Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/fkOVmakY0eu3v8OT_n1LcOWIWUU.roa
File: fkOVmakY0eu3v8OT_n1LcOWIWUU.roa (raw, json)
Hash identifier: ACs6gwYIR5zBKCBhhpUkYWvVb5JEuzVPOkyANdmcXNg=
Subject key identifier: 7E:43:95:99:A9:18:D1:EB:B7:BF:C3:93:FE:7D:4B:70:E5:88:59:45
Certificate issuer: /CN=91a1173a70e41f4593547669ada22f0d7f68f354
Certificate serial: 098D6251
Authority key identifier: 91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/fkOVmakY0eu3v8OT_n1LcOWIWUU.roa
Signing time: Sat 01 Jan 2022 14:06:15 +0000
ROA not before: Sat 01 Jan 2022 14:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209509
IP address blocks: 152.89.176.0/22 maxlen: 24
152.89.176.0/24 maxlen: 24
152.89.177.0/24 maxlen: 24
152.89.179.0/24 maxlen: 24
152.89.178.0/24 maxlen: 24
2a09:3345::/32 maxlen: 32
2a09:3341::/32 maxlen: 32
2a09:3344::/32 maxlen: 32
2a09:3342::/32 maxlen: 32
2a09:3343::/32 maxlen: 32
2a09:3347::/32 maxlen: 32
2a09:3340::/29 maxlen: 32
2a09:3340::/32 maxlen: 32
2a09:3346::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160260689 (0x98d6251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a1173a70e41f4593547669ada22f0d7f68f354
Validity
Not Before: Jan 1 14:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e439599a918d1ebb7bfc393fe7d4b70e5885945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:7e:a5:7d:e2:4d:eb:6b:9e:1a:22:f7:2d:
5a:10:15:a0:9c:08:62:3f:17:16:89:79:5c:7f:26:
f8:13:39:4f:c9:76:f6:1e:9c:47:72:3a:0f:a1:a9:
8f:c7:be:2d:54:ed:4b:29:d3:c5:f8:bb:8e:62:b9:
88:d4:f7:e7:d0:77:ee:c8:7a:f6:6f:79:b5:50:c6:
bb:dd:d4:a6:14:9e:32:19:e4:11:1e:d9:a5:ba:c6:
0d:fb:4d:c5:83:66:3b:e9:82:69:97:29:1f:9e:68:
11:18:8f:a8:12:38:bc:98:52:64:21:ad:7e:9b:91:
be:32:32:f4:23:e8:7b:f1:da:ef:d5:d9:2b:dd:38:
87:48:92:83:80:19:44:3a:57:24:d7:8e:63:cb:ee:
b2:d6:cb:86:29:b4:76:b5:ff:a3:99:fa:ad:6f:18:
c3:1d:1b:6b:64:cd:f9:63:ab:a4:13:8d:86:b3:d6:
51:95:e2:c4:f9:4d:e5:d9:48:23:c8:a9:8d:3c:23:
27:77:ad:db:57:6e:b8:50:d4:cd:71:74:37:ab:2f:
a1:3d:16:ac:8d:b1:cc:aa:d9:ee:bd:a2:07:32:ff:
ec:1d:50:d4:6e:88:1a:05:74:ea:94:5b:07:8c:59:
89:47:8f:a6:40:3c:be:ce:db:53:e9:69:cc:9a:87:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:95:99:A9:18:D1:EB:B7:BF:C3:93:FE:7D:4B:70:E5:88:59:45
X509v3 Authority Key Identifier:
keyid:91:A1:17:3A:70:E4:1F:45:93:54:76:69:AD:A2:2F:0D:7F:68:F3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaEXOnDkH0WTVHZpraIvDX9o81Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/fkOVmakY0eu3v8OT_n1LcOWIWUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/34e53f-6759-4cf5-9801-5d630e203fd5/1/kaEXOnDkH0WTVHZpraIvDX9o81Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.176.0/22
IPv6:
2a09:3340::/29
Signature Algorithm: sha256WithRSAEncryption
11:ff:b6:9b:e6:e2:cb:d8:2f:f6:c6:b7:ad:52:8f:98:d1:b2:
30:5a:5f:cb:99:8b:b0:cc:76:ff:15:e0:80:71:cf:90:b6:a3:
53:a0:45:ef:84:72:e5:5f:3a:59:30:aa:c4:9e:fa:61:df:ac:
b6:cf:a9:cf:72:b5:d0:5b:06:47:ad:26:cd:d1:a1:12:77:ff:
cf:1d:9a:56:82:b4:7f:0c:1a:26:f0:45:52:d4:6b:12:a5:30:
f4:56:50:bc:e5:e6:d1:28:2b:b4:ee:ba:31:0c:bc:e2:2c:95:
57:e4:a0:0f:a5:33:f6:cf:24:4c:22:42:89:93:a4:37:18:c3:
d1:fe:c2:bd:5c:00:b3:48:76:2f:f2:d9:1f:80:fe:51:e2:01:
8b:69:0c:d1:ee:0b:15:49:de:50:19:8c:66:a1:b2:1f:50:99:
92:af:19:f5:e2:11:51:cd:4b:5c:a7:71:11:c8:f2:c9:2e:25:
6e:b7:b7:f0:0d:9d:58:a1:3a:79:5d:1d:b4:d4:79:00:f7:8f:
22:7e:88:b5:79:47:e2:3b:27:bc:04:a0:34:96:61:1d:b3:39:
e1:7a:15:c9:d8:7a:75:16:25:2e:6b:72:6b:28:3c:35:bc:b4:
21:0d:71:b6:b0:12:74:d6:c0:73:f7:94:ab:cd:dd:17:16:c9:
b3:4f:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:06 2025 by rpki-client