Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/3ea3EruJORGZd3ArhKFwZff0ZkM.roa
File: 3ea3EruJORGZd3ArhKFwZff0ZkM.roa (raw, json)
Hash identifier: F4baQZyNzoNcPMR6mx0Y0tk4Kyfw+Y0sDdVzr9tug7I=
Subject key identifier: DD:E6:B7:12:BB:89:39:11:99:77:70:2B:84:A1:70:65:F7:F4:66:43
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 1BB860D3
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/3ea3EruJORGZd3ArhKFwZff0ZkM.roa
Signing time: Wed 04 May 2022 14:57:21 +0000
ROA not before: Wed 04 May 2022 14:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205771
IP address blocks: 89.21.65.0/24 maxlen: 24
128.127.149.0/24 maxlen: 24
128.127.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465068243 (0x1bb860d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: May 4 14:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dde6b712bb8939119977702b84a17065f7f46643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:08:df:10:ad:bc:ac:6f:da:a3:3d:e0:41:
52:21:9d:fb:fd:6e:21:5e:b0:0a:c3:dd:0e:ed:14:
75:f4:d9:24:eb:87:f4:5f:02:39:f4:7a:4d:35:80:
0b:a4:65:64:9f:3d:7b:c3:75:db:bd:1f:7b:bb:a8:
cd:99:f2:d5:d4:fa:2b:59:cf:9f:a8:ba:d1:67:79:
0f:79:92:5a:1a:53:3b:cb:7d:2a:5d:68:da:7e:c1:
d8:61:8f:7f:63:f4:2f:d8:20:54:36:41:00:c7:47:
54:04:f5:9f:85:e7:0d:d9:39:04:61:12:bc:fc:7c:
68:d0:48:40:ed:0f:0b:76:81:c6:70:1d:95:a1:18:
5d:72:f9:52:1c:f9:77:18:5d:c6:90:3a:a2:43:e8:
64:3e:3f:51:96:e2:47:b7:78:7e:34:f0:07:49:99:
b5:7c:3e:10:b5:69:2e:e1:d6:d2:b6:44:b0:94:99:
19:9a:a6:ab:84:b0:25:df:b9:5b:29:74:ab:fb:80:
05:96:6e:8e:2b:a9:1f:8b:8c:d2:ac:9a:29:8b:a5:
21:3a:09:6f:50:1f:d0:a3:53:b0:52:27:03:c1:60:
d8:01:b5:e2:a5:81:7a:6f:e2:5a:c2:df:d2:01:da:
e2:7b:e3:69:17:5c:00:44:49:83:ce:df:86:92:21:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:B7:12:BB:89:39:11:99:77:70:2B:84:A1:70:65:F7:F4:66:43
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/3ea3EruJORGZd3ArhKFwZff0ZkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.65.0/24
128.127.149.0-128.127.150.255
Signature Algorithm: sha256WithRSAEncryption
55:02:eb:fe:7d:30:5b:1d:65:fc:74:52:72:97:df:4d:0b:29:
4e:1a:b4:60:78:fd:e7:26:30:d4:14:ed:b1:4a:95:b5:d8:3c:
c1:a4:dd:dc:7b:1b:35:fb:cf:d2:bd:cc:5b:ea:df:0b:e1:58:
ec:09:43:3f:fd:75:d7:ad:95:58:e4:fa:93:76:a6:6f:e1:f9:
c2:2c:26:f6:12:db:8e:b0:98:09:a2:be:b5:c7:e3:e0:ce:c5:
80:aa:49:69:69:de:ff:07:50:d7:da:96:c0:4f:f8:92:c6:96:
57:04:33:9c:c5:6d:56:48:e9:88:e5:f2:ea:87:db:a8:57:de:
1d:fa:f0:95:d2:78:58:d4:dc:a7:0d:ef:76:49:a6:52:7a:95:
13:36:26:08:2e:32:cd:96:f1:75:9f:01:07:d7:91:b5:55:5b:
11:2e:49:06:ca:0a:1d:bb:31:ff:7d:0d:5f:a3:e3:48:b5:1f:
60:45:4f:68:5d:30:40:1e:92:6b:7b:9b:8e:09:60:e2:2b:20:
cc:95:1b:cc:68:cd:61:ac:bd:e1:75:ae:c3:57:1c:27:c2:22:
69:29:dd:d1:4c:f5:9a:7e:e4:89:b6:48:96:52:52:65:f6:a6:
d6:46:ba:2f:c6:0b:d8:09:8c:34:90:9e:63:76:cb:71:90:1d:
75:4d:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org