Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/Bn2P1JhCqsp7udKXoN4c9VjghJI.roa
File: Bn2P1JhCqsp7udKXoN4c9VjghJI.roa (raw, json)
Hash identifier: RF2huF66CRimjyBz7EhZ5nHYSd2S3Nlq6lMjwJR8ygg=
Subject key identifier: 06:7D:8F:D4:98:42:AA:CA:7B:B9:D2:97:A0:DE:1C:F5:58:E0:84:92
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 031D3B69
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/Bn2P1JhCqsp7udKXoN4c9VjghJI.roa
Signing time: Thu 17 Feb 2022 06:07:58 +0000
ROA not before: Thu 17 Feb 2022 06:07:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44035
IP address blocks: 89.105.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52247401 (0x31d3b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Feb 17 06:07:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067d8fd49842aaca7bb9d297a0de1cf558e08492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:f5:fd:1d:5d:73:c1:c0:08:eb:59:82:9f:
f8:f6:89:16:9e:c5:68:91:2a:4b:e6:bf:ac:3a:36:
33:a6:ac:ce:b7:56:34:31:89:3a:bf:c3:4a:ac:90:
c8:1e:53:ac:f7:d8:89:9d:ce:1c:76:cc:ef:73:3c:
18:ee:93:d6:8b:8f:d2:3d:fa:55:2d:1d:82:0f:c5:
57:ba:fb:36:76:1a:92:a6:da:db:4e:fb:d8:6e:cc:
08:b2:c0:9f:57:40:62:c1:55:9a:6d:34:8e:36:2d:
6b:8c:32:e3:18:9a:8e:8c:26:32:32:1b:c4:76:de:
72:2b:bb:6a:5b:30:c0:50:f5:97:cd:91:60:10:be:
4f:59:22:10:f4:f1:54:e0:38:7d:94:9d:02:b8:7a:
e4:82:46:03:86:80:a7:4b:cc:e9:c3:28:8a:8e:9c:
e7:6d:20:bd:e3:64:fd:62:85:8a:48:63:3d:b8:a4:
c2:96:ea:63:b2:60:98:c5:ca:88:9b:c5:b2:2c:eb:
4e:c7:90:18:b2:63:73:8b:9e:7f:fd:2f:f7:f4:22:
f7:d0:6d:96:8d:4e:df:2d:fd:13:a1:71:f0:f2:13:
11:e4:1b:93:43:9c:1f:70:cd:9e:4a:c7:27:b1:11:
4d:cb:bc:bf:8a:2b:a6:1b:e0:ac:f4:4c:79:95:2c:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7D:8F:D4:98:42:AA:CA:7B:B9:D2:97:A0:DE:1C:F5:58:E0:84:92
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/Bn2P1JhCqsp7udKXoN4c9VjghJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.128.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d2:31:57:eb:8d:a9:4e:ee:3b:f4:61:b4:7c:09:9a:9d:94:
f9:5c:a8:a7:51:b9:39:2f:90:d7:e1:93:42:54:a3:09:b2:cf:
62:6a:97:5d:8d:04:40:53:b7:c6:1c:50:eb:57:fe:e2:df:a1:
b6:f2:50:8a:0f:7a:3a:88:33:01:0b:b8:ce:1f:ed:55:c0:5c:
0a:d4:3e:e2:35:b1:4a:dd:91:91:bb:b7:d5:66:53:c7:1f:ca:
1e:7c:66:58:24:c0:bd:de:7c:a2:b2:ee:2d:ac:c1:44:0b:82:
4f:81:91:f3:44:04:ef:a9:30:db:ad:6b:56:e6:4a:a6:48:f8:
26:5f:1b:f4:55:e9:ae:60:25:bd:34:fd:b8:6c:27:60:83:7d:
75:70:3d:6b:de:5f:c1:35:2b:e1:8c:28:42:61:e7:ff:82:f7:
26:e6:c7:2e:a4:e2:19:86:da:c6:56:23:04:96:06:ce:7c:72:
59:c3:18:b8:7d:8f:dd:ba:7f:75:21:2a:12:73:07:96:d9:0d:
8d:85:e5:c4:c5:de:6e:1e:bb:3c:6c:87:cf:a9:5a:e2:a3:04:
b6:a3:5c:1d:31:c9:ee:5a:3a:de:41:16:ca:90:a8:bc:c4:e9:
eb:80:71:3c:70:0c:78:3e:d0:43:2f:ea:28:70:62:75:a0:80:
1c:43:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:13 2024 by rpki-client on console-fra.rpki-client.org