Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/n6CCRAe_bftJ-B06VTWRLtlMSts.roa
File: n6CCRAe_bftJ-B06VTWRLtlMSts.roa (raw, json)
Hash identifier: 5Au9FIo6nye1npq2+PxiRAM6wTMEiAGacXKqrFAodtM=
Subject key identifier: 9F:A0:82:44:07:BF:6D:FB:49:F8:1D:3A:55:35:91:2E:D9:4C:4A:DB
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 340E986A
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/n6CCRAe_bftJ-B06VTWRLtlMSts.roa
Signing time: Sat 01 Jan 2022 09:00:49 +0000
ROA not before: Sat 01 Jan 2022 09:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201544
IP address blocks: 89.108.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873371754 (0x340e986a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Jan 1 09:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fa0824407bf6dfb49f81d3a5535912ed94c4adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:b9:49:d0:5e:40:93:ce:28:1b:d7:39:73:
3b:2c:a1:a1:4e:f3:5f:e9:eb:25:7b:61:a5:45:bb:
61:f1:05:f3:42:c6:3b:23:33:93:4b:df:20:c7:3e:
f7:2b:5a:d3:e2:07:d2:01:26:88:47:c3:86:13:30:
c9:2e:16:4e:27:07:4d:96:51:fb:64:9b:d2:4c:43:
1a:a0:5b:2b:f0:62:6c:6f:25:07:f7:93:42:80:93:
b4:91:78:80:a8:22:11:8e:b4:f1:c0:cd:18:03:c3:
70:46:ed:30:70:d4:14:4b:c7:af:fd:b7:d1:f2:19:
c9:05:7e:06:5e:44:60:ac:60:16:88:92:f0:1a:f4:
69:c6:fe:be:3f:aa:b6:7f:89:b6:66:46:5c:0a:b0:
5d:ee:d2:c0:53:b2:03:6c:a9:6d:45:73:16:76:34:
a8:25:9f:0f:71:50:14:9a:17:81:d7:c6:c7:cf:a9:
fb:7e:04:13:6c:a7:9c:ed:1f:24:14:3e:28:2e:d0:
cd:75:00:42:e6:67:31:be:a1:9e:9e:9b:ed:5a:b6:
33:e3:13:bc:97:f0:49:c1:3b:87:a9:bc:eb:ac:ce:
25:15:cd:7e:2e:17:fa:b5:44:ec:d9:14:f6:d3:c1:
d3:4f:79:f0:ab:ea:ad:d2:a3:9f:de:c2:31:a6:ca:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:82:44:07:BF:6D:FB:49:F8:1D:3A:55:35:91:2E:D9:4C:4A:DB
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/n6CCRAe_bftJ-B06VTWRLtlMSts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:33:97:47:8f:03:7b:e5:f9:53:98:1c:82:21:a9:22:fd:09:
29:40:6e:a3:d3:17:30:c7:ee:ea:35:eb:ec:39:44:82:05:1f:
81:0f:7f:31:14:d8:70:c5:39:d4:65:27:5d:e7:60:b5:1d:26:
3f:a0:48:ec:87:ef:fa:ff:95:b9:5d:26:ee:94:97:0f:2d:fc:
0c:71:90:40:23:8f:38:0c:6b:49:ad:33:1a:a8:f2:5c:6a:4c:
8e:54:bf:68:8a:b6:59:a4:05:2b:2d:b5:6b:aa:d0:2e:62:54:
ad:67:05:6e:86:c7:80:95:a4:c2:9e:63:95:2b:04:64:b8:4a:
ba:02:c4:48:48:e8:f8:93:4c:3c:4a:11:f8:af:e0:92:2f:5e:
61:43:1a:c1:84:97:e2:52:f5:3b:8c:0f:c7:32:aa:7e:7a:b4:
f3:13:63:65:53:d5:05:a9:84:66:ad:94:2a:3f:1a:e2:f9:b9:
26:85:95:e2:9f:88:82:c1:73:dd:bf:e2:59:38:0d:11:2e:4a:
3d:7d:25:b0:f0:16:4e:ce:59:cc:b6:be:c1:83:b1:e5:e3:db:
fb:93:71:49:0d:f6:cc:38:0b:cd:a5:7d:b6:bd:13:e4:62:cf:
d3:44:84:a1:5b:4a:05:11:28:74:37:65:e3:f3:ae:40:74:fa:
c5:b8:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:44 2024 by rpki-client on console-ams.rpki-client.org