Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/ni0LpLE1mWW0xx4uJX4RQbrhxHc.roa
File: ni0LpLE1mWW0xx4uJX4RQbrhxHc.roa (raw, json)
Hash identifier: qfZrugP+TwWvv15CxLN8p47i78j+mcsidoHQFN/GA/s=
Subject key identifier: 9E:2D:0B:A4:B1:35:99:65:B4:C7:1E:2E:25:7E:11:41:BA:E1:C4:77
Certificate issuer: /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial: 057367A8
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/ni0LpLE1mWW0xx4uJX4RQbrhxHc.roa
Signing time: Sat 01 Jan 2022 05:57:34 +0000
ROA not before: Sat 01 Jan 2022 05:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208149
IP address blocks: 185.89.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91449256 (0x57367a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Validity
Not Before: Jan 1 05:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2d0ba4b1359965b4c71e2e257e1141bae1c477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:9d:22:50:74:6c:24:46:f9:a6:e0:ad:77:
2a:68:60:e6:6b:48:ff:94:e5:2f:14:c4:91:10:f1:
9a:6a:99:ef:f1:68:bc:6d:09:01:fc:16:12:db:66:
1d:86:23:9a:44:87:28:db:0d:d0:04:2c:f7:e8:03:
fd:6b:c9:2d:a9:15:b0:51:4b:51:47:f3:6b:e9:14:
da:1a:04:58:89:5b:06:d1:ef:69:a1:2f:94:a4:78:
8b:34:28:da:d6:ae:30:62:7f:e3:eb:72:61:b5:93:
dc:d5:57:57:c0:bc:5d:c1:84:5e:3f:af:aa:aa:90:
03:99:a9:45:17:50:43:30:17:ae:91:3a:76:a3:ee:
a2:43:4f:1f:08:43:87:bc:f5:ed:44:29:60:2c:6a:
0a:88:76:bd:be:77:49:a8:43:ac:d9:67:91:34:f3:
9a:e1:6e:f7:e2:dc:38:fe:24:e7:aa:0b:01:8d:96:
12:a6:4e:49:72:38:86:94:be:a7:82:1d:a6:97:67:
4e:90:6c:2c:eb:90:52:40:b5:2a:ee:89:c7:94:ed:
f9:30:ba:fa:cd:a7:5c:f3:78:92:1b:9d:e5:57:f8:
e7:c7:db:3b:3c:6e:db:85:16:9d:b9:f7:35:78:20:
dd:c4:f4:5c:8c:3f:e6:b5:85:9e:66:2f:b7:72:ac:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:0B:A4:B1:35:99:65:B4:C7:1E:2E:25:7E:11:41:BA:E1:C4:77
X509v3 Authority Key Identifier:
keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/ni0LpLE1mWW0xx4uJX4RQbrhxHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:83:ed:eb:8e:c5:fc:be:4f:3a:11:12:d0:19:c1:09:6e:0b:
a1:16:24:0c:58:a6:5b:b4:95:91:36:22:84:2a:3c:b3:38:d5:
3b:37:ce:e7:a5:7f:46:d6:ec:7d:02:5a:c3:80:21:3b:1d:6c:
c0:05:2c:0e:aa:e3:c2:d7:be:ba:67:b7:e0:95:0b:22:5f:5a:
98:26:75:1a:00:9a:47:0d:7f:a6:3e:5b:aa:c9:35:c8:f0:cb:
19:4a:db:8c:1a:68:9e:26:00:8d:52:89:6e:99:a9:50:1b:70:
26:7d:00:13:fe:7f:04:cd:f3:55:10:4c:37:18:05:ca:f6:01:
00:75:f2:bb:d8:df:31:8b:96:6f:ed:13:7f:fd:2f:af:d1:bb:
8b:34:44:7e:06:8f:6a:93:f1:ef:96:19:6d:d8:af:59:a8:bb:
5f:6b:4a:f4:bc:8b:79:f3:7f:40:8d:53:34:d5:b7:70:7a:af:
5b:7c:10:f0:d4:9e:88:90:64:8c:72:75:b0:7c:d1:76:6d:73:
01:1d:f0:59:5f:0a:1e:f0:e2:dd:5d:5e:26:71:af:5d:f9:a0:
2e:d3:6a:8d:0a:6d:ce:9c:50:a9:10:d6:4a:8b:c5:bf:bd:2d:
5c:e0:77:5a:81:fc:46:a4:9f:a2:54:b0:a3:6c:b3:7c:55:9b:
b5:38:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:06 2024 by rpki-client on console-fra.rpki-client.org