Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/Dm-qYcmB6kKeGXauQaFLBxl1J70.roa
File: Dm-qYcmB6kKeGXauQaFLBxl1J70.roa (raw, json)
Hash identifier: jwjUs3orQzVRax8H7g0G2fi3VigznKvbGCHDhk+RU8g=
Subject key identifier: 0E:6F:AA:61:C9:81:EA:42:9E:19:76:AE:41:A1:4B:07:19:75:27:BD
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 054E7CBD
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/Dm-qYcmB6kKeGXauQaFLBxl1J70.roa
Signing time: Sat 01 Jan 2022 10:04:18 +0000
ROA not before: Sat 01 Jan 2022 10:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210150
IP address blocks: 152.89.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89029821 (0x54e7cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jan 1 10:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e6faa61c981ea429e1976ae41a14b07197527bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:5b:79:37:d6:91:57:10:29:ed:0f:14:24:
2c:9a:3c:92:cb:b4:d2:93:6e:d4:c2:70:49:dd:4e:
c4:8c:d5:6b:c2:a1:09:be:ed:b9:4b:74:1e:f1:88:
f1:db:08:f6:83:a8:01:4d:34:41:e2:0d:1c:77:09:
1d:09:49:a6:3e:37:ce:70:54:eb:c9:04:a3:9c:17:
6b:31:25:80:27:c7:d3:79:fd:77:82:89:11:3c:df:
03:2b:df:1f:f4:25:07:98:c7:0b:98:06:0e:39:07:
ad:02:61:97:6d:0e:5d:e2:5c:14:b8:a6:e1:37:b3:
fe:b8:84:4b:a1:bb:4b:e4:c7:f5:71:ad:29:5e:61:
dc:dc:7e:fa:fa:10:46:97:e8:0d:86:c8:61:2b:99:
13:a5:d3:c3:23:35:a9:61:61:f6:46:96:03:58:bd:
ed:9d:21:e4:1a:e9:39:0d:83:86:f4:2d:ae:6b:27:
af:cf:03:db:53:48:7a:a6:bb:db:2f:db:63:bf:70:
e7:2f:cc:65:a0:88:81:cc:ce:e0:24:95:65:2d:2a:
a4:b2:c9:84:f5:a3:52:59:73:bc:bf:62:32:20:fd:
8a:69:d2:f6:3e:9f:bd:65:e1:bf:08:91:64:4b:52:
d3:d5:01:78:6e:bf:ab:46:66:15:6f:14:78:8e:fd:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:AA:61:C9:81:EA:42:9E:19:76:AE:41:A1:4B:07:19:75:27:BD
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/Dm-qYcmB6kKeGXauQaFLBxl1J70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5c:02:b3:66:31:af:ae:b6:ec:7a:a2:40:c5:70:7d:46:22:
0c:a1:d6:a2:bd:e7:c6:7a:e2:6f:7c:f1:4c:03:76:1a:5d:31:
f9:42:d3:e7:24:70:de:ec:fe:1e:1c:58:30:c4:cb:94:e3:13:
ff:9e:6f:63:b0:f2:57:5d:25:10:c6:a4:ff:eb:21:b4:fb:0b:
58:2a:57:02:18:c7:e0:5a:8b:3d:7f:9d:5d:8c:52:71:23:4e:
b4:3d:da:1b:cf:fe:0e:06:eb:32:56:ed:cc:9a:68:f2:d7:32:
9e:3b:6a:12:82:ab:3e:36:78:4a:9a:41:be:f9:2a:d5:61:8f:
38:cb:7f:db:39:19:95:07:31:2b:76:f4:3a:b8:92:3f:1f:5d:
8d:a7:b0:68:85:74:d3:5c:66:7f:15:05:ae:c5:23:5f:7b:66:
19:06:ac:df:10:d8:2f:d3:ec:a6:2b:83:e3:fb:6d:c8:c0:a7:
b2:7b:fb:46:a7:6c:70:a6:4a:3a:cb:39:0f:79:39:12:53:ea:
98:8e:f9:f9:6b:77:e4:78:72:a8:ca:4b:62:01:f6:37:d6:0f:
f9:9a:67:d0:0f:4c:a6:50:be:52:75:84:fc:dc:eb:0e:ec:e0:
f1:da:69:b4:6f:4d:40:34:52:3b:46:f7:1d:c8:d9:b4:95:41:
39:74:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:21 2024 by rpki-client on console-fra.rpki-client.org