Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/XNDym2ELJUgui6tigdXSicMCllY.roa
File: XNDym2ELJUgui6tigdXSicMCllY.roa (raw, json)
Hash identifier: Yi54GE5Bmk0sYloIgaNe0Llb+cSvmal8ESfcrjCcS/w=
Subject key identifier: 5C:D0:F2:9B:61:0B:25:48:2E:8B:AB:62:81:D5:D2:89:C3:02:96:56
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 03D8E27C
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/XNDym2ELJUgui6tigdXSicMCllY.roa
Signing time: Sat 01 Jan 2022 13:06:36 +0000
ROA not before: Sat 01 Jan 2022 13:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39821
IP address blocks: 109.233.240.0/21 maxlen: 21
89.107.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64545404 (0x3d8e27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jan 1 13:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cd0f29b610b25482e8bab6281d5d289c3029656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:8a:6f:b3:82:64:c1:3a:c2:af:c1:7d:1f:
1c:62:18:38:e3:fd:91:6c:73:ea:ae:16:26:e5:28:
43:c8:1b:52:c2:1d:64:cd:a6:c3:ed:b0:c1:43:05:
52:8d:f8:54:17:ba:d8:64:c3:9f:93:a2:12:d5:c8:
c6:ba:3b:63:12:28:71:36:1e:83:ef:35:47:e1:4c:
78:a4:72:a5:c0:88:43:38:62:dd:05:a7:76:cc:8b:
41:10:e6:f3:53:45:a2:7d:fc:1e:c2:fa:df:8e:f4:
82:f7:28:c8:bf:6c:3e:d0:cd:1e:35:9a:66:a7:51:
83:a6:79:84:e7:06:b2:9a:f2:30:ab:4b:4a:2e:99:
f7:c7:9e:36:de:99:07:45:01:57:a1:a1:03:43:b1:
22:04:66:6b:ac:89:b4:76:92:e8:d5:5b:c5:c0:1b:
52:8d:fb:73:84:63:28:4b:c8:fe:2a:c5:e0:90:00:
75:d9:ba:e7:37:68:79:bd:aa:26:3b:1f:f2:1f:b5:
e6:c8:50:ca:5e:48:4f:17:b9:8d:a3:be:ea:18:c3:
0d:8f:d5:11:1f:1e:df:7a:44:35:ab:8c:2e:e0:8c:
96:d7:f2:28:72:06:8b:1e:e1:d3:b8:42:26:6f:9a:
aa:78:e7:8d:d5:ec:79:87:eb:28:27:5f:aa:b0:64:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D0:F2:9B:61:0B:25:48:2E:8B:AB:62:81:D5:D2:89:C3:02:96:56
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/XNDym2ELJUgui6tigdXSicMCllY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.120.0/21
109.233.240.0/21
Signature Algorithm: sha256WithRSAEncryption
17:1a:d2:c7:c6:32:3a:73:07:24:d2:02:d7:b3:ee:79:11:df:
eb:86:d9:26:3f:24:47:0a:6c:b8:ad:f1:64:b4:11:c2:c9:6f:
09:a6:a0:ae:cd:1c:9a:5d:e9:3e:7e:56:c5:d4:fa:7e:da:fc:
33:8d:00:e6:49:e3:66:77:3a:74:67:56:a4:36:2b:ee:82:ea:
ba:7a:59:f1:d1:bf:ff:f5:9d:3d:aa:8b:1a:69:3d:79:bb:33:
92:68:cd:19:86:0f:63:2c:4b:65:40:d8:30:a5:f6:cc:5a:cd:
c1:26:b9:08:b7:40:d4:28:68:9f:a0:aa:5d:46:5f:97:2b:06:
20:15:73:69:d0:07:bc:a6:64:28:87:12:b2:86:e7:bc:ce:b9:
9f:9c:3d:3c:8b:fb:12:8a:26:a3:36:dc:66:18:e8:15:a2:8f:
ba:05:39:dd:de:42:d6:13:3f:b8:02:de:4c:28:16:2e:2c:36:
2d:7a:e1:75:6e:36:7d:56:5f:39:c8:0a:b4:b2:1a:09:d2:27:
20:75:0e:84:4c:8d:66:01:e0:30:08:8e:d2:9e:78:41:0f:18:
30:0a:56:43:e8:4f:b3:58:db:8d:22:30:b6:23:85:3a:bf:73:
8f:21:47:0c:10:f2:19:05:f8:57:e6:c3:68:eb:cd:a9:eb:d4:
64:ca:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:40 2024 by rpki-client on console-fra.rpki-client.org