Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Ag18BNHmhDAEqKSL11vvi7YyY9M.roa
File: Ag18BNHmhDAEqKSL11vvi7YyY9M.roa (raw, json)
Hash identifier: +v7dH0Ae9rAsTdRDvZEsrhRgf2yHb+BWtk2Cd11SrDM=
Subject key identifier: 02:0D:7C:04:D1:E6:84:30:04:A8:A4:8B:D7:5B:EF:8B:B6:32:63:D3
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0183C4CD7095E1F9C869C993A6FC3FEEEC14
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Ag18BNHmhDAEqKSL11vvi7YyY9M.roa
Signing time: Tue 11 Oct 2022 02:09:01 +0000
ROA not before: Tue 11 Oct 2022 02:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205771
IP address blocks: 89.21.65.0/24 maxlen: 24
128.127.149.0/24 maxlen: 24
128.127.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c4:cd:70:95:e1:f9:c8:69:c9:93:a6:fc:3f:ee:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 11 02:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=020d7c04d1e6843004a8a48bd75bef8bb63263d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:88:f7:c6:a5:c1:45:ca:49:49:1a:91:23:
a9:84:06:96:95:98:6c:8e:fd:47:e6:80:b5:bf:75:
2c:79:a0:f9:87:22:b9:a9:71:4d:df:61:e5:7f:36:
7b:57:a0:b4:8b:1a:b0:11:13:df:8f:df:5e:79:b2:
3a:09:0a:32:38:95:d7:8f:96:0c:8d:60:db:b1:23:
e9:e5:a4:5e:40:08:c9:ce:7f:e5:53:f3:af:30:1d:
4f:9e:97:e0:e0:6a:43:6b:9b:96:11:53:ae:47:71:
59:2c:90:35:9c:fb:82:03:3c:92:7b:66:5f:68:86:
0e:59:cd:9e:27:69:13:5d:3c:93:66:90:a3:42:41:
8b:bd:05:4f:17:db:bf:20:39:30:6d:f9:88:2e:f4:
5e:39:1f:5a:00:f9:13:4b:6a:4d:fe:ca:6c:2c:54:
93:a1:31:1e:b8:73:08:9a:8e:4e:7c:e7:46:12:4b:
e1:8d:23:07:e1:4f:ec:3a:0a:8f:aa:41:00:81:cc:
43:14:ab:c8:ff:46:3b:37:d2:4b:5c:aa:77:4f:50:
1b:54:70:67:7e:a7:5f:c2:13:36:17:69:30:d0:3c:
3c:60:84:43:39:9f:b8:4a:65:4e:5e:36:be:e2:0a:
cc:7f:c4:3c:82:1d:5e:ea:42:be:f3:94:fa:1c:94:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:7C:04:D1:E6:84:30:04:A8:A4:8B:D7:5B:EF:8B:B6:32:63:D3
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Ag18BNHmhDAEqKSL11vvi7YyY9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.65.0/24
128.127.149.0-128.127.150.255
Signature Algorithm: sha256WithRSAEncryption
41:ea:0f:61:c7:7d:0a:06:23:5f:9e:3b:73:1a:0c:f3:2d:7e:
98:68:be:e8:21:16:c2:d7:ef:c4:89:45:5d:88:13:e8:fd:1d:
0c:96:c5:e1:70:3c:20:11:f6:8f:01:1b:63:a7:6e:95:31:f5:
96:89:fb:97:4d:bf:a5:13:ff:f1:03:71:7e:72:bc:2b:80:d5:
e3:35:0d:ee:c5:18:e9:fc:c3:74:7b:c4:57:01:ca:1a:55:b3:
23:b1:28:8a:73:c2:e4:7c:02:18:df:49:5c:ef:ec:63:8e:df:
31:af:f2:2b:9c:96:d7:c7:41:b1:b0:8e:bc:d7:46:d8:99:40:
b3:e6:ea:ba:2e:64:e8:00:f5:3f:89:73:dd:4b:9d:5a:97:fa:
50:11:67:25:e5:2f:9c:e8:d3:18:fb:6f:c0:88:44:8a:1b:e2:
95:95:b4:17:bf:c2:f9:15:a0:e6:0e:51:c6:f9:8b:94:07:2d:
48:48:30:8a:bc:b6:d3:0f:76:31:e7:54:a8:22:c8:54:18:74:
a0:3f:77:e8:99:80:51:35:7e:a2:51:61:ff:2c:64:24:a6:cc:
a6:3f:23:b0:f0:22:29:86:c2:b3:e2:f7:8d:87:1a:b7:75:66:
af:b3:f3:93:13:42:1d:ba:bf:53:79:33:14:a2:12:00:00:81:
a6:90:80:10
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYPEzXCV4fnIacmTpvw/7uwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjIxMDExMDIwOTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjBkN2MwNGQxZTY4NDMwMDRhOGE0OGJkNzViZWY4YmI2MzI2M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuaI98alwUXKSUkakSOphAaWlZhs
jv1H5oC1v3UseaD5hyK5qXFN32HlfzZ7V6C0ixqwERPfj99eebI6CQoyOJXXj5YM
jWDbsSPp5aReQAjJzn/lU/OvMB1Pnpfg4GpDa5uWEVOuR3FZLJA1nPuCAzySe2Zf
aIYOWc2eJ2kTXTyTZpCjQkGLvQVPF9u/IDkwbfmILvReOR9aAPkTS2pN/spsLFST
oTEeuHMImo5OfOdGEkvhjSMH4U/sOgqPqkEAgcxDFKvI/0Y7N9JLXKp3T1AbVHBn
fqdfwhM2F2kw0Dw8YIRDOZ+4SmVOXja+4grMf8Q8gh1e6kK+85T6HJRhKQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAINfATR5oQwBKiki9db74u2MmPTMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvQWcxOEJOSG1oREFFcUtTTDExdnZpN1l5WTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAWRVBMAwD
BACAf5UDBACAf5YwDQYJKoZIhvcNAQELBQADggEBAEHqD2HHfQoGI1+eO3MaDPMt
fphovughFsLX78SJRV2IE+j9HQyWxeFwPCAR9o8BG2OnbpUx9ZaJ+5dNv6UT//ED
cX5yvCuA1eM1De7FGOn8w3R7xFcByhpVsyOxKIpzwuR8AhjfSVzv7GOO3zGv8iuc
ltfHQbGwjrzXRtiZQLPm6rouZOgA9T+Jc91LnVqX+lARZyXlL5zo0xj7b8CIRIob
4pWVtBe/wvkVoOYOUcb5i5QHLUhIMIq8ttMPdjHnVKgiyFQYdKA/d+iZgFE1fqJR
Yf8sZCSmzKY/I7DwIimGwrPi942HGrd1Zq+z85MTQh26v1N5MxSiEgAAgaaQgBA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org