Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/IDJa2_4QHIvfqsLd4VmAHuO3_fE.roa
File: IDJa2_4QHIvfqsLd4VmAHuO3_fE.roa (raw, json)
Hash identifier: NLRAKzrD/7ptZawXAli+HZrbXY5NR/k6wli+14hrVLI=
Subject key identifier: 20:32:5A:DB:FE:10:1C:8B:DF:AA:C2:DD:E1:59:80:1E:E3:B7:FD:F1
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 072F30B4
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/IDJa2_4QHIvfqsLd4VmAHuO3_fE.roa
Signing time: Mon 23 May 2022 13:27:29 +0000
ROA not before: Mon 23 May 2022 13:27:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209358
IP address blocks: 152.89.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120533172 (0x72f30b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: May 23 13:27:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20325adbfe101c8bdfaac2dde159801ee3b7fdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:38:42:4c:17:1f:e6:31:61:40:b8:c3:f4:
29:90:30:45:a8:69:5f:79:71:2b:30:82:b1:2c:99:
20:d3:9b:1a:37:20:b5:d6:59:49:96:d3:26:ff:ca:
8f:63:47:bc:88:f4:51:af:ea:59:dc:df:15:bd:ee:
d5:8e:e0:ed:d8:72:c4:70:e0:c4:09:78:c0:73:47:
16:3b:ec:0b:87:e2:44:9c:0a:dd:67:d9:3a:92:57:
9e:b0:6d:ff:16:54:01:eb:cc:5c:fa:ae:1e:fa:32:
23:0d:2d:c0:6f:c7:6c:d8:db:0c:d3:9f:45:ae:07:
da:a0:9c:0f:33:8c:7e:50:ec:23:f3:f1:b9:e8:40:
87:05:91:49:48:90:6c:0f:56:de:a7:95:a7:42:c6:
00:2a:b6:eb:4e:5b:e7:ae:3b:3c:e6:fc:77:10:00:
89:19:3e:7d:41:29:61:68:91:7f:f8:4e:e1:92:5a:
d1:76:08:c0:36:a6:8f:a5:54:cf:a9:d5:e9:d0:d4:
d8:41:42:4d:4f:29:70:be:07:8d:41:87:4e:f3:a7:
fe:a6:37:09:ab:81:b9:c5:0b:b7:03:40:94:df:04:
de:d3:c3:e9:04:29:ab:ae:bd:9c:24:af:8f:36:15:
ae:52:1d:10:2a:c8:ee:ff:a8:86:ee:c2:5d:09:bc:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:5A:DB:FE:10:1C:8B:DF:AA:C2:DD:E1:59:80:1E:E3:B7:FD:F1
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/IDJa2_4QHIvfqsLd4VmAHuO3_fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.68.0/22
Signature Algorithm: sha256WithRSAEncryption
78:6d:5d:5d:4a:7d:32:af:ee:94:00:d6:92:38:9f:e5:07:dd:
dd:4a:f7:cd:c6:f0:2f:79:27:55:17:41:d1:68:24:dc:9a:27:
07:7d:8e:ac:b4:b6:34:1d:30:63:8b:7b:73:72:82:20:f4:7c:
f6:73:9b:ce:fb:3c:4e:95:18:35:2a:39:19:bc:01:ae:f3:fc:
01:79:d5:c1:43:62:69:5d:5d:3d:f5:f4:c8:0c:a3:fb:80:ec:
07:ab:84:86:f6:5e:d4:10:27:ac:38:8a:a3:71:27:3a:29:77:
d0:a8:9a:26:bc:75:05:28:73:32:11:21:96:a5:78:b4:bb:b6:
e1:f4:71:ea:5f:99:c4:a1:a3:6a:65:99:65:df:e1:c7:97:5b:
6e:ee:6e:9f:af:5a:48:ce:b9:fd:ca:f4:fb:a3:42:8d:6d:5b:
8d:f7:ac:76:c3:4d:e8:1b:07:6f:f6:45:27:a5:88:ed:4e:9d:
73:d6:c9:2a:d9:8b:11:c1:fb:d1:0f:9f:cb:a3:a5:6d:69:cf:
b1:77:92:73:62:3a:20:21:a6:7c:8f:bb:97:6f:96:98:ad:0c:
fb:8b:98:42:e7:83:fc:bf:4c:8f:34:ea:81:0e:96:43:13:7e:
f5:0d:75:a5:4c:a7:37:07:3d:de:da:d3:d9:81:31:3e:7f:73:
7a:46:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:45 2024 by rpki-client on console-fra.rpki-client.org