Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b_Ghsyz5zfKSDgCeZmE0kZKYJqg.roa
File: b_Ghsyz5zfKSDgCeZmE0kZKYJqg.roa (raw, json)
Hash identifier: 6NAyWT7XCRc+/6uBsqRQxtryv4kbePqBBrQiurJRjlw=
Subject key identifier: 6F:F1:A1:B3:2C:F9:CD:F2:92:0E:00:9E:66:61:34:91:92:98:26:A8
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0183498C2DD0A2A01BE33F56F9B36E6CF41E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b_Ghsyz5zfKSDgCeZmE0kZKYJqg.roa
Signing time: Sat 17 Sep 2022 03:44:27 +0000
ROA not before: Sat 17 Sep 2022 03:44:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 89.23.103.0/24 maxlen: 24
89.23.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:49:8c:2d:d0:a2:a0:1b:e3:3f:56:f9:b3:6e:6c:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 17 03:44:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ff1a1b32cf9cdf2920e009e66613491929826a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:d0:54:ce:f2:d1:80:93:1c:9c:c3:5d:8a:
5f:0b:45:0d:c7:d9:0f:a1:e6:1b:5a:b4:6b:a5:58:
91:0e:ec:f4:5e:61:c2:b4:66:f0:13:9a:5a:3f:e3:
e4:9b:b7:9e:44:5d:14:5e:ff:7e:30:6c:e8:86:45:
d9:cf:d8:39:3b:78:31:92:b9:51:f4:a4:19:1b:58:
30:a1:7d:f9:17:cf:38:e9:c6:cf:e5:a3:4d:84:bf:
12:34:63:fd:c7:e5:31:2e:de:c1:f3:0f:22:82:45:
da:20:e9:24:ad:68:97:60:c8:c2:6a:02:08:ac:97:
4f:2a:1c:32:38:fb:f8:34:1f:32:e5:04:4e:2f:e1:
19:18:2e:43:c1:3e:a7:69:02:3f:75:bb:3d:3b:7c:
3a:dd:d5:fc:36:57:93:f9:12:a5:c6:dc:ba:ea:19:
5e:4f:31:3c:a2:44:ba:34:9a:08:d7:c6:ce:9e:0d:
d1:69:88:cc:3f:17:93:d2:ba:1a:9e:44:d8:7d:96:
00:37:cd:ec:76:30:87:3c:0b:ae:e5:ab:29:e4:3f:
ca:6d:c6:62:46:58:77:14:8b:e7:88:b6:37:a6:8d:
15:d4:5d:69:ae:51:c8:0e:c5:39:7a:5d:06:ae:cd:
b7:ae:54:78:03:87:24:37:61:7a:a0:fb:de:55:c7:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F1:A1:B3:2C:F9:CD:F2:92:0E:00:9E:66:61:34:91:92:98:26:A8
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b_Ghsyz5zfKSDgCeZmE0kZKYJqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
89.23.108.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c7:08:57:6d:b7:b0:5b:d0:f1:ce:c9:13:76:c0:95:ba:a3:
61:40:98:1c:2e:a5:0e:23:77:f9:48:23:5a:97:5b:9d:40:24:
fe:f1:33:78:5d:cd:31:f2:84:81:f9:d6:c9:92:21:68:f1:9b:
fe:92:ce:f2:e6:16:33:bd:a4:f8:3b:0a:c8:62:69:b6:ee:13:
46:3b:75:96:a4:8c:3a:9d:96:c9:f9:0b:07:0b:4e:6d:c9:29:
6d:80:12:ce:d5:a1:0c:ce:6f:c1:0e:63:d1:3e:f8:3c:16:33:
ef:d4:f5:36:1e:f7:1b:59:bb:27:c0:03:92:44:07:9f:7a:17:
21:ae:91:c9:d1:64:de:82:1b:b0:da:e5:44:fb:ae:ee:52:0a:
57:42:94:49:ce:48:96:bd:69:92:5f:31:06:47:f5:0b:3d:a4:
73:d7:2b:db:fa:e8:c9:38:49:3e:a2:02:a6:3e:08:bc:ef:f0:
43:16:64:7e:65:bb:c4:44:5b:9d:a4:56:b4:35:41:b6:83:1b:
5a:dd:79:6d:e3:0a:34:46:46:21:e6:d0:d5:8b:85:45:cc:23:
e3:2f:f3:4b:da:98:27:d3:87:81:1a:0e:10:db:75:9a:66:81:
95:e8:5d:d2:09:a9:ec:6d:b5:f3:44:75:b7:18:c2:ec:70:f0:
fb:1e:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org