Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6lyZ7-ALuxDP5vYe-lo2XcWJkBs.roa
File: 6lyZ7-ALuxDP5vYe-lo2XcWJkBs.roa (raw, json)
Hash identifier: Wgt3VyYujMEl2hOUiN4pBEbH0wVyizs4SHx/sjbdv/8=
Subject key identifier: EA:5C:99:EF:E0:0B:BB:10:CF:E6:F6:1E:FA:5A:36:5D:C5:89:90:1B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0183C0546DCD4E70F19C4A0C723B9F9F095E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6lyZ7-ALuxDP5vYe-lo2XcWJkBs.roa
Signing time: Mon 10 Oct 2022 05:18:21 +0000
ROA not before: Mon 10 Oct 2022 05:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 89.23.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:54:6d:cd:4e:70:f1:9c:4a:0c:72:3b:9f:9f:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 10 05:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea5c99efe00bbb10cfe6f61efa5a365dc589901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:31:d1:d2:1d:bb:01:ad:ff:49:61:de:d0:
15:10:59:f5:ab:4f:aa:fb:76:3e:16:7d:38:47:d5:
a1:52:26:44:b4:ac:4d:55:47:24:56:7a:17:bc:70:
c7:8c:35:c5:2a:30:de:9f:19:6e:dd:89:6f:2e:97:
23:cd:0a:05:ed:a0:59:5b:93:27:be:dc:ab:6c:c0:
13:fa:e0:98:43:54:d1:61:9e:c1:9b:8d:bd:ee:45:
83:c6:02:3a:45:f7:c3:e1:79:56:00:25:a3:57:1a:
cf:47:94:90:47:05:a6:3d:65:bc:6c:00:21:d6:95:
21:ab:6b:8b:0c:32:92:a6:b6:fd:0e:98:66:ba:05:
5c:cf:91:47:af:5c:14:0d:5a:c0:3c:27:1b:c3:f7:
1c:eb:4c:f8:d9:75:ae:de:8b:34:a1:9a:60:69:7b:
76:f4:b0:59:33:35:8e:7b:5e:70:5f:65:32:f0:a7:
f3:ff:cd:e1:15:e4:70:8a:a4:94:5f:a4:b6:aa:0e:
3b:95:8b:59:c2:30:ce:91:17:8a:b8:a3:8a:e4:78:
37:2f:93:54:1f:bd:a2:b4:ee:6d:76:67:19:fd:81:
90:9c:47:9f:54:3d:f4:33:9c:b5:4e:35:f8:f7:dc:
f1:5b:9d:08:54:53:7d:47:84:9a:33:87:2f:23:dc:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:99:EF:E0:0B:BB:10:CF:E6:F6:1E:FA:5A:36:5D:C5:89:90:1B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/6lyZ7-ALuxDP5vYe-lo2XcWJkBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d5:bd:33:d9:36:d3:b0:f0:b5:cf:1a:e9:18:5d:30:bd:3a:
2a:fb:74:b5:cc:1b:52:9e:3e:fe:24:82:d2:18:89:fa:04:01:
da:81:5d:6e:03:b4:ff:72:79:6f:44:cf:02:4c:9b:d5:df:05:
19:44:3a:c7:b9:f5:89:64:c9:46:c9:dd:cb:c9:20:ed:60:d8:
4e:ee:ac:c0:6c:99:fb:64:33:29:ae:db:c3:0b:d7:b8:aa:fc:
81:29:00:a2:7c:cf:be:c4:9d:3b:d4:f8:8a:29:b9:c3:74:76:
aa:4f:23:38:f8:89:67:16:04:eb:c6:43:ee:ee:a3:60:b5:7d:
5a:d5:b5:c5:dc:41:f5:77:c3:2e:4a:37:cc:7d:16:52:4a:4d:
70:05:ce:ec:c2:b9:f9:8a:31:61:92:dc:2f:0e:21:24:60:02:
57:fd:28:8c:83:e9:03:9a:06:92:aa:c7:56:39:4c:bf:17:63:
df:72:b8:4f:13:cb:ec:9c:4e:0b:59:59:10:1d:d0:ad:b2:bc:
7a:1d:30:f1:a2:40:c8:de:7a:ca:ce:32:66:f3:47:4b:c2:31:
b0:11:db:25:17:8d:d8:a1:17:c4:cc:e9:e4:91:3b:20:22:e4:
78:ba:0b:b6:fe:3a:86:f0:52:c8:13:38:56:8c:53:4d:db:08:
03:35:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:47 2025 by rpki-client