Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/Kv9iR7NTzeA6qnSNxUQlnsF-QGQ.roa
File: Kv9iR7NTzeA6qnSNxUQlnsF-QGQ.roa (raw, json)
Hash identifier: PNWVExFA5ZspZ+wwLy3ax1hLglP8TmiADZgMSuEGRr4=
Subject key identifier: 2A:FF:62:47:B3:53:CD:E0:3A:AA:74:8D:C5:44:25:9E:C1:7E:40:64
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 0EAC09
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/Kv9iR7NTzeA6qnSNxUQlnsF-QGQ.roa
Signing time: Mon 16 May 2022 05:23:30 +0000
ROA not before: Mon 16 May 2022 05:23:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13065
IP address blocks: 89.28.224.0/21 maxlen: 21
185.9.56.0/22 maxlen: 22
212.109.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961545 (0xeac09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: May 16 05:23:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aff6247b353cde03aaa748dc544259ec17e4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:e5:c9:cf:78:42:63:c0:ae:b9:aa:16:ae:
23:be:ca:58:e6:7b:16:5d:5c:e8:73:31:ff:98:4f:
a1:45:5e:03:a7:97:e3:5e:70:ba:dc:fb:2a:08:40:
db:7c:9e:34:50:57:9a:99:02:cc:a6:48:ec:77:02:
64:57:a1:90:fd:05:43:29:14:b3:1e:1e:d6:28:50:
19:4f:f7:5d:5e:f2:5d:9a:7c:c2:1b:10:50:f9:02:
da:ac:91:29:46:f1:14:37:bb:15:66:c8:fb:71:16:
9f:1e:97:21:fc:dd:33:c9:62:f5:96:4b:85:fc:cd:
09:db:3a:d8:3d:65:17:eb:5a:86:8e:10:f8:ef:96:
14:96:ac:41:a8:3b:09:a0:a0:4a:3a:76:2c:2e:47:
0b:3a:f9:06:9f:7f:ec:72:81:6b:4a:31:49:11:53:
7c:e5:63:6e:fe:9d:81:6a:af:45:af:77:87:74:9e:
c3:71:a1:61:9e:ef:9d:61:95:6f:c6:ca:a2:c3:6e:
cf:81:a6:70:6c:a2:78:d1:3d:fb:c9:df:85:d5:73:
1c:46:ee:49:bc:d6:d7:6d:48:7b:a5:4e:07:4f:9c:
f9:ca:51:61:cf:11:fb:c7:55:85:5f:9e:7f:f9:90:
fe:9c:58:bf:a9:7b:ab:e5:23:4b:c1:f1:ad:31:c3:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:62:47:B3:53:CD:E0:3A:AA:74:8D:C5:44:25:9E:C1:7E:40:64
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/Kv9iR7NTzeA6qnSNxUQlnsF-QGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.224.0/21
185.9.56.0/22
212.109.144.0/20
Signature Algorithm: sha256WithRSAEncryption
36:d9:63:ff:a5:95:66:7f:76:a9:1d:f7:dd:f6:86:63:c8:3b:
f7:d7:8f:f2:d5:a5:56:2c:30:ff:1a:fa:e1:9a:33:5f:4b:4c:
c3:06:94:7c:d6:f0:62:a7:f8:a4:34:50:0f:68:be:56:bf:4d:
62:cc:dd:d8:e1:92:00:ee:ea:62:d9:6c:54:7d:6d:7c:f3:1b:
eb:fe:a0:72:65:06:5f:88:e7:65:b8:a2:d1:a2:46:25:e4:ca:
44:66:46:9d:a0:a7:ad:dd:95:61:6b:34:79:70:7d:80:b0:b1:
e5:b9:eb:0d:35:bb:8a:a1:2c:b4:11:96:11:60:26:b8:1d:6b:
1a:ea:3c:c5:28:a3:a8:25:20:84:61:2d:6d:4a:0e:26:09:9d:
e9:b9:14:f0:07:92:50:b1:a5:c1:0b:8f:60:f8:96:43:f0:89:
aa:8c:92:88:6d:f7:30:b7:0b:0e:87:6b:e1:b7:7a:85:91:c5:
87:90:d6:32:7b:6b:cf:23:97:5b:30:fa:82:a4:76:5d:fe:cf:
39:08:aa:70:69:5c:a0:03:22:6f:23:07:31:d8:e1:31:c6:f9:
bb:02:37:2f:19:c3:49:a2:d3:d8:ed:9e:ea:c6:1b:a3:87:02:
45:7e:13:b4:d9:41:20:40:c4:5b:1f:62:05:60:31:05:50:db:
34:fc:2c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org