Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/vIsh8buyP9JYR1a6slyGY7RYzas.roa
File: vIsh8buyP9JYR1a6slyGY7RYzas.roa (raw, json)
Hash identifier: AImm7i0qkDjV7bSyoqxH9GsObXJOwsRBRbSsJoMiDhc=
Subject key identifier: BC:8B:21:F1:BB:B2:3F:D2:58:47:56:BA:B2:5C:86:63:B4:58:CD:AB
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 083BAC92
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/vIsh8buyP9JYR1a6slyGY7RYzas.roa
Signing time: Sat 01 Jan 2022 03:56:53 +0000
ROA not before: Sat 01 Jan 2022 03:56:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57286
IP address blocks: 89.26.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138128530 (0x83bac92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 03:56:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc8b21f1bbb23fd2584756bab25c8663b458cdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:f2:8b:7a:dc:a3:06:82:79:54:17:cc:78:
b3:2e:1f:3f:40:30:30:77:81:fd:8c:c6:99:86:99:
92:8c:4e:5f:51:a0:63:cd:74:ad:6d:25:37:0e:b8:
78:0c:5b:1e:ab:33:3e:ac:21:0f:bc:27:18:8c:f2:
37:2c:e5:50:b2:8f:80:1a:7c:f8:5d:50:6f:33:43:
03:98:23:aa:88:e1:54:56:d5:2a:a7:e9:fa:c3:9a:
a1:52:46:ca:08:68:5f:9e:b9:37:f9:8e:a0:88:eb:
87:0b:38:83:79:b7:e5:a5:ba:2e:23:19:b2:8a:d8:
51:1b:9a:50:29:15:b6:86:04:56:47:47:61:78:33:
28:36:a4:25:62:73:57:0e:20:84:24:4a:21:70:19:
7c:c7:ce:e1:a1:33:79:05:18:05:72:e1:bb:30:e3:
62:22:53:b0:83:5c:36:ed:e0:96:ba:44:fd:8c:a1:
86:60:9d:77:4c:db:f2:e6:3f:a0:56:ce:fb:a1:bd:
d8:4e:08:60:ff:ff:81:32:c2:13:0e:1b:25:5b:30:
b7:8a:bc:97:09:a2:ad:c1:24:cd:e8:e1:7c:66:f1:
54:f9:11:f3:e4:1c:2b:af:f9:c8:01:40:47:6e:ba:
22:de:f8:bf:dd:dd:53:0a:00:4b:40:f5:24:83:6e:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:21:F1:BB:B2:3F:D2:58:47:56:BA:B2:5C:86:63:B4:58:CD:AB
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/vIsh8buyP9JYR1a6slyGY7RYzas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5b:1f:37:82:67:ba:97:5a:4f:52:74:f7:a2:77:ba:ab:8e:
cb:4a:e1:01:26:11:dc:db:60:f9:b4:4f:4a:6c:07:e0:e9:75:
78:12:76:da:cc:ac:48:8b:9c:e5:4f:a1:18:b0:b1:bf:6f:32:
46:fe:df:5b:18:86:56:83:86:8a:17:cf:5b:ea:45:60:11:7d:
49:b2:bf:46:fc:9a:01:05:20:fd:00:49:cb:f1:a5:aa:1f:ed:
58:c7:4f:31:97:fb:81:26:8f:6a:11:ae:88:bc:96:70:a0:a9:
5a:68:12:e9:19:3d:ce:19:d1:1b:ea:65:3c:62:ff:57:6d:6a:
21:73:3a:b9:71:79:92:fa:51:e0:61:7f:46:f0:36:ae:9e:df:
76:85:3d:4f:49:c7:c0:40:35:f8:a3:38:bf:be:74:3a:0b:ca:
4f:79:c0:de:73:de:f0:77:78:4e:c9:ad:35:72:24:fb:89:33:
bf:1a:8d:2c:dc:bc:9c:81:9e:02:c8:ef:9a:f4:10:bc:68:6f:
6d:62:51:56:da:ce:cf:85:0e:17:ea:28:c3:b3:e2:0b:41:24:
43:c6:a0:2e:f4:0a:75:de:eb:40:a6:7b:b6:9a:a0:31:ba:b7:
58:d0:ab:fa:5a:0c:b8:cc:15:1d:6c:51:05:df:6e:ee:a6:5e:
5a:8b:65:bf
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECDuskjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTFkMThkOWEyMjI3MzZkYmFjMjMxMTEwYjg4ZGVhYzhkYjAzMzZkMB4XDTIyMDEw
MTAzNTY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmM4YjIxZjFiYmIy
M2ZkMjU4NDc1NmJhYjI1Yzg2NjNiNDU4Y2RhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN5B8ot63KMGgnlUF8x4sy4fP0AwMHeB/YzGmYaZkoxOX1Gg
Y810rW0lNw64eAxbHqszPqwhD7wnGIzyNyzlULKPgBp8+F1QbzNDA5gjqojhVFbV
Kqfp+sOaoVJGyghoX565N/mOoIjrhws4g3m35aW6LiMZsorYURuaUCkVtoYEVkdH
YXgzKDakJWJzVw4ghCRKIXAZfMfO4aEzeQUYBXLhuzDjYiJTsINcNu3glrpE/Yyh
hmCdd0zb8uY/oFbO+6G92E4IYP//gTLCEw4bJVswt4q8lwmircEkzejhfGbxVPkR
8+QcK6/5yAFAR266It74v93dUwoAS0D1JINuae8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS8iyHxu7I/0lhHVrqyXIZjtFjNqzAfBgNVHSMEGDAWgBT+HRjZoiJzbbrC
MRELiN6sjbAzbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19oMFkyYUlpYzIyNndqRVJDNGplckkyd00yMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNjRlMWVmLTliYTgtNDMwNy1iZmFkLTY1ODdmNzZmZDgxMC8x
L3ZJc2g4YnV5UDlKWVIxYTZzbHlHWTdSWXphcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NjRlMWVmLTliYTgtNDMwNy1iZmFkLTY1ODdmNzZmZDgxMC8xL19oMFkyYUlpYzIy
NndqRVJDNGplckkyd00yMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFka5TANBgkqhkiG9w0BAQsFAAOC
AQEAp1sfN4JnupdaT1J096J3uquOy0rhASYR3Ntg+bRPSmwH4Ol1eBJ22sysSIuc
5U+hGLCxv28yRv7fWxiGVoOGihfPW+pFYBF9SbK/RvyaAQUg/QBJy/Glqh/tWMdP
MZf7gSaPahGuiLyWcKCpWmgS6Rk9zhnRG+plPGL/V21qIXM6uXF5kvpR4GF/RvA2
rp7fdoU9T0nHwEA1+KM4v750OgvKT3nA3nPe8Hd4TsmtNXIk+4kzvxqNLNy8nIGe
AsjvmvQQvGhvbWJRVtrOz4UOF+oow7PiC0EkQ8agLvQKdd7rQKZ7tpqgMbq3WNCr
+loMuMwVHWxRBd9u7qZeWotlvw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org