Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/R6N3kWra58RTUBlYpua-cLDuIsM.roa
File: R6N3kWra58RTUBlYpua-cLDuIsM.roa (raw, json)
Hash identifier: pTRugHXlroCPL3phl2ywu5b/zhE9zt+T+v6cgmrI+1E=
Subject key identifier: 47:A3:77:91:6A:DA:E7:C4:53:50:19:58:A6:E6:BE:70:B0:EE:22:C3
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 083B1B44
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/R6N3kWra58RTUBlYpua-cLDuIsM.roa
Signing time: Sat 01 Jan 2022 03:56:52 +0000
ROA not before: Sat 01 Jan 2022 03:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13156
IP address blocks: 89.26.188.0/22 maxlen: 24
89.26.176.0/22 maxlen: 24
89.26.184.0/22 maxlen: 24
89.26.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138091332 (0x83b1b44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 03:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a377916adae7c453501958a6e6be70b0ee22c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:34:92:40:42:75:40:64:e2:b7:79:9e:af:
a7:b5:07:3c:3c:88:01:1a:ab:24:ad:a7:92:cd:02:
fd:b3:9c:57:c3:0d:8c:e5:67:0c:03:60:13:74:60:
eb:9c:f1:f3:40:6e:ca:27:db:4b:f6:b9:dd:d6:9e:
68:2b:f2:57:de:87:8b:a9:fb:06:6e:e5:bd:19:20:
84:2e:3c:8b:16:c0:78:af:7b:2a:71:36:b4:7b:51:
24:84:02:ee:ae:0a:00:89:7a:36:cc:99:5a:8a:f1:
3c:6a:3e:2b:f9:e9:5d:4b:db:2e:00:fb:5c:f9:18:
18:c3:09:be:b8:92:8d:b2:3a:7a:69:d7:fb:8d:e2:
3e:fe:8b:79:c8:76:93:fe:26:04:d5:be:e2:b9:c5:
cf:b9:84:6d:b7:ed:8a:e1:e0:97:45:cd:92:96:4e:
75:b5:43:48:e2:8a:12:52:cc:32:17:7a:0e:93:73:
6e:74:3b:8b:11:8a:b1:33:90:49:b0:78:ff:82:0d:
69:61:f7:75:22:c8:9e:68:93:d1:2a:df:c0:cf:81:
cb:0b:be:8a:d8:1c:8a:4d:63:f5:fe:10:20:f8:0d:
c3:98:3d:4e:6a:b4:7b:bb:13:4e:9a:7f:4d:60:1e:
f8:92:99:1f:d3:20:9f:c7:0d:b0:5c:8a:ce:6a:c7:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A3:77:91:6A:DA:E7:C4:53:50:19:58:A6:E6:BE:70:B0:EE:22:C3
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/R6N3kWra58RTUBlYpua-cLDuIsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.176.0/20
Signature Algorithm: sha256WithRSAEncryption
24:e7:74:6d:2a:d1:45:b4:32:ac:79:67:49:f9:8d:9f:4f:11:
c0:74:29:29:1a:9c:15:2c:14:c0:23:f0:0b:fb:ca:43:4d:ae:
f3:cc:6a:0b:99:be:b7:52:0c:58:24:61:61:5a:61:1d:6a:65:
03:b9:ae:63:f4:60:79:63:9e:18:eb:31:05:67:f1:51:1f:5e:
ba:f1:f8:f5:8f:79:7c:06:7b:41:3d:bb:66:f9:e6:77:4e:15:
82:99:fd:eb:f3:8b:83:ec:c4:74:ed:39:6b:9b:ae:21:8e:13:
2d:5d:78:62:93:fa:3d:0a:a6:b8:a3:36:48:81:1e:ec:c4:2c:
aa:83:34:53:73:0a:dd:54:79:ba:45:3f:7b:56:e3:72:32:f1:
2a:08:e6:43:a8:4b:a1:62:f6:ba:f9:1c:85:51:74:d4:90:5f:
36:da:7c:45:c8:56:fa:8e:a5:d3:b6:58:69:72:c6:f6:9d:13:
57:6d:78:71:45:f2:f1:87:9e:43:94:aa:b4:76:f4:83:3d:72:
3e:83:fd:b7:f1:19:bc:94:e1:2b:78:ca:c9:52:ad:4f:4d:26:
cc:00:5f:ca:76:7e:5b:09:42:43:08:c2:b9:41:f5:fa:ba:7e:
67:01:bd:3c:da:e3:aa:bd:db:3d:00:99:2e:31:6f:7b:07:ca:
3d:6c:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org