Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kB6nkm1ZXfzmjFnJjxcEneY0Q0Q.roa
File: kB6nkm1ZXfzmjFnJjxcEneY0Q0Q.roa (raw, json)
Hash identifier: cxBfNGPUdyVtHHpx1XEHPW4IWvwVqHrFSB1t4fygJkc=
Subject key identifier: 90:1E:A7:92:6D:59:5D:FC:E6:8C:59:C9:8F:17:04:9D:E6:34:43:44
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 109177AB
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kB6nkm1ZXfzmjFnJjxcEneY0Q0Q.roa
Signing time: Sat 01 Jan 2022 10:02:13 +0000
ROA not before: Sat 01 Jan 2022 10:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213274
IP address blocks: 89.252.157.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
94.102.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277968811 (0x109177ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 10:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=901ea7926d595dfce68c59c98f17049de6344344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:f7:15:aa:76:87:47:bc:39:7d:f7:ed:63:
de:dc:ae:d3:bb:48:9a:6f:63:d0:0c:eb:b0:6f:31:
44:07:87:a2:8e:8d:c8:5a:ba:b9:d6:3a:6e:8d:cf:
67:da:d9:9d:1e:5a:4b:f7:14:7a:d2:77:47:bd:69:
7a:1d:3b:9c:a1:e9:bc:22:e4:81:e7:da:29:d4:95:
69:e7:87:61:ca:75:3e:fc:19:7f:68:87:78:05:3d:
09:69:5f:c6:1a:94:8e:d0:57:17:f9:6b:c0:06:e8:
c8:cc:0e:c9:80:87:d9:57:0f:3f:8a:98:2e:1a:5d:
f8:87:39:af:2b:8b:50:1e:b4:ce:32:38:64:15:c3:
17:24:62:1a:24:20:80:00:03:08:98:5c:3d:84:2b:
c6:9e:6a:90:d0:b5:cd:7e:9e:4e:98:1d:ca:f0:53:
2f:10:02:27:ea:fa:11:67:14:dd:e6:9e:1a:3d:8d:
c8:50:6b:d6:6d:62:fc:e8:70:dc:93:a6:f2:f9:11:
dd:1e:8a:2a:c6:e9:e4:15:16:d7:0c:12:a6:06:a0:
f5:c6:25:97:8c:4c:5a:0a:51:39:21:84:48:42:53:
a8:08:a4:ca:de:47:35:3f:44:0f:00:73:7f:98:20:
ae:14:a4:66:bf:8b:0a:74:a0:e6:82:3c:bc:23:38:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1E:A7:92:6D:59:5D:FC:E6:8C:59:C9:8F:17:04:9D:E6:34:43:44
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/kB6nkm1ZXfzmjFnJjxcEneY0Q0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.157.0-89.252.158.255
94.102.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e2:fa:68:48:9a:9d:4f:58:ec:e9:17:e6:8f:0e:7f:1f:ba:
48:e0:f4:7a:46:d7:2c:e0:10:25:38:45:ef:86:c4:40:a8:11:
b1:bb:45:a2:5f:66:db:e3:c4:c7:95:b8:b6:74:72:dd:b6:58:
5c:e1:2c:45:6e:d0:92:3b:ca:d5:de:b0:44:f8:97:02:b4:83:
4d:9f:41:ac:54:c9:b0:8d:9c:ad:0d:80:12:bf:4e:37:0e:f1:
84:99:86:39:2c:9f:ec:47:d8:98:f9:64:2f:2f:d4:46:34:a8:
09:1f:f3:18:67:0b:5d:26:29:41:e8:e1:7c:f6:2f:3b:a8:c6:
61:1e:f7:7e:28:7f:4b:72:f8:71:ba:b4:73:0b:a2:4c:55:74:
4a:da:0e:f1:52:19:e3:c0:f9:21:a6:3d:57:40:38:29:9c:b3:
21:a4:a0:9d:c0:4e:d7:4a:61:42:96:9e:a5:05:74:ce:d2:27:
25:84:16:9f:ce:c9:76:10:ea:4f:fc:73:ed:28:7d:b0:b1:2d:
62:10:74:24:94:fc:50:8c:28:74:d8:b7:46:a8:42:90:3f:e5:
fb:51:db:ac:1a:50:50:64:b9:b2:02:40:63:ed:6c:fd:f9:1e:
44:c1:b9:1b:7c:e0:98:70:4f:a0:99:3e:1f:11:99:f3:6c:c5:
ee:37:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org