Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/_1OezFmPEmaDdynxiB8FviJFVIk.roa
File: _1OezFmPEmaDdynxiB8FviJFVIk.roa (raw, json)
Hash identifier: TOiwOZ7PZrKxuUfyk0gLT6iF5Rnq7030Qkl52dwhtFQ=
Subject key identifier: FF:53:9E:CC:59:8F:12:66:83:77:29:F1:88:1F:05:BE:22:45:54:89
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 0F36923C
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/_1OezFmPEmaDdynxiB8FviJFVIk.roa
Signing time: Sat 01 Jan 2022 04:53:01 +0000
ROA not before: Sat 01 Jan 2022 04:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203055
IP address blocks: 89.44.168.0/21 maxlen: 24
31.216.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255234620 (0xf36923c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Jan 1 04:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff539ecc598f1266837729f1881f05be22455489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:52:04:2b:a7:fd:06:f9:80:be:ed:43:e0:
28:96:81:51:e5:8c:11:81:c4:8d:a5:e3:87:9b:16:
e1:df:eb:66:66:cd:33:5f:02:ff:bc:99:82:59:87:
1d:68:8e:ca:e3:73:f5:0c:40:d0:ae:d0:76:89:52:
9c:06:e1:a6:6a:d8:11:e9:8d:43:13:39:8e:a3:38:
46:8c:a9:76:1d:b7:23:bb:35:1f:4a:e3:b0:55:96:
c9:31:20:4b:10:ba:b7:b0:79:8d:b6:36:44:6c:17:
f6:15:72:70:d8:c0:cb:a5:fd:26:af:7d:f0:76:09:
bc:6e:91:dd:76:14:53:65:01:c5:0b:e9:f6:9a:21:
5e:16:d4:9c:06:22:fd:ca:0b:43:cc:2d:b4:ea:49:
08:6d:18:0e:60:13:dd:4c:9d:d2:fc:7f:7f:9e:da:
49:64:6f:2e:ea:32:ca:2d:8f:ff:03:07:56:6b:52:
49:b9:fa:fe:91:ec:a3:f8:e4:97:b5:ee:f2:99:80:
08:3b:44:12:c8:a7:cd:71:c2:3b:87:3c:93:27:88:
ac:10:f8:aa:31:4b:0a:6d:f2:fe:e6:9b:4a:6b:37:
ff:48:d8:ee:2f:df:c9:05:b3:1f:78:3a:45:d9:72:
6b:95:89:90:f3:89:e0:fc:72:d9:8d:ff:c1:f2:af:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:9E:CC:59:8F:12:66:83:77:29:F1:88:1F:05:BE:22:45:54:89
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/_1OezFmPEmaDdynxiB8FviJFVIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.144.0/21
89.44.168.0/21
Signature Algorithm: sha256WithRSAEncryption
09:26:48:cd:30:d1:68:34:9d:51:31:fb:c3:36:64:80:ce:3f:
76:d8:4c:f3:ed:07:b1:59:da:29:7e:ad:10:7c:2a:90:f2:10:
1a:b7:78:36:a6:73:2a:4b:e4:43:4e:62:38:b0:1e:1d:ea:dd:
e6:1f:a3:45:f6:d0:da:48:1f:26:f0:74:6e:ef:9b:b0:7e:ca:
45:f6:89:c3:01:43:54:66:e4:69:dc:ce:1c:d2:19:45:67:87:
6c:7c:0c:28:b5:ce:06:03:22:b6:ef:e2:90:8b:6d:4d:c5:92:
0f:e9:66:2f:a2:e5:7e:57:bd:54:48:c4:bb:ec:7c:fb:2e:fd:
06:62:e8:60:1a:06:33:5c:d0:bf:4b:fc:8a:9b:06:0d:e6:52:
e6:21:cb:8a:27:37:e1:42:dd:12:8a:d1:48:f7:02:17:af:9a:
53:0e:5e:98:e6:55:83:cc:9b:02:69:35:99:a7:71:5c:cd:d1:
de:e8:69:4c:3e:1d:9a:04:f2:3a:47:97:2d:16:d1:dc:fe:12:
18:f0:35:4c:2a:d6:3f:e6:d5:1a:26:5d:f0:d0:f4:38:5c:fe:
26:d6:4f:76:af:1c:fe:2a:2b:f3:74:e7:2b:7e:98:79:9a:2d:
99:b7:31:30:86:7d:8b:a8:f5:89:f5:83:fa:65:eb:92:5e:e3:
fe:1c:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:57 2024 by rpki-client on console-ams.rpki-client.org