Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/CRnyqNBUwBgk1tjtUrZ0zmLDBJ0.roa
File: CRnyqNBUwBgk1tjtUrZ0zmLDBJ0.roa (raw, json)
Hash identifier: 8x8f0BTnSLUv0GDhMAfO8EIeC83PY8VmpzaPPB+ZGpE=
Subject key identifier: 09:19:F2:A8:D0:54:C0:18:24:D6:D8:ED:52:B6:74:CE:62:C3:04:9D
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 032387AB
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/CRnyqNBUwBgk1tjtUrZ0zmLDBJ0.roa
Signing time: Wed 23 Feb 2022 01:42:57 +0000
ROA not before: Wed 23 Feb 2022 01:42:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 94.177.27.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
89.37.106.0/24 maxlen: 24
94.177.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52660139 (0x32387ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 23 01:42:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0919f2a8d054c01824d6d8ed52b674ce62c3049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:ea:12:68:2e:51:ce:9c:f2:9a:23:36:e4:
37:9d:0e:f3:c2:ac:b2:f9:35:bc:d4:4a:4d:6d:9f:
16:a4:07:20:18:3a:9e:36:b6:a1:bd:a3:2b:50:83:
ad:81:02:7f:0e:66:b0:06:68:34:46:99:a0:67:1f:
b0:e2:ae:e5:00:37:8f:25:3e:25:74:4f:ae:50:66:
2a:37:b6:b7:aa:9e:0b:1d:1e:bf:3b:7b:e4:d4:dc:
54:d2:ad:4b:28:ab:e6:ea:53:b5:a2:c5:9b:29:e5:
e6:6c:04:c8:2d:35:d1:25:bd:65:68:1e:f1:39:35:
fe:dc:b0:46:c7:09:b8:d1:87:bc:5c:9a:8d:59:7e:
81:b7:83:e0:1b:b0:23:4b:73:56:a2:ea:e7:ea:85:
7e:21:0a:4e:96:d8:7e:92:7d:d9:a0:5d:97:04:4e:
20:f6:cc:ea:b9:89:6d:66:4d:c9:09:98:b2:7f:97:
c9:69:59:64:02:c4:ba:13:cb:ae:49:31:7e:a0:4d:
d9:23:9c:4b:ca:dc:50:b8:3c:a9:39:e1:ba:7a:f9:
fc:cd:cd:7f:6f:4a:49:ae:56:9b:fe:52:2d:fc:9b:
69:ad:14:86:ca:59:a1:c3:e2:03:b6:56:24:b7:7f:
58:f7:67:8c:a6:7a:f2:30:3b:35:46:01:6d:52:a0:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:F2:A8:D0:54:C0:18:24:D6:D8:ED:52:B6:74:CE:62:C3:04:9D
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/CRnyqNBUwBgk1tjtUrZ0zmLDBJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.106.0/24
89.42.213.0/24
94.177.27.0/24
94.177.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:41:c1:21:a7:29:b8:db:12:23:f0:94:9a:4f:46:e1:77:bd:
8f:13:1a:8e:79:6d:3c:39:b0:61:1f:40:6d:c4:76:35:ef:78:
96:db:45:f8:8b:9f:dd:4d:a3:51:db:84:56:9b:45:d7:68:6f:
e7:50:15:10:89:bc:5b:4c:e5:af:2f:37:96:4a:7d:79:32:e4:
06:63:d6:2d:c8:28:d4:bb:d6:e4:22:cc:34:7a:20:95:5b:af:
75:9a:60:e1:e1:19:fc:f8:a9:c4:fa:d2:de:9d:85:dd:ad:05:
d9:a6:9d:7a:2f:2d:e2:7e:56:f1:30:60:f2:4d:fa:31:c9:d7:
57:12:9a:84:48:4b:f7:80:35:0b:b1:77:0e:33:f2:62:d0:40:
aa:11:9d:f5:9f:2d:3c:4c:bd:6b:59:8a:f5:93:32:2c:db:2e:
6e:2f:3b:60:96:4e:0e:78:32:1c:8d:90:5b:5c:21:e7:21:b6:
07:df:de:82:d4:9a:a6:cd:d4:df:7b:44:d1:e2:88:99:c3:37:
21:75:57:89:3a:7c:f4:77:05:9d:0f:df:a2:c5:d1:84:42:68:
55:72:ce:c9:43:dc:1a:85:47:ad:d7:c6:b3:24:3e:0c:07:de:
08:5b:fe:86:c4:2b:fb:0c:37:ab:69:d7:89:6a:77:e8:b7:54:
68:ba:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org