Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T6xTmwcYIsdqITa2PfZ1oxJ7M6M.roa
File: T6xTmwcYIsdqITa2PfZ1oxJ7M6M.roa (raw, json)
Hash identifier: gQ5PnGHDawoTMGUrvCvh6QvuS4vBHsF3sIr66vvjkrA=
Subject key identifier: 4F:AC:53:9B:07:18:22:C7:6A:21:36:B6:3D:F6:75:A3:12:7B:33:A3
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0393B789
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T6xTmwcYIsdqITa2PfZ1oxJ7M6M.roa
Signing time: Sat 01 Jan 2022 06:06:46 +0000
ROA not before: Sat 01 Jan 2022 06:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204958
IP address blocks: 152.89.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60012425 (0x393b789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 06:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fac539b071822c76a2136b63df675a3127b33a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:f5:fc:2c:7e:01:39:bc:7c:73:de:70:c5:
ee:12:62:34:58:fc:48:af:db:fa:86:45:9c:81:d7:
8d:21:15:99:39:dc:07:18:75:0a:2f:43:d0:c6:1a:
2a:6a:d5:63:d4:33:8d:49:10:44:d0:11:11:46:01:
c3:26:7e:1b:c6:0c:4a:c7:8b:ce:b6:17:7b:ba:95:
ec:12:5a:df:0b:1d:ca:4a:37:de:b9:08:09:2d:9c:
92:31:92:10:f5:76:dd:96:5d:18:6e:ed:2f:c2:98:
d8:ba:fa:68:88:45:86:e3:fe:e8:af:44:7a:fc:65:
18:86:77:c5:56:d8:17:94:62:a0:f3:6f:ab:2c:bd:
d1:52:80:e8:77:ba:e8:3a:ed:a3:d7:44:a1:b3:eb:
51:f9:13:28:81:05:6e:77:cc:02:27:e3:3a:26:ad:
1e:3f:21:7a:38:d0:c8:91:d6:98:f0:12:ed:c1:72:
29:db:c4:99:fa:ea:79:64:3a:1d:df:95:1d:de:c7:
9f:18:f9:2a:78:26:b2:3b:21:71:cc:4c:23:de:2e:
75:29:ac:61:10:ca:96:29:c7:a5:37:8f:fa:70:87:
f6:7a:54:7f:89:99:36:bf:1b:7c:da:75:cd:d0:5e:
46:bd:d0:b0:98:84:92:12:c6:35:34:01:0a:82:f2:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:53:9B:07:18:22:C7:6A:21:36:B6:3D:F6:75:A3:12:7B:33:A3
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/T6xTmwcYIsdqITa2PfZ1oxJ7M6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.171.0/24
Signature Algorithm: sha256WithRSAEncryption
34:74:48:c8:61:eb:83:de:53:e5:5a:1d:57:7c:e1:53:54:02:
0f:c2:ff:07:c7:cc:32:04:3f:cb:ce:f1:49:ca:5e:4a:43:a7:
a2:56:35:0c:3f:e1:29:fb:33:4d:18:16:1d:22:4e:22:21:97:
cc:83:37:4a:a3:00:db:bc:8c:74:7e:9b:7b:43:c0:e5:5e:10:
27:f1:78:e3:77:42:15:06:d9:31:0c:f3:44:5b:bd:c1:38:73:
19:60:e8:e1:78:b4:25:c0:7b:69:b4:d6:1b:6b:4a:2a:3a:ab:
65:1b:ad:c0:a1:e2:56:dd:5c:45:d9:80:dc:ed:65:d1:ff:ff:
b0:d7:d5:3c:85:57:6b:0d:a6:a8:11:16:4e:0a:72:29:9a:07:
bf:45:d2:9e:13:c5:55:6b:69:60:e7:20:c0:bc:39:f9:14:bf:
90:53:df:c7:25:c0:0b:6f:82:72:67:d1:c8:89:62:9d:50:e4:
45:6a:6f:f4:f6:a9:fc:d2:b5:49:d2:8b:df:45:09:77:8c:8e:
1e:3a:6f:94:e4:c6:77:01:d1:40:a6:14:03:9e:1c:f2:fc:83:
c8:0a:89:02:d1:e4:da:ca:a3:2b:bb:79:86:9c:d6:ee:23:32:
81:da:17:0f:fa:3c:15:c5:46:f6:b7:61:26:5e:3a:40:49:7d:
32:95:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org