Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DTgJg83DoJnjk3L0x6KJpMMQetM.roa
File: DTgJg83DoJnjk3L0x6KJpMMQetM.roa (raw, json)
Hash identifier: qxDvfyo5LP9N3420YNenBsckAhcISS0MyGjOqU68+mM=
Subject key identifier: 0D:38:09:83:CD:C3:A0:99:E3:93:72:F4:C7:A2:89:A4:C3:10:7A:D3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 3655E2B0
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DTgJg83DoJnjk3L0x6KJpMMQetM.roa
Signing time: Sat 01 Jan 2022 13:57:16 +0000
ROA not before: Sat 01 Jan 2022 13:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 89.34.26.0/24 maxlen: 24
89.41.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911598256 (0x3655e2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d380983cdc3a099e39372f4c7a289a4c3107ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:a8:0c:f3:5d:66:77:de:27:df:e0:ea:65:
63:75:95:e4:95:75:46:b5:34:6a:29:78:6d:c3:e5:
93:c7:b5:57:cc:e3:37:a7:46:c2:a2:b5:99:47:c7:
8f:07:ff:71:a1:65:ba:2d:c2:36:6f:69:1d:47:68:
53:4c:86:88:17:c0:2e:6d:2f:40:56:52:8b:98:54:
37:1c:e8:85:c0:4f:c6:1e:b6:c0:f6:8c:dd:ee:27:
f0:26:9d:1e:f6:0c:f8:67:93:5f:20:47:00:05:7a:
24:9d:72:02:85:37:55:9a:06:2e:6a:61:79:9a:25:
bc:14:f5:88:10:84:df:8b:60:c5:e0:53:6f:91:78:
a8:06:86:f1:78:f5:ba:a2:7f:64:ab:42:ab:3d:9d:
60:95:2c:13:42:ee:c4:be:d4:33:54:78:78:7d:b3:
db:2e:d3:8c:03:7a:e5:e9:af:e6:13:8c:51:d3:2c:
e6:b3:b6:a3:bf:41:e3:2c:3f:96:f9:45:10:3e:cd:
cb:62:95:27:32:46:bf:4c:34:30:d0:50:cd:3f:fc:
6e:e1:79:35:f7:be:92:31:3a:2e:1d:39:c5:35:3a:
d2:8c:2f:99:c1:2c:70:91:9a:ee:c2:0d:4c:8e:ee:
43:de:33:87:10:22:93:58:26:0d:a2:05:46:f7:68:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:09:83:CD:C3:A0:99:E3:93:72:F4:C7:A2:89:A4:C3:10:7A:D3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/DTgJg83DoJnjk3L0x6KJpMMQetM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.26.0/24
89.41.179.0/24
Signature Algorithm: sha256WithRSAEncryption
44:39:80:1e:bd:5f:f6:b5:9d:8e:31:52:59:c2:24:18:c5:ff:
53:a8:72:81:86:9c:86:84:c7:45:93:75:5f:de:b2:3f:20:1f:
15:33:df:52:59:16:58:a0:e0:0e:00:e2:01:e2:8f:be:d8:2d:
39:bc:a1:75:f1:4a:30:53:ab:5f:b2:f5:47:90:a3:74:4b:86:
e4:e1:64:b6:17:9c:ba:ee:bc:6a:69:7f:a4:df:d1:c3:63:d8:
1d:55:b5:d3:7e:af:a7:9c:2a:5e:ac:0c:e4:81:c8:a0:b6:de:
fc:24:85:ce:05:e3:fc:2d:32:b1:77:68:65:7d:53:f2:de:02:
38:0a:82:ae:90:a9:c0:58:ea:b1:29:b6:56:04:54:3b:99:2e:
84:89:80:26:68:ea:cf:f0:ab:cb:7a:77:9f:b6:fa:3f:b9:ac:
a0:21:0b:f1:da:6e:c8:3b:04:0c:c9:b9:0e:4d:64:b9:f7:9e:
55:df:f9:cb:7d:b8:4f:f4:1d:61:d2:2e:67:68:09:0c:24:91:
36:de:e7:0a:97:14:e7:94:0e:58:57:b8:20:fb:27:4c:78:af:
76:97:80:38:cc:4f:87:1a:b9:7a:7d:8f:40:7f:a6:fb:e2:28:
4d:1a:ac:b5:01:42:70:18:93:e2:c7:74:96:8b:4a:0c:df:51:
8e:dc:49:a1
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIENlXisDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MWQ0NmUwZTNlOGNhYWFlZDRhNTI5YmQ3ZDczMDhiZDFlZjAxYzFkMB4XDTIyMDEw
MTEzNTcxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQzODA5ODNjZGMz
YTA5OWUzOTM3MmY0YzdhMjg5YTRjMzEwN2FkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8EqAzzXWZ33iff4OplY3WV5JV1RrU0ail4bcPlk8e1V8zj
N6dGwqK1mUfHjwf/caFlui3CNm9pHUdoU0yGiBfALm0vQFZSi5hUNxzohcBPxh62
wPaM3e4n8CadHvYM+GeTXyBHAAV6JJ1yAoU3VZoGLmpheZolvBT1iBCE34tgxeBT
b5F4qAaG8Xj1uqJ/ZKtCqz2dYJUsE0LuxL7UM1R4eH2z2y7TjAN65emv5hOMUdMs
5rO2o79B4yw/lvlFED7Ny2KVJzJGv0w0MNBQzT/8buF5Nfe+kjE6Lh05xTU60owv
mcEscJGa7sINTI7uQ94zhxAik1gmDaIFRvdozEECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQNOAmDzcOgmeOTcvTHoomkwxB60zAfBgNVHSMEGDAWgBTx1G4OPoyqrtSl
Kb19cwi9HvAcHTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhkUnVEajZNcXE3VXBTbTlmWE1JdlI3d0hCMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8x
L0RUZ0pnODNEb0puamszTDB4NktKcE1NUWV0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
ODRlYjQ0LWJiZGYtNDZjMS1iMDQzLWI0MmYyM2Q4MjhjMy8xLzhkUnVEajZNcXE3
VXBTbTlmWE1JdlI3d0hCMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFkiGgMEAFkpszANBgkqhkiG9w0B
AQsFAAOCAQEARDmAHr1f9rWdjjFSWcIkGMX/U6hygYachoTHRZN1X96yPyAfFTPf
UlkWWKDgDgDiAeKPvtgtObyhdfFKMFOrX7L1R5CjdEuG5OFkthecuu68aml/pN/R
w2PYHVW1036vp5wqXqwM5IHIoLbe/CSFzgXj/C0ysXdoZX1T8t4COAqCrpCpwFjq
sSm2VgRUO5kuhImAJmjqz/Cry3p3n7b6P7msoCEL8dpuyDsEDMm5Dk1kufeeVd/5
y324T/QdYdIuZ2gJDCSRNt7nCpcU55QOWFe4IPsnTHivdpeAOMxPhxq5en2PQH+m
++IoTRqstQFCcBiT4sd0lotKDN9RjtxJoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org