Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ib7b-5TKekrQHA_BeeuX8yiVy48.roa
File: ib7b-5TKekrQHA_BeeuX8yiVy48.roa (raw, json)
Hash identifier: 6exhYPodivxzbN5h/4USbfzu5yH0yWEJXOIR+py8HSA=
Subject key identifier: 89:BE:DB:FB:94:CA:7A:4A:D0:1C:0F:C1:79:EB:97:F3:28:95:CB:8F
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 01839D9592FAF22186D0169B91A71B58FE2A
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ib7b-5TKekrQHA_BeeuX8yiVy48.roa
Signing time: Mon 03 Oct 2022 11:22:48 +0000
ROA not before: Mon 03 Oct 2022 11:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 194.169.245.0/24 maxlen: 24
176.103.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:95:92:fa:f2:21:86:d0:16:9b:91:a7:1b:58:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Oct 3 11:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89bedbfb94ca7a4ad01c0fc179eb97f32895cb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:b7:f7:8e:f0:86:e4:70:a6:65:6c:ff:0a:
82:85:d4:ce:d3:c0:cc:6c:6f:4b:a0:c1:e4:ec:5d:
23:c3:6a:d2:38:e0:15:a8:db:6c:34:f6:20:3c:7b:
7c:78:9b:a2:15:76:8d:27:5d:d9:4f:cf:f3:36:3f:
6f:51:dd:de:97:46:36:c7:96:fa:92:16:a1:09:6a:
fe:1f:11:bd:61:e7:e0:d1:2c:85:c3:e1:45:17:cf:
02:2b:dc:3a:93:34:eb:cd:02:fa:9e:c0:98:1e:bf:
10:28:47:09:9c:bb:44:f8:3e:ab:92:22:b8:9d:75:
55:b8:57:24:23:fa:92:24:55:da:9b:6d:13:a0:a8:
59:97:4b:c0:37:2d:9e:c7:35:02:fe:ad:ba:4d:fe:
e5:8b:12:1f:db:e0:ca:a2:f0:1c:fe:fa:3d:71:65:
23:96:ed:39:d0:2c:b1:40:a5:be:2e:97:e1:ef:1f:
41:55:7e:65:80:84:28:5d:ac:c1:36:30:c3:8f:98:
bf:23:ff:6d:cb:2f:af:6a:da:8a:02:af:cf:7b:52:
62:00:99:c9:d6:f1:fa:43:05:15:1d:4a:50:08:25:
23:e4:a4:84:5b:4b:be:d2:1c:8b:f7:e2:d0:ef:db:
ca:ff:f7:aa:0a:99:5b:fa:d2:97:88:a2:df:e4:b3:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:DB:FB:94:CA:7A:4A:D0:1C:0F:C1:79:EB:97:F3:28:95:CB:8F
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ib7b-5TKekrQHA_BeeuX8yiVy48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:29:75:1d:6a:b5:3f:07:f8:b8:d4:ca:bf:02:d8:85:53:49:
3d:59:0b:9b:b0:53:76:e4:8b:bc:09:62:a0:b6:3d:15:ce:e6:
a4:26:dc:f1:cd:8d:db:4b:57:24:34:78:ba:6a:52:1b:3d:75:
e2:73:e5:a5:14:0e:5b:f7:b6:6e:16:19:5b:e0:9c:39:14:b5:
7d:5a:59:21:c3:70:28:94:7e:d2:49:0e:4a:6c:16:4e:41:13:
5d:65:dc:90:d7:6e:2e:fa:91:8b:e2:1f:b1:ad:68:26:6a:52:
8b:06:0c:e2:21:03:b5:b9:82:b5:eb:06:cd:4c:24:3b:79:c9:
94:90:9b:cb:bf:f2:e0:a0:40:4b:b9:bd:3c:ef:ea:9f:07:29:
a5:39:99:d3:e7:e0:43:b3:8f:66:9f:49:e5:98:ea:dc:ba:2e:
5e:d5:1c:10:d4:73:a2:58:91:50:a1:2d:87:ef:da:c3:7d:0f:
f3:80:80:db:e6:12:1a:c0:c0:be:f2:88:5d:b7:f6:24:26:d7:
aa:95:12:15:e4:9d:08:87:07:cd:05:2f:a3:f6:8d:99:71:a2:
8c:2e:c9:66:6d:57:26:21:bb:88:0f:d9:f9:08:da:f1:77:8c:
89:26:80:50:78:73:9e:bf:3f:67:e3:12:c8:9d:84:93:c8:9d:
a8:e2:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org