Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/CC-93zsRyOBKUeNHnBAdhnRNvt0.roa
File: CC-93zsRyOBKUeNHnBAdhnRNvt0.roa (raw, json)
Hash identifier: hZEa1n3c8z7AefCMDT9Qx9WM0bGepp7ve1+8o9XBiHE=
Subject key identifier: 08:2F:BD:DF:3B:11:C8:E0:4A:51:E3:47:9C:10:1D:86:74:4D:BE:DD
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01823AB6E674BB1FEEAC96832B6C968F2609
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/CC-93zsRyOBKUeNHnBAdhnRNvt0.roa
Signing time: Tue 26 Jul 2022 13:34:01 +0000
ROA not before: Tue 26 Jul 2022 13:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56347
IP address blocks: 89.21.74.0/23 maxlen: 23
89.21.72.0/23 maxlen: 23
89.21.72.0/22 maxlen: 22
185.95.64.0/24 maxlen: 24
2a10:b200::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:b6:e6:74:bb:1f:ee:ac:96:83:2b:6c:96:8f:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Jul 26 13:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=082fbddf3b11c8e04a51e3479c101d86744dbedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:63:fe:51:1b:61:fa:5c:85:b1:0c:75:2f:
29:5f:a1:2a:a0:b5:ec:1b:db:1f:98:3a:2e:50:26:
df:e7:3b:b8:ac:3e:9f:c2:c7:53:e2:23:bc:46:b3:
f2:55:2a:1c:6e:50:68:70:c1:29:fd:49:aa:04:ed:
09:1a:e3:d7:e1:b4:26:d5:53:d6:1a:23:20:c2:4c:
c2:9f:55:be:73:08:be:91:b6:19:39:ce:5b:99:62:
e7:97:68:86:af:b3:6d:3d:26:56:2e:79:d5:20:f4:
7d:da:9f:83:da:57:f2:d2:43:c8:d0:85:8a:83:81:
8e:9b:05:c1:07:fa:d7:2c:01:eb:f0:3f:96:1d:92:
d8:ca:31:18:15:8d:0c:24:4a:9b:de:93:5a:a5:bc:
75:1e:b7:2d:1e:fc:40:a5:1c:c0:20:2c:2e:77:c2:
03:8c:a1:3b:e0:14:19:a8:2b:f1:6b:b1:c0:b3:4e:
f6:63:9e:62:74:81:26:96:56:4c:e2:69:05:9f:8d:
49:21:5c:6f:9a:1d:63:02:ae:f4:ca:c8:29:63:1d:
96:41:37:f5:d5:c3:d1:87:a6:87:04:ac:f2:48:11:
25:5c:76:56:ad:ef:2d:e4:43:4f:49:0b:81:f0:71:
df:82:ed:f0:5d:a8:8b:2c:20:fd:5b:41:af:9a:a4:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:BD:DF:3B:11:C8:E0:4A:51:E3:47:9C:10:1D:86:74:4D:BE:DD
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/CC-93zsRyOBKUeNHnBAdhnRNvt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.72.0/22
185.95.64.0/24
IPv6:
2a10:b200::/32
Signature Algorithm: sha256WithRSAEncryption
49:13:93:48:30:f0:25:df:2c:0f:14:f7:07:d9:32:e5:30:a8:
40:51:86:11:01:95:e4:bd:17:b6:41:35:42:0d:e3:cc:99:74:
80:7f:fc:e1:76:8c:65:3f:ca:16:28:f9:be:b2:04:8e:bb:94:
60:5b:d0:bc:38:2f:27:68:bf:0b:36:4f:be:cf:fc:d2:00:9f:
f0:24:7f:ab:73:3d:47:80:90:3c:86:27:80:07:25:b3:97:60:
f5:48:01:d4:72:af:03:b8:0d:45:1e:16:d3:fe:7e:5c:b6:d7:
f3:0d:4f:c8:de:bb:69:a6:77:84:37:a0:cc:ae:78:d1:96:a5:
47:a5:1c:b3:2f:21:5e:41:4a:cd:7e:72:66:d4:25:cf:f9:18:
8a:2e:fe:b0:4d:47:28:62:a6:22:52:37:29:59:31:b5:89:7b:
af:ae:aa:72:49:28:7c:15:3d:8e:60:3b:8a:3f:f2:a7:6c:61:
e9:2e:b5:57:10:a3:55:dd:1c:e5:f6:ca:ba:7a:c8:6d:22:e4:
c6:53:81:8e:49:47:7e:9f:ee:8b:6f:02:e3:01:3e:db:fc:23:
7f:57:ed:95:ed:97:bb:f1:98:2a:d6:12:03:40:20:49:d1:c1:
6c:a5:1e:ca:fd:22:67:11:5f:2b:ac:ec:e7:8d:0b:4d:9f:b6:
d7:04:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:05 2024 by rpki-client on console-ams.rpki-client.org