Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/UQn9UFTBwW-0-Fq4dkAQD9X9Y5g.roa
File: UQn9UFTBwW-0-Fq4dkAQD9X9Y5g.roa (raw, json)
Hash identifier: H8P90Ur7thP9ieHMu8e77FGs2JszhAD3KM6k8+8tBPQ=
Subject key identifier: 51:09:FD:50:54:C1:C1:6F:B4:F8:5A:B8:76:40:10:0F:D5:FD:63:98
Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial: 4AB9
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/UQn9UFTBwW-0-Fq4dkAQD9X9Y5g.roa
Signing time: Sat 09 Apr 2022 10:12:25 +0000
ROA not before: Sat 09 Apr 2022 10:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203068
IP address blocks: 89.39.204.0/24 maxlen: 24
89.39.205.0/24 maxlen: 24
89.39.206.0/24 maxlen: 24
89.39.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19129 (0x4ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Validity
Not Before: Apr 9 10:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5109fd5054c1c16fb4f85ab87640100fd5fd6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:b4:de:32:5b:c9:6a:de:c4:77:ee:1e:c3:
29:62:c6:38:0e:f6:60:18:fe:b2:08:bb:08:64:22:
01:21:89:f6:17:f0:08:63:21:69:c9:72:aa:4e:1f:
05:34:3d:27:ea:f4:11:1f:1b:7d:40:03:ac:4a:62:
3a:49:aa:49:14:60:60:23:f9:84:af:4f:17:8e:34:
34:c2:97:f1:a0:4e:69:4e:1f:5f:ee:22:5a:05:03:
03:d9:47:37:2c:76:ac:fe:e7:59:81:a1:99:da:4f:
16:5c:9b:71:e4:e7:57:26:6f:13:9a:0a:7b:36:0b:
d6:c2:a3:35:c4:36:be:50:d3:7c:e3:10:63:7a:c8:
88:35:fb:56:c3:74:2e:13:9e:4e:f3:52:90:1b:66:
c8:14:72:eb:38:f3:51:c0:63:d0:65:00:c9:4b:cf:
f1:1a:7f:82:ad:9d:2c:73:79:94:ad:01:bd:35:b3:
b5:6a:10:51:95:04:fc:49:b8:f1:4d:78:36:15:60:
6d:60:4a:ae:62:70:4e:4a:ff:9b:0f:a4:44:3d:23:
62:be:07:71:d2:bf:d1:39:69:14:32:58:09:2e:61:
9f:64:98:f5:62:ec:36:30:a6:12:af:85:e6:91:bd:
c6:08:da:a4:09:cd:77:e4:07:d7:14:a9:84:46:2e:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:FD:50:54:C1:C1:6F:B4:F8:5A:B8:76:40:10:0F:D5:FD:63:98
X509v3 Authority Key Identifier:
keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/UQn9UFTBwW-0-Fq4dkAQD9X9Y5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.204.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f4:60:70:ff:9e:4c:13:68:23:d1:cb:56:4c:00:05:7a:e3:
c6:5f:84:30:96:f4:2b:b1:a9:21:84:c4:e6:97:d2:7f:d8:9d:
1b:2c:ee:f3:25:f8:6b:c2:8b:c8:6a:a6:64:2d:10:74:83:cd:
e8:4e:13:a5:d7:92:56:2b:7f:c0:89:78:67:a5:41:94:09:22:
3b:81:bf:8f:d8:55:bf:d0:f0:c4:a5:18:5e:8d:c1:6f:49:b9:
20:73:e6:e9:71:97:88:ce:f3:82:56:45:1f:fc:08:40:ca:77:
9d:ff:69:59:40:29:b3:70:9b:2c:19:4c:e7:05:4a:f3:22:89:
50:79:0f:bc:4b:c9:eb:7b:85:9e:00:ad:e0:7c:74:2d:ea:32:
a1:fa:72:a6:bc:25:3c:8a:4d:93:de:64:ef:dd:3c:0a:89:0f:
b7:a3:94:44:cc:f0:41:88:23:9c:e5:6c:4f:1a:14:dc:b7:70:
92:56:aa:ee:b2:3a:15:31:41:0e:94:3a:2d:19:43:ed:86:55:
eb:f6:21:df:11:52:bb:4e:d5:0c:ea:fb:b1:14:2c:37:f5:8e:
2f:1b:65:98:55:e8:99:58:e7:b5:fd:67:00:fc:6e:98:3a:3f:
63:77:a4:20:0f:75:49:22:84:08:19:39:0e:8c:38:9d:f8:e8:
7e:2c:05:d3
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICSrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTI0
MjQ2NmY4Zjg2NDVjOWYzOWYwNDg3NGRkYWRmMGQ3MTM2ZjY3ZjAeFw0yMjA0MDkx
MDEyMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDUxMDlmZDUwNTRjMWMx
NmZiNGY4NWFiODc2NDAxMDBmZDVmZDYzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuX7TeMlvJat7Ed+4ewylixjgO9mAY/rIIuwhkIgEhifYX8Ahj
IWnJcqpOHwU0PSfq9BEfG31AA6xKYjpJqkkUYGAj+YSvTxeONDTCl/GgTmlOH1/u
IloFAwPZRzcsdqz+51mBoZnaTxZcm3Hk51cmbxOaCns2C9bCozXENr5Q03zjEGN6
yIg1+1bDdC4Tnk7zUpAbZsgUcus481HAY9BlAMlLz/Eaf4KtnSxzeZStAb01s7Vq
EFGVBPxJuPFNeDYVYG1gSq5icE5K/5sPpEQ9I2K+B3HSv9E5aRQyWAkuYZ9kmPVi
7DYwphKvheaRvcYI2qQJzXfkB9cUqYRGLucxAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUUQn9UFTBwW+0+Fq4dkAQD9X9Y5gwHwYDVR0jBBgwFoAUEkJGb4+GRcnznwSH
TdrfDXE29n8wDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9F
a0pHYjQtR1Jjbnpud1NIVGRyZkRYRTI5bjguY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2UwLzkzMTQ5Yy0wODI5LTRmY2QtYmQzNS0wZjU1ZWEzM2FmZTMvMS9V
UW45VUZUQndXLTAtRnE0ZGtBUUQ5WDlZNWcucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzkz
MTQ5Yy0wODI5LTRmY2QtYmQzNS0wZjU1ZWEzM2FmZTMvMS9Fa0pHYjQtR1Jjbnpu
d1NIVGRyZkRYRTI5bjguY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJZJ8wwDQYJKoZIhvcNAQELBQADggEB
AGT0YHD/nkwTaCPRy1ZMAAV648ZfhDCW9CuxqSGExOaX0n/YnRss7vMl+GvCi8hq
pmQtEHSDzehOE6XXklYrf8CJeGelQZQJIjuBv4/YVb/Q8MSlGF6NwW9JuSBz5ulx
l4jO84JWRR/8CEDKd53/aVlAKbNwmywZTOcFSvMiiVB5D7xLyet7hZ4AreB8dC3q
MqH6cqa8JTyKTZPeZO/dPAqJD7ejlETM8EGII5zlbE8aFNy3cJJWqu6yOhUxQQ6U
Oi0ZQ+2GVev2Id8RUrtO1Qzq+7EULDf1ji8bZZhV6JlY57X9ZwD8bpg6P2N3pCAP
dUkihAgZOQ6MOJ346H4sBdM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:02 2023 by rpki-client on console-ams.rpki-client.org