Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6-pd8_hxmWpMYGvFGnJkGcxw0ac.roa
File: 6-pd8_hxmWpMYGvFGnJkGcxw0ac.roa (raw, json)
Hash identifier: gzgwNn+rzBy7gkG2df1QozGtNmE4Y1m15/1pZiLFFu4=
Subject key identifier: EB:EA:5D:F3:F8:71:99:6A:4C:60:6B:C5:1A:72:64:19:CC:70:D1:A7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F762BEEA63EB2DDAEE1ACA53DA3B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6-pd8_hxmWpMYGvFGnJkGcxw0ac.roa
Signing time: Sun 01 Jan 2023 19:35:28 +0000
ROA not before: Sun 01 Jan 2023 19:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201018
IP address blocks: 89.107.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f7:62:be:ea:63:eb:2d:da:ee:1a:ca:53:da:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebea5df3f871996a4c606bc51a726419cc70d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:dd:14:1e:10:33:52:5b:af:4b:1d:b4:6b:
bf:8d:43:76:6d:02:d1:91:f3:6e:74:02:b8:67:5c:
32:70:74:a7:ce:6d:93:fa:74:6c:47:76:c7:30:98:
b5:3c:c0:c6:d6:26:57:f9:73:34:49:c6:e4:0d:8d:
81:33:8f:a7:5b:e3:29:6a:0c:e7:12:3d:97:e5:93:
ce:79:b6:4c:e0:b6:c9:be:7c:1e:d8:cf:29:1a:50:
9d:e0:6b:82:da:4c:03:38:d7:df:20:a0:24:db:10:
2b:ec:f6:55:95:19:4d:ec:59:97:54:09:0a:4d:71:
10:9c:b1:81:b6:21:36:f1:80:92:fb:06:4d:d5:7a:
d3:ca:67:f2:5d:b9:10:d9:98:a3:81:fe:5f:b6:1b:
99:28:0a:55:70:8b:0c:28:89:0a:ec:f5:42:a7:0a:
3a:d6:22:bf:8f:8c:5a:f2:a2:8f:5f:e3:c3:3f:25:
7c:fc:a5:2a:f5:fd:dd:f9:da:c6:d4:f5:f4:d5:85:
49:60:04:a7:d5:64:ee:30:1f:c1:a9:9d:83:51:18:
df:bb:30:1d:e2:af:56:46:e8:15:ec:46:8f:9d:d7:
5d:0e:0b:7a:5e:cf:59:91:f5:87:13:c2:fe:ce:ce:
9e:4b:ab:6b:c6:f0:23:f6:0e:fe:f6:19:82:5a:c2:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:5D:F3:F8:71:99:6A:4C:60:6B:C5:1A:72:64:19:CC:70:D1:A7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6-pd8_hxmWpMYGvFGnJkGcxw0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e6:3d:b7:51:62:2e:9a:91:f2:b6:c2:69:f2:e7:fc:8b:12:
02:09:ef:25:46:e7:bc:e1:cf:23:a6:5b:82:39:8b:c5:56:4d:
01:06:3b:d4:e8:da:a4:d1:ce:b4:aa:4a:d9:f2:4d:c1:65:3d:
74:a4:a3:57:69:47:4a:d7:53:b3:97:67:76:d4:60:d8:f0:c3:
e9:4e:75:7f:7a:bc:cf:d0:0b:9e:c8:e6:bd:a4:7e:76:9e:af:
a6:26:78:63:f2:47:eb:96:0a:03:21:23:36:15:ea:8c:33:9b:
b7:05:f5:0c:c5:15:24:47:fa:98:d2:75:56:06:02:80:a8:33:
ea:8a:54:d2:3d:78:bc:77:d4:e5:2b:c9:95:a1:0c:65:f3:5e:
6c:99:82:8a:13:f2:87:57:28:ff:ec:b6:fd:b4:db:6d:85:6f:
8c:cc:3f:b8:e4:30:34:d3:f1:dc:a4:57:f2:51:a2:cd:55:16:
b0:b6:55:b1:e2:70:b2:ab:0b:81:ed:e6:e9:c2:73:42:81:e7:
a1:7d:fa:78:c3:c8:7d:20:a3:8e:14:6e:ea:c8:f1:4f:0f:b6:
40:99:92:6a:29:26:18:c1:fe:c4:d5:00:3f:4e:8e:f0:a0:0d:
40:66:ee:61:d4:e0:50:4a:aa:8a:75:c1:fe:90:f2:80:2b:be:
8b:66:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:38 2025 by rpki-client