Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/S0NpNZ45p3t-d2W95wdGpnvkI7I.roa
File: S0NpNZ45p3t-d2W95wdGpnvkI7I.roa (raw, json)
Hash identifier: /f1Tj3trrAyB3Dbh15Kw9zK2r8EbTPzM/XfTZE//rFg=
Subject key identifier: 4B:43:69:35:9E:39:A7:7B:7E:77:65:BD:E7:07:46:A6:7B:E4:23:B2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 036D5286
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/S0NpNZ45p3t-d2W95wdGpnvkI7I.roa
Signing time: Fri 25 Mar 2022 10:10:58 +0000
ROA not before: Fri 25 Mar 2022 10:10:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 89.34.171.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57496198 (0x36d5286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 25 10:10:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b4369359e39a77b7e7765bde70746a67be423b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:f2:4c:28:1f:a9:aa:3c:dc:1b:8f:ef:00:
d3:e0:f6:c4:e8:bb:b6:f6:25:fb:12:e2:1e:3a:2b:
ba:3c:e3:a1:6e:99:ce:e3:20:a2:2f:2c:97:fa:0c:
27:6a:4c:6c:ff:2b:17:c8:26:ba:42:95:ed:c5:4f:
23:aa:80:c5:bb:eb:33:17:4a:ec:d6:7b:97:31:4c:
12:12:7c:29:98:e9:27:dc:34:bc:bd:22:f0:92:62:
b9:4d:cc:5c:d6:14:cd:8a:5e:b2:a8:c2:e6:64:07:
20:fa:39:41:81:8e:c1:0f:51:a4:d4:71:0a:44:0c:
fd:a2:f9:54:7d:b7:3e:49:57:28:a0:2a:8f:a1:79:
79:aa:ec:72:9a:81:0d:da:df:cf:34:57:bb:68:63:
76:dc:75:e4:7f:58:9a:cc:c2:6d:55:d7:7a:f9:d7:
d4:f8:db:4a:75:24:f1:b9:47:c1:07:2e:5b:5a:a7:
4c:33:39:f8:00:76:e2:56:15:84:31:f3:40:b0:4f:
58:26:47:ae:5d:5a:4e:65:e8:3d:cc:75:76:0d:17:
d0:3f:02:39:c2:d9:a9:c1:f0:24:6e:e5:6c:f7:a3:
74:69:11:45:6d:8a:ae:71:fe:a2:69:24:b2:d8:34:
aa:94:4d:97:ba:e6:45:e7:b9:2d:c8:8c:00:37:f5:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:69:35:9E:39:A7:7B:7E:77:65:BD:E7:07:46:A6:7B:E4:23:B2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/S0NpNZ45p3t-d2W95wdGpnvkI7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.171.0/24
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:dd:df:e3:a7:12:bc:f4:0d:cd:6f:f1:8e:08:41:af:00:5b:
e0:df:ea:11:6b:72:3b:29:02:fb:e5:d9:10:37:d1:f6:3b:ee:
38:e3:ac:e0:08:96:5c:c5:70:39:5c:e7:e4:9c:de:07:ea:d1:
ca:d5:25:a5:d0:5c:b6:1f:05:67:a6:a2:25:30:48:a4:fe:2b:
f6:d2:9e:6e:1f:1f:a6:c9:8d:e0:d3:f1:7a:0b:65:62:75:5a:
2f:f7:13:7f:f4:ba:ce:43:76:b4:ab:74:91:a1:cb:6a:ea:e6:
e6:f2:a4:8f:db:6e:9a:a8:34:43:82:e9:15:9a:fc:5d:8c:72:
37:8b:0b:99:0c:ba:ed:9c:3a:eb:2a:19:87:75:e2:3b:df:bb:
2b:9c:15:5c:1d:f1:3d:59:3f:b8:8f:6d:a1:f0:aa:66:9b:62:
d6:0d:c5:e5:f9:8a:1b:0e:e7:4b:5e:97:bc:b8:f8:dd:1a:9b:
4c:e7:ad:4c:7a:18:53:b7:60:f0:8d:09:81:4d:87:88:1e:ee:
e6:e7:e8:2a:f0:9d:1e:a9:17:fe:53:a8:12:a7:1b:cb:a0:c7:
44:f9:96:62:76:6a:eb:45:86:37:ee:55:67:80:0e:c1:84:34:
cc:98:93:ab:0d:7c:e1:a4:fd:27:87:b4:3e:9c:64:f3:62:66:
78:bc:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org