Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/DX-haWN3oL2E1dcXrbP0uxMICk0.roa
File: DX-haWN3oL2E1dcXrbP0uxMICk0.roa (raw, json)
Hash identifier: w8VeW8GeSjawdUdsSwzX6mGPDR3PStajA3HmHMp8bhc=
Subject key identifier: 0D:7F:A1:69:63:77:A0:BD:84:D5:D7:17:AD:B3:F4:BB:13:08:0A:4D
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 08CE7D62
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/DX-haWN3oL2E1dcXrbP0uxMICk0.roa
Signing time: Sat 01 Jan 2022 08:55:24 +0000
ROA not before: Sat 01 Jan 2022 08:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209522
IP address blocks: 152.89.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147750242 (0x8ce7d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Jan 1 08:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d7fa1696377a0bd84d5d717adb3f4bb13080a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:f8:f8:24:92:93:10:ca:25:a3:1b:7a:32:
7b:53:1d:da:35:59:d2:77:30:01:45:13:7a:9e:cc:
97:a5:1b:17:bb:4f:aa:b9:35:fe:91:93:b2:5d:e1:
53:58:c7:ce:39:f8:1d:d9:56:68:7c:5e:da:3a:1f:
c3:bf:9f:3f:ca:67:0b:14:b1:ab:00:a6:5d:71:d4:
fb:c5:0d:43:92:d1:75:a4:ee:eb:11:0e:7d:e8:c6:
0c:fb:2f:99:61:f5:1c:34:be:d0:07:57:74:0a:a8:
9b:d0:2b:61:28:52:64:1b:db:50:9b:4b:75:fd:61:
d4:68:1f:f6:9f:b6:c1:cc:03:7b:ea:cf:92:60:5b:
f5:76:99:67:f8:8d:e4:1a:c2:47:30:71:bd:e3:3d:
fc:b7:d4:f6:ad:c1:52:9f:6a:26:99:f4:68:24:97:
51:10:e0:ac:6b:a2:e1:0e:91:86:5b:7f:c3:1a:44:
73:3b:72:c1:ad:35:67:41:49:58:3b:43:a5:cc:a7:
27:11:2e:52:be:4a:d8:fb:ce:ed:5d:c5:f6:68:4f:
5e:e8:43:90:a6:23:16:de:f0:78:a5:ef:8c:a9:ae:
8f:a3:fb:0b:6c:63:b7:0f:df:b4:a4:18:31:ad:80:
7b:b1:38:6e:8c:2b:50:e3:04:6d:fd:8d:8d:6c:b0:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:A1:69:63:77:A0:BD:84:D5:D7:17:AD:B3:F4:BB:13:08:0A:4D
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/DX-haWN3oL2E1dcXrbP0uxMICk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.52.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ed:78:5e:d4:51:d3:92:d9:8b:04:29:05:c5:c1:dd:64:ba:
91:e9:53:ae:c1:d9:46:fe:15:41:10:66:34:6b:ae:46:ca:db:
78:9c:23:0d:f7:ab:75:81:b6:ef:3b:04:b3:8d:c9:5a:7f:5c:
36:5c:2a:dc:d7:5d:8a:83:ec:5a:25:76:a3:2d:2a:47:88:67:
a0:d5:d4:2d:e1:68:7e:b1:e0:94:3e:8b:7d:e9:a7:fc:ee:4d:
4b:82:82:8b:d0:9e:16:f9:d5:59:65:fe:ff:c4:a3:f5:a5:d0:
7c:18:9b:c7:2a:eb:33:bd:75:42:6f:1b:ae:7c:6a:6f:59:31:
b4:17:68:d6:c2:b6:5d:51:4a:99:9d:cb:ae:45:f5:6c:e5:66:
fb:63:16:8c:87:df:bc:37:ef:66:56:1d:5f:32:89:fb:9d:f9:
97:c4:bc:78:46:a5:88:5f:81:2e:60:c6:9f:bb:d0:5a:1a:89:
c0:6d:e9:93:bb:08:bd:a6:4f:a8:d9:c1:5b:b7:44:33:19:71:
68:43:d8:c6:05:59:04:14:60:70:3b:82:76:5e:0b:97:1d:14:
3c:74:00:0d:12:a5:d8:b4:38:29:f4:19:21:3f:c4:5b:63:a7:
59:07:8e:37:e4:87:b0:4b:c1:93:36:86:a1:66:b9:74:7d:36:
99:fc:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:29 2024 by rpki-client on console-ams.rpki-client.org