Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zK7d_u_VQOSccBd13GL9DunBMDo.roa
File: zK7d_u_VQOSccBd13GL9DunBMDo.roa (raw, json)
Hash identifier: SbXZhb+NLCc8V+VEEdtpwMVR4j/v1jyh089o7t00gP8=
Subject key identifier: CC:AE:DD:FE:EF:D5:40:E4:9C:70:17:75:DC:62:FD:0E:E9:C1:30:3A
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1746C7B4
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zK7d_u_VQOSccBd13GL9DunBMDo.roa
Signing time: Sat 01 Jan 2022 16:03:47 +0000
ROA not before: Sat 01 Jan 2022 16:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41635
IP address blocks: 89.38.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390514612 (0x1746c7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccaeddfeefd540e49c701775dc62fd0ee9c1303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:fd:37:d9:39:43:6d:90:69:c6:03:c3:01:
87:45:94:4b:48:6b:b9:25:d5:93:ff:70:7d:3b:28:
3e:a6:96:4e:1c:4c:2f:81:e0:db:69:66:d0:89:3d:
0a:79:11:ac:f3:4c:52:77:5f:a3:b6:4d:fd:6c:17:
ff:78:fc:fd:10:58:8e:48:b5:bb:06:c3:f0:8b:63:
66:08:1f:ca:2d:9b:cb:3d:b0:83:58:9e:85:bf:f4:
86:b7:17:16:d9:3b:99:56:ae:4c:51:cb:41:f5:ea:
4d:f9:bb:0b:5c:e1:9c:be:4b:15:7e:a4:51:bb:ab:
6a:f1:4a:37:00:90:47:ec:fb:c2:e5:3f:21:41:0e:
92:6d:3d:f6:77:1a:db:5c:91:b3:f5:bd:6f:c7:23:
78:d7:04:b6:1d:62:29:ab:39:ab:05:c5:c0:4e:d8:
d9:2d:e1:17:01:bb:52:75:ea:03:27:a3:73:c8:0c:
72:d6:bf:24:96:0e:18:25:2d:4a:f9:28:3e:43:05:
01:65:17:f9:0d:66:8b:c1:07:60:b0:1f:50:d9:9f:
35:05:19:80:98:24:d2:64:73:8c:cc:ca:b0:7f:b9:
12:17:b4:a8:91:9c:e9:d0:62:67:37:10:da:f0:7e:
e1:37:a9:eb:97:9b:a6:fa:88:36:12:be:7b:c0:86:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:DD:FE:EF:D5:40:E4:9C:70:17:75:DC:62:FD:0E:E9:C1:30:3A
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zK7d_u_VQOSccBd13GL9DunBMDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.208.0/22
Signature Algorithm: sha256WithRSAEncryption
59:17:d5:5a:c0:96:4c:9b:0c:c6:e0:c6:2b:73:f0:f8:59:19:
04:14:01:da:75:03:9b:cc:99:47:9b:f2:ee:6a:f2:5e:42:52:
ac:66:63:d3:a1:db:70:f4:57:37:30:a2:ec:dd:35:88:57:52:
6f:78:93:2a:92:70:d8:65:70:af:b2:33:cc:ca:04:b7:e9:22:
fc:48:86:51:36:d8:35:d6:8b:55:95:99:04:6b:92:3e:ba:c4:
7f:52:1b:22:c9:0f:03:1a:13:d6:ec:79:6e:00:e1:e3:a0:76:
43:4e:c1:e8:9e:d0:1f:59:45:df:c3:c6:c2:2b:76:dc:ee:aa:
66:05:5d:4d:b4:59:e6:e1:ca:de:5d:29:80:23:6a:97:0b:c5:
cd:a7:1b:b2:9a:3c:51:48:a3:31:e5:4e:b6:7a:8e:78:69:b8:
05:c5:eb:4d:bd:62:75:e7:2f:0c:91:1d:63:99:57:2b:e5:04:
0c:36:bc:ce:1f:57:9b:2c:2c:be:d7:c0:88:ad:4f:7e:4b:0f:
2b:1d:fb:b7:14:6a:b5:e2:96:ce:68:7c:82:7e:59:31:d3:b3:
34:11:10:d6:d0:6b:95:b4:fd:d5:ed:b2:c1:bc:f3:48:30:55:
bf:d3:17:1e:e3:e6:21:b4:f2:46:0b:bb:64:c7:31:85:83:b0:
d0:dc:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:58 2025 by rpki-client