Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/JTlA8S7TswLFQnpz_XGud-NAg3o.roa
File: JTlA8S7TswLFQnpz_XGud-NAg3o.roa (raw, json)
Hash identifier: UMaPE28XZ9DbNUtQs5XUADZffve51kEhZsH8VBFioto=
Subject key identifier: 25:39:40:F1:2E:D3:B3:02:C5:42:7A:73:FD:71:AE:77:E3:40:83:7A
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 095791BA
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/JTlA8S7TswLFQnpz_XGud-NAg3o.roa
Signing time: Sat 01 Jan 2022 16:03:18 +0000
ROA not before: Sat 01 Jan 2022 16:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209009
IP address blocks: 152.89.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156733882 (0x95791ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 16:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=253940f12ed3b302c5427a73fd71ae77e340837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:d2:9b:cf:f8:10:3d:2e:d4:e9:4c:32:d9:
4b:16:9b:13:81:33:70:91:34:56:31:b2:6c:7f:b7:
0d:5b:29:ec:68:57:94:3e:f4:19:f9:55:cc:ee:3e:
fd:bf:8a:be:a4:66:24:4a:9f:05:ae:fe:a9:fc:9d:
27:e2:b4:a7:9d:27:b1:5c:0f:52:c1:d5:76:0e:19:
be:64:9a:af:7e:44:69:05:12:22:7a:8f:3a:15:2d:
42:0c:b1:f7:80:54:b5:c5:e2:65:78:b5:fa:b7:83:
5f:2d:44:56:7a:ca:84:c8:56:f6:cc:93:19:47:7d:
be:15:ad:27:e5:6a:e7:ce:a4:b2:5d:2f:c1:27:38:
fc:93:bd:47:36:2e:22:8e:84:7c:e8:20:e0:45:26:
a0:27:f8:ea:a6:1a:d1:1b:fe:fa:18:be:d9:03:ad:
54:2e:c5:9c:43:42:04:80:35:d0:c3:c5:6a:82:20:
91:d8:9f:8a:a2:f2:70:fa:5e:f2:0c:bd:bc:82:ef:
c2:71:bb:d8:b2:6f:28:39:74:e0:f0:45:05:d4:2d:
53:da:31:0f:5d:be:7c:88:4d:7e:a8:13:66:60:ab:
5d:cb:db:ae:3c:4f:65:1a:88:af:53:e3:d6:a8:c6:
86:c0:9f:1b:f2:04:31:2a:de:d2:53:24:ec:2a:9e:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:39:40:F1:2E:D3:B3:02:C5:42:7A:73:FD:71:AE:77:E3:40:83:7A
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/JTlA8S7TswLFQnpz_XGud-NAg3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:52:bc:f2:7c:66:e5:18:3a:60:ca:64:47:f2:61:f9:89:6b:
b9:08:e1:d0:87:bd:cf:a0:f5:e3:cd:cd:b4:f8:c6:4b:a7:da:
22:87:51:06:27:e0:ef:9b:c3:f9:72:6e:d1:4e:7d:6e:fc:ce:
67:96:42:d9:bd:ed:f5:99:9a:63:30:b9:77:2c:ec:96:4c:6f:
4e:8e:46:c5:06:73:a9:d9:06:ab:c7:85:5d:9a:0c:a6:7c:c5:
e3:cb:04:25:73:9a:68:96:aa:06:26:a8:8f:ae:f1:0c:e7:03:
bd:be:b1:ae:f8:37:d6:41:c1:27:94:93:7f:9a:74:a6:89:ce:
e3:49:39:57:d4:59:85:08:19:f6:24:50:54:10:47:82:20:20:
fd:c4:7c:b7:01:cf:f0:ca:95:69:20:af:3a:bf:74:23:84:ca:
b5:a4:23:e7:58:b7:54:bf:d2:ee:71:0c:ab:41:cb:a0:23:43:
1e:f5:05:3b:58:31:35:f9:ff:ac:b9:82:bb:da:38:8e:de:d9:
17:74:5e:89:53:0b:4b:66:09:3a:0c:03:d2:37:1e:97:fa:8e:
aa:cf:ee:2e:b0:9e:f4:23:94:c1:a8:01:5f:bf:13:1c:ed:6f:
d5:cc:3a:48:0b:10:83:da:1c:1a:0a:00:e5:c7:08:2f:d2:3b:
04:8b:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:19 2024 by rpki-client on console-ams.rpki-client.org