Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/oAjP4_5PehjjMk31LLPtRzasf_w.roa
File: oAjP4_5PehjjMk31LLPtRzasf_w.roa (raw, json)
Hash identifier: c6VetUqauCAjQ2ULszRg591o697KoZR/E69Am2iCeig=
Subject key identifier: A0:08:CF:E3:FE:4F:7A:18:E3:32:4D:F5:2C:B3:ED:47:36:AC:7F:FC
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A06C845
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/oAjP4_5PehjjMk31LLPtRzasf_w.roa
Signing time: Sat 01 Jan 2022 14:00:39 +0000
ROA not before: Sat 01 Jan 2022 14:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201472
IP address blocks: 89.174.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973523013 (0x3a06c845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a008cfe3fe4f7a18e3324df52cb3ed4736ac7ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:db:79:ac:f8:ff:38:4b:44:7b:20:c2:02:
da:da:92:40:23:c5:02:51:4d:97:95:2c:ee:97:86:
4a:6c:71:4c:2f:34:fb:c9:8b:75:65:9b:99:ad:0f:
12:e5:0a:39:5a:73:9f:68:24:d5:6e:a1:85:a9:f1:
1a:e8:a3:22:5c:0c:ee:77:4f:d7:a8:2f:3f:35:bb:
af:3d:47:7b:4e:72:e9:8a:65:07:4d:c9:c4:ca:80:
3a:fe:be:3a:8e:c9:ed:7f:68:ad:0e:a9:21:a7:e8:
3b:05:c5:43:b3:c9:f3:54:8c:dd:21:64:af:20:f0:
07:64:aa:7f:31:d1:52:6b:44:71:5a:c6:ff:2c:3c:
21:be:b5:dc:67:b1:6a:5c:cc:5f:a1:3a:a9:5f:ce:
f1:c4:4a:4c:3f:b6:cf:b0:50:c1:3d:4d:2b:99:dd:
b3:f9:af:97:3f:c5:42:e7:4e:c6:d0:e3:5b:5e:ea:
05:26:d7:ee:66:61:17:f1:d4:e5:87:2c:ac:b2:38:
95:e1:01:8e:4b:ff:a5:49:72:5b:2f:68:c6:10:3d:
9b:76:a9:a6:dd:b6:09:5a:dc:1c:96:e5:d5:14:4b:
1a:8d:46:bb:d7:50:bc:c6:8d:50:e3:9a:39:30:53:
61:b9:17:ef:74:ee:aa:1b:95:6f:a2:ee:ca:19:79:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:CF:E3:FE:4F:7A:18:E3:32:4D:F5:2C:B3:ED:47:36:AC:7F:FC
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/oAjP4_5PehjjMk31LLPtRzasf_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:75:6b:dd:67:63:fb:f6:4f:01:8c:46:e2:82:ad:7a:6b:26:
c0:2a:2a:da:f9:3b:80:d5:db:cc:fb:af:bc:d2:cc:6d:3c:70:
17:a2:19:f6:5d:d3:66:82:f9:bf:d1:e6:cf:9b:32:6d:6e:c9:
a4:e3:b5:04:92:c1:5c:ff:22:68:55:73:43:af:37:71:74:fa:
a1:9d:82:c7:fe:0d:17:b4:f1:ec:08:a9:ee:b0:a4:4d:5a:e4:
68:7a:8e:90:c7:29:f8:7e:aa:66:2a:a5:da:9d:74:27:10:23:
cc:8b:bc:6f:50:f1:89:1d:7f:90:e8:27:36:16:4f:aa:9e:1b:
0e:72:13:6b:bd:01:2d:00:31:52:53:7d:c0:ad:75:b8:1a:29:
2f:ac:bf:a2:0f:94:59:ea:4d:4b:74:3e:da:d4:ab:ed:c6:dc:
a3:6b:64:71:0c:b0:ba:27:61:6e:48:c3:31:0d:67:fc:b2:d5:
31:b4:2c:19:77:ed:5c:91:90:c9:e1:75:f4:7a:f1:dc:1e:67:
0b:b9:13:83:0e:8d:29:a5:97:57:5c:37:e9:d9:20:3d:73:ad:
af:cd:e9:1d:2c:96:a8:fa:1d:0d:40:4f:74:8d:7e:d7:79:80:
e7:59:91:a7:83:09:1e:e1:54:cd:2d:56:34:02:b5:1c:ce:da:
79:26:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org