Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SLUn2tAPr3ZLsjFUq1iU6mRVApo.roa
File: SLUn2tAPr3ZLsjFUq1iU6mRVApo.roa (raw, json)
Hash identifier: 9Cm08qr/bHxcJH6El3twf7iAJxc+h6/z5Ip24vBhD5c=
Subject key identifier: 48:B5:27:DA:D0:0F:AF:76:4B:B2:31:54:AB:58:94:EA:64:55:02:9A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 36691EFD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SLUn2tAPr3ZLsjFUq1iU6mRVApo.roa
Signing time: Sat 01 Jan 2022 13:57:27 +0000
ROA not before: Sat 01 Jan 2022 13:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62390
IP address blocks: 89.45.12.0/24 maxlen: 24
89.45.12.0/23 maxlen: 23
89.45.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912858877 (0x36691efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b527dad00faf764bb23154ab5894ea6455029a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:a7:7e:cc:5f:6c:6b:ff:ac:c4:67:23:ea:
81:9b:70:27:0b:0b:da:37:ec:8e:50:61:65:6c:9b:
18:6b:07:98:ec:68:20:1b:7e:f2:ee:01:91:37:63:
5a:10:b9:9b:cc:a1:89:6c:c7:9c:18:94:9f:33:f8:
c0:1d:53:92:28:64:35:99:ee:f7:34:87:39:0c:73:
14:84:83:6a:95:d9:9b:b7:39:e5:2f:09:05:4f:01:
78:c0:d8:c9:1b:9b:b7:95:1a:ae:6d:75:d9:f0:f3:
59:52:ab:13:9c:a7:2d:53:6e:d6:db:0e:60:53:00:
67:4a:87:17:03:49:1c:de:a0:c6:04:55:e0:fc:b4:
e2:30:55:55:df:63:fb:42:8e:59:bc:2c:78:3a:8c:
63:02:f0:1b:d6:ca:ab:91:98:01:74:0a:f7:33:15:
38:d8:6f:c6:7a:9e:93:65:fc:28:ea:7e:b9:4d:e1:
37:a8:88:e3:48:e2:de:15:3a:1a:17:e6:8f:87:27:
bd:50:d4:aa:12:f4:e9:41:99:90:60:82:34:d7:6f:
a1:f4:df:97:45:36:fb:b2:9e:f7:60:c3:67:6f:de:
f9:f3:d4:2e:d1:ed:16:13:1d:30:fc:d8:71:00:85:
4f:07:2d:ab:20:0d:b5:db:31:9d:3e:db:56:63:46:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:27:DA:D0:0F:AF:76:4B:B2:31:54:AB:58:94:EA:64:55:02:9A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SLUn2tAPr3ZLsjFUq1iU6mRVApo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.12.0/23
Signature Algorithm: sha256WithRSAEncryption
35:97:5a:7f:5e:77:6b:16:16:af:9b:17:e9:b7:ee:64:3a:59:
f0:68:b0:32:60:16:72:85:f8:24:e7:b5:de:b1:ec:66:0c:07:
27:0d:f3:59:7d:78:e5:78:f1:e4:ad:6d:43:2f:6d:e1:f0:78:
5b:ec:50:47:a6:a5:6f:3c:69:a7:44:a6:d3:f2:a4:4d:e1:a3:
69:e0:2f:f0:3f:2c:a8:33:46:f1:ba:a0:6f:6c:26:62:83:15:
57:34:43:53:06:48:22:d0:78:06:ae:a6:ac:1d:58:a4:f9:89:
62:cc:92:07:e3:bf:24:e9:9a:d0:97:ac:dd:c1:b2:6c:a5:78:
05:8c:60:72:0b:c9:f2:11:04:0f:61:36:6e:b8:6f:10:a0:fe:
9f:b2:fc:82:d0:b5:4d:9e:8c:6a:de:75:15:22:3d:b6:39:8f:
36:db:5e:ac:bd:9b:40:62:21:db:cc:08:c3:5e:95:17:c9:1a:
3a:e5:5a:4d:80:69:f5:01:f6:fe:f1:1c:fb:a5:6c:96:f3:e2:
1e:ff:bb:45:67:a5:5f:d3:a9:a1:01:55:f0:ab:70:65:ee:c2:
24:4c:d4:70:41:8b:b2:8a:74:3f:99:ca:7d:38:be:ed:53:e5:
e2:05:85:4d:6a:d4:14:8a:c3:77:1e:da:18:80:14:f5:f9:ec:
9b:03:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org