Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v89IKtAEbbK-aASxlcUDFEyUZY4.roa
File: v89IKtAEbbK-aASxlcUDFEyUZY4.roa (raw, json)
Hash identifier: vd1sCzUX0oiXpIlpYTlcvzdNjhFzBwKQbYZFcOayeGY=
Subject key identifier: BF:CF:48:2A:D0:04:6D:B2:BE:68:04:B1:95:C5:03:14:4C:94:65:8E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4290A6E3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v89IKtAEbbK-aASxlcUDFEyUZY4.roa
Signing time: Sat 01 Jan 2022 14:03:30 +0000
ROA not before: Sat 01 Jan 2022 14:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208610
IP address blocks: 192.36.247.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116776163 (0x4290a6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfcf482ad0046db2be6804b195c503144c94658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:8f:8d:47:83:06:5d:4d:ac:5a:25:18:40:
71:81:25:dc:3f:6b:f8:c9:be:88:6d:75:26:74:24:
45:92:0d:49:c4:e2:54:ac:ec:59:b1:99:d5:6d:17:
46:24:a0:e9:df:ab:f1:b6:91:65:bb:be:51:2a:98:
2d:e3:05:18:72:34:d5:e1:dc:be:8f:84:b0:8b:aa:
c5:4a:01:77:48:f4:d9:1a:dc:51:aa:80:7e:50:12:
ce:a8:97:32:8a:05:06:4c:a6:a7:f6:8a:be:bf:5f:
8b:56:e2:29:67:28:bc:dd:40:71:b1:34:65:2c:eb:
c7:5d:a1:52:05:cb:b6:ea:a0:26:d0:5b:3e:3d:0f:
0c:5c:10:51:39:f8:cc:84:d4:f6:6e:1a:cd:a3:1e:
08:b0:1f:69:02:d6:78:99:39:3c:b8:7a:b4:17:d2:
05:21:1b:6a:7e:3a:02:c5:a7:91:32:73:fa:85:f5:
c1:72:e8:95:ff:1d:fb:62:42:d0:f6:f7:dc:01:fe:
4c:75:33:90:2c:f0:15:86:0e:76:fd:dc:41:0f:d5:
fa:90:97:e9:b4:11:cb:92:72:7a:6e:e6:b9:db:dd:
af:b9:f9:cf:13:b2:10:c4:9a:a8:c3:d6:ac:f2:c2:
04:5e:7e:e6:7a:d1:e3:bf:a8:47:07:4d:5b:f4:47:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:48:2A:D0:04:6D:B2:BE:68:04:B1:95:C5:03:14:4C:94:65:8E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v89IKtAEbbK-aASxlcUDFEyUZY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
193.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:42:24:72:22:5c:3b:cb:1f:9e:29:99:65:1d:90:5e:6b:f8:
02:70:c1:e7:de:14:a6:2f:88:b1:2f:e1:c4:b9:37:7e:33:01:
a6:4f:cf:d0:61:f8:e3:a8:d9:9d:26:ec:80:9d:8b:66:92:42:
09:e5:ed:55:1a:5d:f4:59:39:22:8f:59:a1:7d:52:be:c8:25:
2f:70:36:ec:20:ef:be:9d:6e:50:90:77:a2:52:79:5e:85:64:
66:64:5d:98:7f:17:d5:1b:bf:5d:e6:e7:26:70:8b:ed:b4:9f:
9e:e4:43:76:e2:e8:13:e1:16:0e:33:19:77:dd:2d:23:67:22:
b5:db:96:64:4e:5c:2a:51:6a:13:43:8e:19:5b:95:a5:74:73:
d4:aa:ee:29:80:a9:e9:43:d4:02:b0:c2:26:f3:60:b5:cf:2d:
b0:63:b7:18:9a:8f:d1:70:41:51:72:40:91:91:6a:54:81:cb:
4b:bf:ae:03:f6:ce:d9:15:66:ec:30:ca:17:2c:2f:80:a3:10:
49:6e:96:ef:34:e8:3e:7a:84:fe:90:72:2a:e2:aa:8c:fa:97:
05:63:7c:76:a2:10:0d:c4:ec:3a:fc:0d:de:a1:98:49:10:43:
cb:59:6e:2c:c1:7f:07:34:9e:e6:ab:39:e8:34:87:f6:e5:e3:
fb:3c:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org