Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/XApzibP-7on6uefb9kUld7TGUUg.roa
File: XApzibP-7on6uefb9kUld7TGUUg.roa (raw, json)
Hash identifier: Ws5zGJUYTs66UERiJ9Gp58gG2p71L8KnI06/ZmrWzAw=
Subject key identifier: 5C:0A:73:89:B3:FE:EE:89:FA:B9:E7:DB:F6:45:25:77:B4:C6:51:48
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03127460
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/XApzibP-7on6uefb9kUld7TGUUg.roa
Signing time: Thu 17 Feb 2022 23:11:38 +0000
ROA not before: Thu 17 Feb 2022 23:11:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396073
IP address blocks: 89.40.176.0/22 maxlen: 24
89.36.236.0/22 maxlen: 24
185.64.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51541088 (0x3127460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 17 23:11:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c0a7389b3feee89fab9e7dbf6452577b4c65148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:5b:fc:e0:0e:44:0f:3b:7b:ba:45:dd:f5:
fe:3a:ee:b6:fa:ea:bd:da:01:9d:b6:58:bc:03:e4:
74:f9:1c:24:37:8d:5d:82:ee:c5:76:d4:ec:b8:9a:
69:88:0e:c5:cc:ef:6f:03:42:c1:d0:3f:4b:66:52:
fb:a2:02:c1:55:a8:1f:6f:6d:2b:25:4a:57:ca:ad:
d4:8a:d7:c0:e0:29:95:36:a1:4e:6b:9f:f2:fc:dd:
74:46:25:f6:81:b0:d7:a6:00:e6:4e:3e:06:8b:24:
33:e2:d9:85:f4:ac:14:5c:4f:ce:5a:e8:8f:6a:91:
5f:a0:cc:6e:94:32:30:bb:b8:ef:71:11:78:0a:7c:
7d:b4:b7:1f:f7:f9:6d:40:55:ec:a9:a1:4f:f9:48:
fe:10:52:01:f5:6e:c9:9f:a8:d4:1b:df:66:24:46:
f2:4b:58:9d:43:d2:6e:7f:09:b2:40:c9:29:80:78:
fd:1b:c2:c3:58:a4:8e:93:bb:3e:3e:b4:d5:a4:7d:
b5:9e:35:42:ab:ce:62:06:38:e8:bc:48:77:15:1c:
bd:bf:de:a7:ea:71:be:af:f3:f2:24:11:a1:08:f8:
be:81:72:10:a1:ea:02:ed:18:8c:0b:80:77:73:64:
42:79:8e:46:4c:5e:ff:8d:24:24:4f:d2:8c:ec:58:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:73:89:B3:FE:EE:89:FA:B9:E7:DB:F6:45:25:77:B4:C6:51:48
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/XApzibP-7on6uefb9kUld7TGUUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.236.0/22
89.40.176.0/22
185.64.100.0/22
Signature Algorithm: sha256WithRSAEncryption
71:4b:9c:35:34:e0:c5:f0:9b:9a:51:d9:84:22:ea:94:05:f4:
3b:85:80:dd:91:8a:4b:7b:08:03:bd:f8:ee:b8:a3:3a:8c:cf:
9d:14:7f:a3:66:20:a4:82:7e:ef:75:ac:bd:32:1a:2b:10:19:
af:87:98:92:80:c5:68:b2:20:7a:14:1b:27:4f:fe:5a:52:70:
0b:5f:73:8d:12:47:42:7a:b2:eb:3e:9e:b2:a6:c8:30:a5:96:
ef:4f:57:c7:22:7c:b3:2e:eb:93:67:34:de:80:6e:77:e4:55:
cb:1c:13:4c:47:48:aa:16:57:4f:09:ef:bc:fb:fe:89:5d:99:
af:56:8c:00:7b:f9:12:06:50:47:43:2e:aa:af:59:0e:88:76:
72:6c:c7:7b:fb:27:c4:14:9d:4d:55:bb:8a:75:93:f4:c5:dd:
f3:ff:d5:fd:cc:84:7b:48:32:d4:1a:54:c4:ea:9e:ef:f2:a7:
52:38:6f:5e:68:7a:2c:a4:67:4e:40:ba:08:86:e8:92:00:2b:
7c:e2:d9:7b:07:a4:b5:f7:5a:8d:27:ba:40:a4:fc:84:6b:df:
75:7b:8c:d4:b6:06:62:a4:7c:24:4b:34:8c:a5:b2:f1:21:da:
c9:ea:1a:1e:ba:1a:74:f7:6c:b9:ed:1e:29:99:d1:a1:3b:e6:
4a:b4:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org