Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SdBfmtR6TtBmZdAJCIlj5prwZ0Y.roa
File: SdBfmtR6TtBmZdAJCIlj5prwZ0Y.roa (raw, json)
Hash identifier: RZh6z7txuJbYWn8yRv22NKmAqAooLsaQS1hEaogWRz4=
Subject key identifier: 49:D0:5F:9A:D4:7A:4E:D0:66:65:D0:09:08:89:63:E6:9A:F0:67:46
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0181ED864AF1D50E48B4883C68C68591B249
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SdBfmtR6TtBmZdAJCIlj5prwZ0Y.roa
Signing time: Mon 11 Jul 2022 13:50:10 +0000
ROA not before: Mon 11 Jul 2022 13:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 89.47.233.0/24 maxlen: 24
89.34.26.0/24 maxlen: 24
89.41.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:86:4a:f1:d5:0e:48:b4:88:3c:68:c6:85:91:b2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 11 13:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d05f9ad47a4ed06665d009088963e69af06746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:e3:34:ab:2d:be:81:ed:70:24:0f:ee:d1:
c6:80:37:e2:50:c6:b5:4d:75:75:42:57:a1:c9:c2:
62:7b:44:dc:de:97:8f:d2:4c:98:56:fb:f3:8d:b0:
7d:70:47:5f:d9:ef:80:6d:5d:1e:5c:e0:0a:f3:bc:
16:43:f8:fd:4f:85:26:b8:ba:64:9e:96:9b:3d:87:
6e:9b:3b:b3:7a:e2:b5:ea:84:47:7f:b2:ff:a7:3a:
06:3f:2e:8c:b9:05:1f:55:b4:c9:23:21:cd:82:17:
0a:2b:ca:d6:b6:59:e1:e9:db:50:f2:58:6d:4c:90:
f1:50:4f:1f:b9:b2:4e:b0:29:7c:36:3a:d7:88:4f:
f3:c9:fb:3d:89:01:05:9d:e1:1b:e7:9b:95:07:c4:
bc:bf:0b:c3:17:f3:a0:35:e0:f4:0c:b6:2b:2c:6d:
3c:b2:27:88:19:d4:03:61:36:b1:d7:6d:70:c6:42:
7d:fb:75:0a:f7:1e:a4:59:3f:c3:80:da:72:df:b6:
86:cd:1d:b7:bc:ca:f3:62:d5:a4:dd:f7:61:fd:c0:
74:df:d2:56:3f:98:17:0c:a5:6d:cc:96:97:52:ad:
4c:d3:26:08:ce:36:0b:aa:0e:b8:3c:7a:c7:8d:f2:
10:66:c9:2c:9d:bb:63:72:d0:34:bf:7f:a8:1a:e1:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:5F:9A:D4:7A:4E:D0:66:65:D0:09:08:89:63:E6:9A:F0:67:46
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SdBfmtR6TtBmZdAJCIlj5prwZ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.26.0/24
89.41.179.0/24
89.47.233.0/24
Signature Algorithm: sha256WithRSAEncryption
43:de:07:58:82:65:84:90:87:e9:3d:ea:c0:90:2e:96:1d:f1:
3b:ba:08:53:84:a0:01:d2:58:b9:7e:61:f0:a1:97:a6:fd:98:
6a:a2:57:63:8c:b6:b7:c8:d3:82:db:22:b4:b7:f1:22:c1:45:
a6:f7:74:f0:bb:51:d9:68:0d:d6:51:63:e7:64:51:ee:16:d0:
df:88:d9:96:19:90:96:95:ee:ed:3f:59:be:f7:8f:b8:be:a2:
31:e3:7c:5e:87:04:f0:41:06:f8:8f:dc:09:98:ee:8f:f7:79:
ae:94:cd:35:19:d0:d6:94:0e:60:69:b2:be:15:44:ab:ec:b6:
5d:92:1c:fd:76:9f:af:c6:68:7f:e2:4f:f4:38:70:9d:98:17:
bd:d2:4e:53:dc:b8:25:bb:c0:a8:07:3c:db:08:24:ab:31:9f:
59:e3:9a:3c:51:16:a7:37:41:00:8c:bd:9b:9d:d4:0b:56:e0:
af:78:f3:79:af:e0:1e:a9:ae:ce:97:71:6d:f1:8f:9b:1c:ce:
c0:5c:cc:eb:73:3e:53:62:6b:56:e4:80:ba:0e:54:bf:10:bf:
e5:31:03:e2:69:c6:b8:6b:bf:c6:36:8c:47:0f:b9:08:1b:07:
ff:0d:e8:43:2c:1a:ef:f4:ce:b7:d9:de:fb:49:d0:76:ab:41:
a9:80:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org