Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/AxNvcA3Eog8Yqbra7zXP9l5Th5g.roa
File: AxNvcA3Eog8Yqbra7zXP9l5Th5g.roa (raw, json)
Hash identifier: JDBliWOqMlt67H6hHRUTvi6rXDI87YNUVv6U2/5AO6M=
Subject key identifier: 03:13:6F:70:0D:C4:A2:0F:18:A9:BA:DA:EF:35:CF:F6:5E:53:87:98
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 033E26BA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/AxNvcA3Eog8Yqbra7zXP9l5Th5g.roa
Signing time: Sun 06 Mar 2022 00:57:07 +0000
ROA not before: Sun 06 Mar 2022 00:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.42.213.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
94.177.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54404794 (0x33e26ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 6 00:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03136f700dc4a20f18a9badaef35cff65e538798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:62:23:63:4f:44:ad:7b:22:16:32:f9:9b:
7b:fb:11:55:5b:36:70:c5:ec:77:65:b7:2d:0e:62:
ce:9a:28:2a:3a:bf:09:0b:55:a8:46:98:dd:88:ad:
74:e0:0b:5b:2b:db:fd:61:13:de:57:9f:0f:3c:ff:
78:cd:da:38:17:e9:14:bc:a8:63:f4:f0:18:fa:49:
13:1f:ee:d1:a3:c2:e4:6f:88:48:c1:a4:bd:34:f6:
a0:55:f6:0d:bd:69:fb:eb:7b:be:9c:cd:94:12:58:
8e:c1:c6:76:64:d7:f8:3e:3d:4b:d4:d8:41:70:62:
0b:15:99:8d:16:06:1c:24:ce:c4:1d:90:c3:37:b0:
e3:e3:6c:3f:d2:a0:7c:3d:77:26:68:bf:1d:7f:f0:
71:44:bd:6d:21:3f:49:6b:e4:db:34:fb:f6:c8:7e:
1e:4e:a1:40:11:29:44:60:fc:74:49:70:cf:8a:0a:
37:62:e3:aa:b7:b6:34:c9:22:81:03:e2:89:28:87:
4d:96:17:f0:fd:c6:c0:8c:35:51:59:96:78:49:8e:
42:2a:fe:f7:47:1e:9d:82:e0:4a:a7:74:c8:dd:e3:
2c:7d:56:78:d4:bb:fc:27:6c:ae:c7:6c:d8:0a:b5:
b9:13:d7:f0:26:a7:6b:c5:a7:a5:02:7b:68:b4:74:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:6F:70:0D:C4:A2:0F:18:A9:BA:DA:EF:35:CF:F6:5E:53:87:98
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/AxNvcA3Eog8Yqbra7zXP9l5Th5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.106.0/24
89.42.213.0/24
94.177.65.0/24
Signature Algorithm: sha256WithRSAEncryption
19:07:c1:91:7d:62:9e:f3:12:0e:b4:23:88:a6:94:29:e7:a6:
2a:6d:03:44:b4:66:ea:7a:2d:a7:c0:57:1e:6c:a6:ad:4b:6f:
16:58:e9:35:32:8a:22:ae:52:e3:3b:a7:66:77:a0:36:7f:29:
5d:d5:1a:93:b3:11:24:e4:7e:a2:64:1d:68:10:3d:b7:aa:6a:
d5:54:f4:bb:e3:79:ed:e9:74:3a:f6:6e:54:a5:29:4d:cc:90:
03:7f:02:4a:1a:b4:ac:f9:08:26:d4:34:b4:e0:a1:e0:ab:a2:
c7:99:e9:e2:7f:c2:5d:8f:78:60:08:35:21:d7:9b:db:55:7e:
3e:2e:74:ed:43:a6:3a:00:1d:80:d2:73:29:2a:e5:e3:43:9f:
e8:0c:bb:a8:d6:55:1c:93:01:d6:69:30:40:6f:a1:af:ca:f3:
9e:a9:dc:1f:a0:b9:bf:ee:90:e6:ed:50:5a:b9:f0:40:7a:2c:
15:0e:27:b2:40:0b:c7:35:c6:6d:6f:76:d1:ac:1b:42:b5:af:
9c:96:a8:be:4b:51:8a:15:66:22:2e:98:89:bf:57:06:72:90:
0c:00:93:94:42:a3:d1:83:fe:7e:02:83:8b:84:e0:95:26:1e:
48:32:88:16:b7:a7:57:c5:57:f3:72:c2:59:d6:06:dd:c4:ee:
86:cc:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org