19:
f3:6a:13:29:a9:ba:5d:59:1b:a6:fb:7a:2c:3d:60:
92:60:3e:e6:cf:05:e5:a4:bb:1d:cd:04:13:fc:a3:
7c:aa:d2:87:5f:40:37:cd:a3:a9:06:0b:28:16:3c:
22:af:74:1a:b7:52:55:15:6a:09:04:4b:33:d9:22:
dd:db:54:03:28:19:6c:5b:cb:db:c7:a4:af:a8:7c:
a3:11:4c:d7:fb:12:8a:d6:b7:e8:02:6b:ed:a1:58:
5a:2a:1b:1c:70:1b:71:15:2e:a4:27:7c:24:ad:12:
5e:f3:5f:62:ed:58:57:a4:3a:2a:7c:ca:fc:f5:d4:
a4:bc:bc:49:12:ec:cf:63:a4:d0:0a:51:22:67:c2:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:53:44:29:80:7D:CF:79:CA:D2:25:9E:8A:D8:E2:37:11:3F:AA
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/X0FTRCmAfc95ytIlnorY4jcRP6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ed:66:ad:68:84:5e:e5:86:96:4e:b9:08:79:ea:2b:be:ed:
79:3b:cb:c5:67:68:24:da:19:92:02:27:d4:6c:9b:2d:fd:5a:
c8:88:6a:7b:a4:8d:d1:ed:a0:69:76:c2:ef:48:f2:8b:c4:57:
46:ff:a3:b0:7f:ab:7f:d7:64:bb:85:45:70:fe:98:bb:f9:90:
31:04:8f:f1:a0:36:22:e0:c7:c4:16:76:7e:6f:46:92:77:09:
45:df:c0:30:fa:1f:15:82:7d:91:e6:01:83:f6:5b:68:3f:8b:
05:6b:2b:31:18:a1:00:9e:e3:42:d5:e0:4c:b7:26:f9:56:86:
4a:87:4f:65:d1:ed:a5:c6:02:f1:d0:f3:06:13:c6:31:ff:71:
69:bb:00:95:e4:b8:aa:8a:02:7f:a8:cd:11:e0:a6:75:52:d8:
f7:5a:0c:f5:61:ca:ce:13:72:e1:e6:4d:8f:d5:a3:0e:bf:a9:
10:21:52:ff:ff:4a:79:30:34:a6:1f:a2:50:c0:88:58:f2:d1:
07:53:35:8b:0d:99:7a:bb:85:f4:2b:c6:1c:26:41:c3:dd:b2:
dd:c0:05:85:8f:5f:f0:98:55:92:b6:00:c8:f4:51:d8:3a:0b:
67:ba:e5:72:65:c1:37:d7:9b:25:c5:a3:80:74:0d:fa:b1:a8:
77:30:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org