Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YHBZswh9keqqpsOWynA5ktUdl2Y.roa
File: YHBZswh9keqqpsOWynA5ktUdl2Y.roa (raw, json)
Hash identifier: 8hb6NC7WmGOx9hqVgWUMvRt5SMbmAxBsbW49j4OwBi0=
Subject key identifier: 60:70:59:B3:08:7D:91:EA:AA:A6:C3:96:CA:70:39:92:D5:1D:97:66
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 36605E72
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YHBZswh9keqqpsOWynA5ktUdl2Y.roa
Signing time: Sat 01 Jan 2022 13:57:21 +0000
ROA not before: Sat 01 Jan 2022 13:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41672
IP address blocks: 89.38.228.0/24 maxlen: 24
89.38.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912285298 (0x36605e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=607059b3087d91eaaaa6c396ca703992d51d9766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:89:ae:72:de:3f:62:3a:6d:5b:9a:b8:a0:
18:0f:ee:9f:b7:9a:68:18:07:74:a5:4f:ee:54:63:
0c:e9:9d:78:c5:89:e7:3a:b1:9c:d7:a9:4e:d5:ac:
fd:43:7c:c8:3e:dd:3a:26:0e:7c:3e:73:c6:c3:fa:
7d:18:f0:13:db:d4:ec:1f:c3:b5:51:ed:05:c1:dc:
18:84:c1:33:29:72:7e:9b:fc:74:53:da:92:4c:b5:
33:19:33:4d:ba:9c:c6:49:47:3c:73:30:9e:01:5d:
53:1b:48:29:93:0e:0e:a2:7e:b5:a2:fb:86:0e:5f:
15:6d:43:8c:3f:1c:30:67:a7:4b:f3:49:b8:49:7c:
1c:1d:77:65:74:69:62:c9:43:39:e2:2c:c8:57:50:
c0:3a:a2:b6:1c:34:91:dc:9e:77:f4:61:71:d0:1b:
2c:da:53:cf:e0:77:d8:81:bd:b0:e6:9a:51:3c:4d:
39:5a:5a:79:5d:ea:ed:d6:04:5e:52:d5:0a:56:cb:
eb:d0:4b:b3:16:90:9c:cc:77:d6:62:7f:af:2a:08:
b6:82:a3:ab:bb:e3:4b:2d:48:c7:c8:12:a7:20:c0:
8c:37:7e:16:37:3d:b3:2b:52:e2:e9:f7:fe:ef:af:
fe:4f:e7:fa:5a:4f:a6:45:75:50:73:74:20:a8:4b:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:59:B3:08:7D:91:EA:AA:A6:C3:96:CA:70:39:92:D5:1D:97:66
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/YHBZswh9keqqpsOWynA5ktUdl2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.228.0/23
Signature Algorithm: sha256WithRSAEncryption
29:4b:99:0f:b1:c3:26:f3:16:e0:ee:5b:26:a0:8e:9a:d4:c5:
27:53:c4:0e:e3:d8:f4:56:a5:89:c9:27:4d:0d:32:38:0c:67:
3c:89:2b:43:8c:8a:6a:29:67:76:16:c9:b7:2f:ec:f5:6b:1e:
f2:ba:7f:88:6e:14:23:1c:fd:08:cd:bb:a8:11:15:c1:a8:81:
ba:88:b7:da:ee:73:66:0c:07:56:6d:12:db:0e:97:9e:7b:ed:
9d:47:d5:0f:22:a7:f3:17:7f:e0:d3:86:fd:14:d0:cb:46:07:
a6:27:e0:d0:0b:14:59:70:1b:7c:13:b4:c4:29:8e:82:19:c2:
2d:89:f7:64:74:52:70:58:aa:c2:d9:2c:2c:d9:c5:82:75:13:
93:ce:0f:2b:4a:c4:a8:42:3b:09:5b:a0:c9:94:73:0b:c9:a4:
d9:55:67:62:20:af:d2:a9:d8:13:85:e0:7c:31:25:6c:eb:c0:
5e:e9:c8:74:e1:48:95:84:67:63:a0:1e:5f:6c:29:04:45:a9:
54:8d:d8:3a:6c:ac:fd:6e:b7:a2:0b:02:94:f5:c6:0d:e8:2d:
bc:0f:a5:58:f6:79:eb:8e:76:a9:6e:5d:b1:aa:f3:e5:3b:a7:
62:22:31:e3:63:41:45:bc:66:d3:80:d2:4f:a5:e5:a7:5d:89:
4d:de:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org