Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/iMx5KzLMAJrVtMX1z5S8CIjKgqE.roa
File: iMx5KzLMAJrVtMX1z5S8CIjKgqE.roa (raw, json)
Hash identifier: iLNAVIobtaKLcxGKS0/Ek1hEBYtKdVwNIc+83yETTTA=
Subject key identifier: 88:CC:79:2B:32:CC:00:9A:D5:B4:C5:F5:CF:94:BC:08:88:CA:82:A1
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 01827C7BC7DC4FD9228C21CA5FA69AD6B779
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/iMx5KzLMAJrVtMX1z5S8CIjKgqE.roa
Signing time: Mon 08 Aug 2022 08:04:23 +0000
ROA not before: Mon 08 Aug 2022 08:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50884
IP address blocks: 89.36.37.0/24 maxlen: 24
89.36.72.0/24 maxlen: 24
89.35.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:7b:c7:dc:4f:d9:22:8c:21:ca:5f:a6:9a:d6:b7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Aug 8 08:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88cc792b32cc009ad5b4c5f5cf94bc0888ca82a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:1f:86:cc:3c:00:36:56:5b:1f:4a:19:f9:
ad:4f:97:aa:47:07:df:7e:ff:06:c7:6b:99:95:03:
0b:02:9c:8a:f5:e0:e9:ba:2b:da:d5:13:43:e6:b9:
a1:92:fc:a8:b2:cd:f4:b4:e0:41:30:dc:e2:e7:52:
59:fd:bc:95:6b:29:07:e9:94:70:4e:26:6b:d6:4c:
e3:7c:b3:c0:dc:0c:d1:e4:51:f1:9a:af:ab:58:b5:
d9:c9:e5:93:f1:b7:bb:66:51:e3:26:f6:6c:13:a3:
49:65:92:0c:60:59:f8:2c:76:1b:ae:56:33:78:56:
0a:06:5a:54:57:f8:1f:dc:4d:ec:9b:0d:f2:c5:01:
25:75:9c:bf:9f:1e:f4:0d:d3:ca:8f:67:7a:e5:5a:
6d:f9:b0:09:e3:b8:35:d7:6d:96:c8:bf:90:75:1a:
a3:93:cb:6b:05:56:17:e4:4a:06:2e:0d:8e:55:b9:
0e:60:1e:8a:2e:55:17:13:9c:57:8a:b8:02:29:2e:
e1:e1:fa:de:98:56:58:b0:6f:0a:db:70:b9:82:60:
65:a6:ae:3c:fd:06:44:a8:44:23:c9:36:82:3a:1c:
39:ee:db:8d:1e:95:7f:7a:d7:c7:e5:51:48:a4:34:
2d:5a:21:c7:26:99:d2:45:1d:ff:fa:f9:b4:10:43:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:79:2B:32:CC:00:9A:D5:B4:C5:F5:CF:94:BC:08:88:CA:82:A1
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/iMx5KzLMAJrVtMX1z5S8CIjKgqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.27.0/24
89.36.37.0/24
89.36.72.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f6:a5:01:0a:bd:db:9d:fb:3c:54:d6:d8:1b:c5:2b:5a:98:
be:35:96:dc:7a:cf:36:6e:05:62:a8:e5:06:41:27:6a:ad:6d:
b4:cd:36:c8:5f:2a:4d:2d:0a:09:06:c5:32:c6:af:b0:03:bf:
57:cb:54:6f:bf:13:3f:52:c4:4d:5d:4d:88:9f:da:3c:d2:e6:
c9:36:f5:c0:3d:b0:77:79:fe:3b:26:3f:f3:21:ae:48:f3:cb:
f5:0a:5d:4b:80:7a:27:83:ec:5b:52:cb:3a:80:17:82:50:2d:
f6:70:63:64:1c:a1:16:f5:c5:92:c7:a5:37:8e:28:76:aa:ed:
1e:38:64:2b:66:a4:93:9c:0b:96:ac:8b:6c:98:c3:03:5f:f8:
39:b7:bd:5d:8d:ef:dc:12:d3:45:b9:45:16:d1:f8:b5:a9:cb:
cb:d0:f3:5d:7c:bd:fa:f6:bb:20:a1:62:24:45:b9:27:28:f5:
c1:f7:fd:e8:34:b2:a7:7d:6b:7c:c6:a7:12:66:ab:8e:7c:dd:
8a:36:dc:a5:72:f5:ab:0c:c8:de:b0:ce:9e:db:2f:c4:0d:98:
bd:f3:6b:48:65:39:7a:16:52:3a:c6:b4:d1:82:5e:07:53:2a:
07:b6:e1:06:cc:5d:32:e3:24:77:08:14:78:d7:1e:fe:de:f9:
a0:07:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net