Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rDVezJ-Uy_xrW8rip5e4TXtRetA.roa
File: rDVezJ-Uy_xrW8rip5e4TXtRetA.roa (raw, json)
Hash identifier: jCg3NDMZWo2DxcQ+AKYDUOAnK4rChZzMT3Io946rO5I=
Subject key identifier: AC:35:5E:CC:9F:94:CB:FC:6B:5B:CA:E2:A7:97:B8:4D:7B:51:7A:D0
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0182C40B5E7646F2C9A117D9C9829AEFC175
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rDVezJ-Uy_xrW8rip5e4TXtRetA.roa
Signing time: Mon 22 Aug 2022 05:34:15 +0000
ROA not before: Mon 22 Aug 2022 05:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 89.23.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:0b:5e:76:46:f2:c9:a1:17:d9:c9:82:9a:ef:c1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 22 05:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac355ecc9f94cbfc6b5bcae2a797b84d7b517ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:d6:ef:15:06:ca:56:c9:15:b1:88:c8:fd:
5a:5d:9f:d9:b1:fb:9c:b8:38:2f:42:f0:60:a4:5a:
ad:f7:8a:1b:ad:27:c8:f5:8f:30:e1:b9:98:db:af:
20:d7:74:f9:71:cc:78:d1:da:48:a7:6d:03:76:24:
8f:86:6b:e5:38:96:6a:45:d2:a9:d9:6c:f1:69:9f:
65:a5:46:83:d2:c0:9c:d3:8c:35:21:f7:29:6d:82:
87:6f:8d:19:49:eb:67:39:3d:24:fa:1a:93:b2:a9:
e6:12:f5:41:4b:ea:14:6a:91:97:54:dc:ec:64:7e:
98:41:d7:fb:49:5f:2e:14:03:19:96:1b:11:9e:13:
58:89:70:e1:b6:9b:00:b3:ad:1d:db:82:51:b5:eb:
3b:5f:88:6d:e9:20:d2:69:9f:40:0f:ea:c6:0b:db:
5b:30:44:a1:ed:b8:65:15:4e:a7:f8:f9:3a:d2:8b:
3d:c4:30:39:9a:64:f4:67:2a:d7:85:11:f0:05:6f:
61:2e:df:b7:73:2a:8b:1c:e5:9a:18:63:5e:cb:5f:
27:11:0e:9f:a1:82:c1:e0:0b:a2:04:e4:2c:16:0c:
d1:cd:e1:f6:24:56:5d:52:38:89:c3:c2:c6:c0:fb:
6a:8d:bb:5f:ba:78:d5:08:11:a2:d2:74:76:70:45:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:5E:CC:9F:94:CB:FC:6B:5B:CA:E2:A7:97:B8:4D:7B:51:7A:D0
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rDVezJ-Uy_xrW8rip5e4TXtRetA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:a3:a7:c8:f7:4a:f4:42:93:6d:77:a8:e7:0b:cb:6a:7c:c6:
51:fb:b7:3d:02:c7:96:19:ae:3a:5f:24:a6:d2:f3:de:e8:49:
8d:86:28:ec:ce:64:ec:ef:64:29:b4:49:de:cf:56:de:53:71:
3c:fa:49:69:1f:d2:eb:89:0f:af:93:79:9a:b2:12:f2:4d:ab:
16:7e:bc:5d:2b:d1:87:17:fb:9c:e5:5f:ff:a7:26:26:0d:95:
0c:bf:1f:e8:f2:a3:3d:de:a2:0f:14:84:8a:52:99:6c:f4:f6:
d7:02:ab:08:4a:89:cf:7a:c7:e0:0c:f5:51:f0:42:dd:39:67:
df:34:c0:5b:42:47:3f:05:04:6e:25:6d:6c:f9:9a:0f:65:25:
29:68:d3:93:e0:54:e9:14:31:dc:67:79:d7:3c:78:f9:f0:8f:
df:4b:81:51:1f:95:11:10:b3:48:51:80:a1:c1:c8:2a:ec:98:
e6:14:dc:4f:6a:04:81:2c:39:cf:57:88:5c:4f:ad:e8:4b:e9:
1a:54:f5:36:74:ca:59:e1:f5:5f:47:32:26:20:8c:8e:5e:7d:
d7:c8:64:f8:04:4f:26:5b:31:24:f3:73:d5:f1:eb:71:48:2d:
91:9d:8a:17:15:b9:79:d1:92:ca:69:10:67:52:44:2c:87:d2:
cb:3c:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org