Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/9HbLou_E9hyBByR5H2PNN--yfXY.roa
File: 9HbLou_E9hyBByR5H2PNN--yfXY.roa (raw, json)
Hash identifier: UetVO3ID7Mt5KKhHWJtJMy/wnhZ4FbCEdP8jqcSNcTg=
Subject key identifier: F4:76:CB:A2:EF:C4:F6:1C:81:07:24:79:1F:63:CD:37:EF:B2:7D:76
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 146A9B35
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/9HbLou_E9hyBByR5H2PNN--yfXY.roa
Signing time: Thu 21 Apr 2022 06:49:40 +0000
ROA not before: Thu 21 Apr 2022 06:49:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 89.37.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342530869 (0x146a9b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Apr 21 06:49:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f476cba2efc4f61c810724791f63cd37efb27d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:5b:1d:62:a9:1b:23:9d:7e:df:26:b4:77:
99:1d:29:89:fe:f5:7c:b5:89:6b:10:ef:a5:d4:90:
5d:8a:06:d9:34:ea:21:9f:2d:8d:af:d5:5b:09:38:
25:3b:c7:3c:eb:e5:48:8e:37:a9:3f:2a:d4:ca:da:
95:97:b6:2a:8b:e1:46:26:8e:2b:09:a4:49:35:9b:
ff:37:03:65:96:30:03:7d:ee:37:af:99:c4:97:75:
a9:95:a6:d3:97:fb:00:15:a3:97:63:06:b0:be:3a:
04:6a:5b:68:8b:97:22:f1:8d:29:eb:da:79:d1:19:
ee:d1:8a:67:26:b5:67:82:8b:dd:e9:b6:7a:e8:f8:
cc:b8:b7:1f:5c:45:3b:c8:8d:47:f1:61:b0:77:cd:
97:ab:e3:0c:e6:10:63:aa:4c:c4:cc:87:a0:9a:04:
25:6c:44:a6:85:09:e9:e4:2b:90:16:4d:89:41:51:
35:92:be:c4:a5:7b:a9:0f:3b:56:56:e3:54:77:69:
39:51:ab:ba:e0:bf:a9:f0:3a:d3:e7:1b:7c:7f:41:
d5:e6:bf:37:33:30:51:88:df:3a:63:59:03:c3:d1:
40:b4:69:b4:51:d3:80:84:23:57:81:fc:c8:29:d4:
40:c2:ca:98:45:0c:b5:f5:47:49:1a:ff:c8:dd:9d:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:CB:A2:EF:C4:F6:1C:81:07:24:79:1F:63:CD:37:EF:B2:7D:76
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/9HbLou_E9hyBByR5H2PNN--yfXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f6:b1:06:e4:20:c2:bb:a4:6b:97:d8:e8:4c:61:ff:7f:c0:
58:fe:94:b5:b8:d5:48:fa:8c:37:ff:fa:d0:c5:65:4a:d5:6b:
65:e9:c2:05:e3:db:a8:9b:7c:d9:8d:91:3d:dd:af:17:61:64:
1a:c3:45:34:4e:31:2e:d1:4c:34:60:0a:11:b8:88:58:28:80:
ff:78:8c:1c:a2:a6:f7:e5:36:06:87:59:76:5b:90:3f:bb:62:
d8:93:64:2d:05:be:b7:a1:47:88:00:2a:76:78:73:e9:2f:b0:
78:3d:82:ad:5b:91:be:39:36:55:e8:ae:df:6b:bb:4d:d6:44:
70:ec:53:c3:7e:52:ff:aa:21:40:51:46:cf:b2:48:5e:d5:0f:
be:db:c5:11:2c:9a:0c:9c:89:f0:ba:95:3a:19:1c:29:4b:fd:
89:38:a1:b5:34:e2:61:e2:16:7b:a0:ef:8d:65:7e:b4:4a:25:
a0:c7:2b:90:2d:d3:24:53:15:24:59:88:bd:2f:82:2b:b3:69:
38:77:ec:18:04:0a:73:ff:13:a3:b1:c3:20:c2:cb:b4:18:56:
03:7a:2b:fa:2e:0a:34:be:a6:9a:20:05:4a:26:68:2c:0a:75:
50:8c:20:8e:10:f6:27:65:21:44:46:f1:e6:67:41:f3:14:39:
6f:9f:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:28 2024 by rpki-client on console-fra.rpki-client.org