Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aFEoEp6_bNbcSudpy0V627-NGa8.roa
File: aFEoEp6_bNbcSudpy0V627-NGa8.roa (raw, json)
Hash identifier: EwGEab0SNWLs7ouuDS7tpRV+JmL7V/uphw1TBr7O1Yk=
Subject key identifier: 68:51:28:12:9E:BF:6C:D6:DC:4A:E7:69:CB:45:7A:DB:BF:8D:19:AF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 365ED78D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aFEoEp6_bNbcSudpy0V627-NGa8.roa
Signing time: Sat 01 Jan 2022 13:57:20 +0000
ROA not before: Sat 01 Jan 2022 13:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39737
IP address blocks: 89.41.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912185229 (0x365ed78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=685128129ebf6cd6dc4ae769cb457adbbf8d19af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:cf:3b:b0:6b:b4:16:68:06:fd:3e:a6:d4:
63:71:76:e4:28:8c:12:16:dc:7d:70:6e:6c:5a:aa:
32:14:dd:8a:cd:ac:4f:9d:4c:55:d6:46:b5:1b:fb:
4c:7d:04:72:5d:90:1e:1d:f0:97:58:b5:b5:98:75:
38:4e:0d:53:6d:0f:fa:00:85:05:f4:db:9d:c0:1c:
97:6f:42:c1:df:d0:d5:e7:24:d7:9a:3f:c7:e0:c2:
e6:db:e9:e3:8b:3f:8d:a2:64:84:e9:b8:15:cc:f5:
93:7c:fc:e7:8f:6c:d0:c9:27:23:07:f6:9e:bd:ce:
39:d0:f8:b5:2a:1c:66:20:aa:c6:ee:0e:de:27:81:
c5:af:ff:04:e0:13:ff:fa:d7:a0:07:e2:a8:58:86:
b2:d2:b4:bb:3f:34:5f:08:e3:94:b6:87:56:85:ba:
75:2a:d2:b9:75:25:56:79:82:f7:52:cd:19:5b:82:
9a:ba:37:2d:78:ec:04:c0:b6:3d:9c:46:e5:99:df:
c7:29:4e:fd:ef:87:5f:70:7c:e8:91:53:65:f8:3e:
2b:cb:96:ef:4c:30:34:15:6c:a7:d9:33:74:28:51:
93:3c:b3:f9:dd:eb:ea:be:d1:8b:92:19:d8:77:b1:
55:a9:2e:79:02:25:f8:69:b9:09:29:b9:2e:44:77:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:28:12:9E:BF:6C:D6:DC:4A:E7:69:CB:45:7A:DB:BF:8D:19:AF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aFEoEp6_bNbcSudpy0V627-NGa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.183.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:2e:c3:2d:13:01:d0:6c:2f:af:1d:6b:90:50:df:c2:13:
2c:21:ea:39:bf:85:cd:d9:a0:18:cc:be:84:46:9e:bd:db:f3:
f7:f4:e7:d5:8c:db:a5:e5:53:9a:63:4c:02:7c:11:77:89:2d:
0c:d3:f0:83:9d:6a:da:01:3e:4a:fe:b6:df:fc:e5:01:a7:57:
ad:39:90:c5:9a:9e:aa:9e:8a:73:d0:a9:3a:06:b7:d9:09:ce:
77:f2:17:94:9b:0b:e4:e2:79:ec:57:f7:ce:e5:a4:bf:c8:6e:
fd:46:c1:ad:c7:6e:27:2f:5e:b2:33:2f:ea:d5:32:e2:b9:7b:
91:ed:2f:ab:d1:f3:74:fe:62:13:39:51:f5:88:69:4c:ab:1d:
40:09:40:ca:4e:6a:cc:3b:54:96:34:56:f8:8a:a4:5c:63:02:
1b:2c:3b:81:cd:25:1c:86:f9:4b:9f:41:fa:09:40:b0:d6:61:
f9:c1:dc:97:53:b7:57:87:22:68:22:98:07:c5:68:7b:ae:59:
50:db:75:c6:76:ad:cc:36:b7:e3:09:b8:76:42:a5:ca:c4:6c:
1e:b7:e0:73:3a:cb:36:93:08:0c:fa:ff:bb:54:6f:9c:ba:bf:
c5:20:37:d7:89:07:be:0a:57:45:ac:a8:b6:a8:1e:61:76:20:
11:14:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-ams.rpki-client.org