Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/DZai0_DwaaHtHVe2bfhpWSs0Zaw.roa
File: DZai0_DwaaHtHVe2bfhpWSs0Zaw.roa (raw, json)
Hash identifier: 2inOfhPkgcVcNfI9YwEhfiVtj7gh81CymGtcpNyrBCw=
Subject key identifier: 0D:96:A2:D3:F0:F0:69:A1:ED:1D:57:B6:6D:F8:69:59:2B:34:65:AC
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 0745D580
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/DZai0_DwaaHtHVe2bfhpWSs0Zaw.roa
Signing time: Sat 01 Jan 2022 01:52:51 +0000
ROA not before: Sat 01 Jan 2022 01:52:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212699
IP address blocks: 89.38.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122017152 (0x745d580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Jan 1 01:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d96a2d3f0f069a1ed1d57b66df869592b3465ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:72:b5:10:36:92:d7:ba:7b:e4:69:52:54:
73:e3:d1:48:87:da:3b:7c:0c:f6:92:cd:d5:5d:9c:
2c:21:48:77:a0:27:c8:8b:fa:da:9e:bd:82:0e:cd:
34:f4:3c:80:58:a2:aa:7b:80:80:75:36:38:76:f5:
18:67:01:f1:05:a4:c4:b5:95:30:a4:d4:7f:98:85:
fb:fa:1f:e2:74:6f:ec:d8:05:51:40:9d:18:aa:21:
57:26:72:fc:3e:48:d6:db:15:81:61:5e:8f:6a:2f:
c6:a4:ed:a9:8f:99:69:25:07:82:15:29:a6:d3:9e:
5b:b2:e3:4a:4f:88:23:6a:33:ab:de:eb:5f:42:6b:
94:8c:95:f5:e9:02:d0:2d:ed:06:4f:43:1f:48:3a:
8a:3c:21:55:2b:45:8a:21:f0:00:be:03:4b:74:b2:
4b:f1:26:68:16:a3:f3:d8:43:8c:72:5a:71:d9:02:
69:c3:5d:08:dd:56:28:ae:7d:e4:f5:a8:1e:2f:40:
9c:7a:ec:08:87:97:f4:6c:17:fc:39:4e:7e:98:50:
fe:cf:0b:29:6d:0e:8c:14:68:15:ef:96:2b:12:01:
53:f9:c0:23:60:22:eb:df:9e:ad:6f:74:9c:d5:7f:
a5:a1:3a:56:b5:a0:4f:50:d2:be:9a:1c:50:b6:26:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:A2:D3:F0:F0:69:A1:ED:1D:57:B6:6D:F8:69:59:2B:34:65:AC
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/DZai0_DwaaHtHVe2bfhpWSs0Zaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.105.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1f:25:5b:ee:ee:71:0d:f3:a6:c8:65:68:8b:a7:10:f0:3e:
c3:b4:46:fd:77:09:ca:20:ee:25:ed:c5:ad:b9:a6:fd:84:b6:
aa:8d:18:15:f7:e5:8d:64:09:ef:79:55:d3:71:4e:b5:f2:fe:
01:54:fc:9c:27:b4:3b:d8:cf:91:25:1f:e5:bc:eb:a7:7c:87:
e6:88:f1:09:5b:58:7d:99:26:21:d1:92:fc:49:1a:7c:d4:a2:
4e:81:ae:b5:d7:17:60:0a:8c:24:78:72:96:ee:8a:5a:63:6f:
52:d2:8f:dc:98:44:f8:b2:b3:87:2a:2e:04:36:90:20:c3:1c:
26:69:89:89:77:38:a6:4b:68:37:1f:92:52:89:29:a5:98:5f:
ca:49:f9:fc:75:43:0a:74:ed:aa:15:ae:fc:e1:9b:4d:37:12:
10:71:b2:32:7d:a0:2e:03:08:0f:28:92:21:7b:c5:37:ca:b3:
99:32:22:dd:37:8c:7d:fd:25:37:bc:34:74:45:b2:80:fc:1f:
25:13:db:45:e0:32:78:2a:a6:bc:ee:fc:c7:16:26:cb:cf:2e:
6a:f1:9e:a7:e8:bf:b0:4e:d8:75:f2:57:56:0a:d0:1a:d6:f6:
a2:27:ee:f0:63:2c:c3:b4:6c:77:3d:20:4e:5b:f5:d3:0c:8e:
6a:ab:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:36 2024 by rpki-client on console-fra.rpki-client.org