Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Tp0Sup6eNJntAEgRh7sTjVil-zE.roa
File: Tp0Sup6eNJntAEgRh7sTjVil-zE.roa (raw, json)
Hash identifier: mGpk4i9e1x0JjHNLpuxIxoM9OamTkV7Xsmu2xsTV640=
Subject key identifier: 4E:9D:12:BA:9E:9E:34:99:ED:00:48:11:87:BB:13:8D:58:A5:FB:31
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 0A841E04
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Tp0Sup6eNJntAEgRh7sTjVil-zE.roa
Signing time: Sat 01 Jan 2022 02:54:19 +0000
ROA not before: Sat 01 Jan 2022 02:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61033
IP address blocks: 89.46.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176430596 (0xa841e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 02:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e9d12ba9e9e3499ed00481187bb138d58a5fb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:10:e8:5c:26:61:02:be:aa:2e:1e:37:6f:
60:67:f9:68:e1:a0:6f:bd:f3:3b:79:48:97:90:48:
21:5b:3c:a4:17:5c:35:ab:10:bc:fa:06:cb:4a:8b:
c0:0a:28:0e:70:4b:9f:27:91:fa:84:03:0c:11:0e:
b4:61:46:92:d7:79:e6:23:3e:7f:e6:ce:96:9f:b8:
46:9a:86:6b:77:a7:2e:c4:73:71:bd:5c:8a:e6:73:
58:59:3d:91:9e:1f:ee:21:09:7d:c5:c6:dd:64:1f:
b9:dd:ce:1c:b7:d0:f8:03:1e:0a:7c:2e:ed:5e:49:
9e:7c:51:8e:2a:2e:46:8c:bd:a6:e4:32:70:ec:78:
5c:24:08:94:fa:e1:74:67:d5:ab:94:82:72:16:08:
b9:26:c9:8d:bb:c0:42:e2:bc:11:93:f7:29:4e:0a:
a9:30:0e:20:ff:47:28:cc:77:e4:f9:ca:66:05:8a:
d8:5f:f2:ee:d3:97:80:55:1a:ef:a3:e3:76:44:e7:
af:26:4b:78:95:88:ad:43:77:f0:5e:18:6a:9a:c5:
0c:5f:80:55:61:2f:e6:9c:4f:49:81:39:b2:b8:39:
d8:20:ac:1e:a2:3b:46:d1:2a:76:3a:07:81:be:c2:
69:2f:f2:4a:7f:15:4c:93:86:a9:d2:11:ee:f2:e7:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:12:BA:9E:9E:34:99:ED:00:48:11:87:BB:13:8D:58:A5:FB:31
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Tp0Sup6eNJntAEgRh7sTjVil-zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3d:91:57:c2:d9:d7:ad:5c:fb:fc:cb:b8:7b:e1:7a:17:a7:
64:fb:e6:96:51:86:84:1b:fd:36:a2:71:a6:ed:39:b5:b5:8f:
63:01:8b:86:3a:e7:c3:74:67:d3:b1:50:84:83:33:70:3f:ea:
3a:91:77:8b:c1:0c:18:55:21:c3:8e:94:9c:13:87:94:07:ee:
5d:54:42:35:ee:99:1f:97:5b:fa:57:9d:ec:a1:61:a2:84:80:
a3:42:6d:c6:38:d7:44:ec:09:a1:9a:56:f1:5f:20:90:31:a8:
a8:99:04:01:04:4a:8b:6a:db:64:9c:8c:1c:95:b5:fc:28:b6:
b1:a5:18:e0:56:ef:a7:4a:0a:2d:64:39:8f:05:79:4a:b9:a7:
40:c7:b5:f1:a2:27:b3:c5:db:da:5e:89:6d:4d:21:c8:48:dd:
01:d8:b9:c3:31:70:68:b5:f1:25:2d:f6:3f:b7:3f:ec:8e:46:
3a:76:72:34:8b:ac:8b:a2:a3:64:cb:5e:26:89:50:ee:ae:8c:
f9:b4:d2:a9:a1:f5:78:e3:28:75:bf:e6:ad:68:b8:83:f6:82:
81:4b:69:3e:18:5c:3b:f9:73:0e:89:14:b8:bd:bb:37:d7:9d:
6b:9b:04:52:ac:3e:46:81:10:5e:79:fd:aa:b7:46:85:55:45:
df:73:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org