Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3_BXHi8zxDoBXPmODHZcZQJ2nMY.roa
File: 3_BXHi8zxDoBXPmODHZcZQJ2nMY.roa (raw, json)
Hash identifier: A6gZnYnazqDLBYLoN2HC/Cg4aWPnyQffPaZ6LrLIPSA=
Subject key identifier: DF:F0:57:1E:2F:33:C4:3A:01:5C:F9:8E:0C:76:5C:65:02:76:9C:C6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018384BF3B0126C40503C1132D0AB198CFCA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3_BXHi8zxDoBXPmODHZcZQJ2nMY.roa
Signing time: Wed 28 Sep 2022 15:37:48 +0000
ROA not before: Wed 28 Sep 2022 15:37:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212508
IP address blocks: 152.89.254.0/24 maxlen: 24
152.89.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:bf:3b:01:26:c4:05:03:c1:13:2d:0a:b1:98:cf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 28 15:37:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff0571e2f33c43a015cf98e0c765c6502769cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:b3:90:27:f6:4e:47:60:72:5d:f2:80:d1:
d4:1c:1a:17:58:92:3f:3a:08:78:a5:cf:94:47:56:
37:e6:17:cc:01:75:29:33:0f:56:ed:7b:56:0f:37:
93:be:08:50:13:26:bd:ad:36:3d:79:5c:c9:31:61:
9f:ca:da:76:5e:1b:2d:c2:e0:82:4c:42:d0:2d:d9:
df:ab:60:4e:38:ad:cf:22:c0:11:9f:db:00:a6:33:
08:0e:5e:7c:e7:0c:18:f3:e6:6f:0e:bf:22:ad:ab:
78:f4:2f:ee:19:29:82:8d:79:24:56:7f:bf:05:72:
95:01:a0:c8:99:55:de:7a:17:82:23:9f:56:58:33:
ed:39:a1:71:62:df:fd:b2:fe:8a:67:ea:ce:b3:4b:
3b:f1:39:49:77:9d:4a:93:e4:88:99:67:54:f8:5c:
4e:ee:fb:6d:85:ce:a6:db:0f:1e:f1:cd:5f:2a:a9:
7e:f9:a3:1e:92:12:76:99:73:34:11:be:c2:7c:a4:
1e:ac:30:1a:fd:82:1e:ad:e5:34:2f:0e:e4:eb:cc:
a7:75:92:2b:16:94:75:80:99:38:31:9c:26:d0:b7:
89:9d:04:52:33:1b:b9:b0:39:0e:2a:db:64:4e:46:
ab:53:93:c1:7a:44:5e:0c:3b:c0:ea:f3:93:36:3e:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F0:57:1E:2F:33:C4:3A:01:5C:F9:8E:0C:76:5C:65:02:76:9C:C6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3_BXHi8zxDoBXPmODHZcZQJ2nMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:83:48:8e:07:dd:86:cf:ca:e5:f9:7f:66:6e:de:db:86:80:
bb:e7:04:65:07:9b:12:27:12:4f:6a:fa:22:4b:de:b8:e7:9d:
9d:98:6f:f8:f9:8b:d6:98:f9:7a:0f:c8:6c:1e:53:93:3f:37:
13:a6:4b:ea:c1:34:58:93:c4:f0:a6:96:cc:43:70:f8:16:18:
85:74:39:06:9f:01:d5:1b:69:79:0c:a9:09:86:e9:db:2f:66:
df:99:aa:29:7d:30:69:a0:0f:4a:e7:aa:a0:32:a7:d9:68:b7:
de:13:b7:5a:d0:3d:da:3c:5e:3f:53:2c:45:ea:b7:15:72:e6:
65:e8:d9:cb:df:cf:8f:3b:e4:7a:c3:c8:7d:d4:0d:da:7e:5d:
97:ac:20:e3:f4:06:02:d8:92:6b:1f:30:6a:45:e3:fd:4f:3a:
18:cf:f6:8f:85:37:f5:87:db:88:ac:81:be:37:bd:f4:d5:6f:
92:7d:7e:e4:89:de:b9:90:a3:2c:e1:0b:73:fa:35:03:37:7f:
fb:ef:f3:b7:4d:d9:79:cf:12:c4:8d:31:c4:42:50:ff:dd:8a:
f9:9f:b0:93:86:5e:86:f4:64:f8:42:b8:88:81:7c:55:f3:ac:
52:d5:5b:62:3e:24:d2:e5:7c:28:f9:b4:f6:86:12:5a:06:24:
c5:3a:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org