Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/dqSh7-aXIXafRRj22HKFdp5dUyE.roa
File: dqSh7-aXIXafRRj22HKFdp5dUyE.roa (raw, json)
Hash identifier: CV1+PYlZ0YfFuw8TSuKokQ1NwV8CTJjv6fGUfDHTDQc=
Subject key identifier: 76:A4:A1:EF:E6:97:21:76:9F:45:18:F6:D8:72:85:76:9E:5D:53:21
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 996744
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/dqSh7-aXIXafRRj22HKFdp5dUyE.roa
Signing time: Sat 01 Jan 2022 02:51:42 +0000
ROA not before: Sat 01 Jan 2022 02:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48367
IP address blocks: 152.89.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10053444 (0x996744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Jan 1 02:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76a4a1efe69721769f4518f6d87285769e5d5321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:12:7e:e2:89:12:ad:78:ce:46:b0:4d:71:
ea:4f:08:ed:d7:e3:f8:e0:5e:87:f8:cd:72:f1:03:
13:f6:0c:b8:3d:23:8b:7b:f8:4a:48:87:a6:27:76:
de:af:f4:cf:8a:c7:ca:60:eb:b4:cd:a2:61:24:ef:
44:c8:db:6b:8d:3b:d5:42:d8:71:12:9c:0a:5d:8f:
4a:fa:34:fb:42:eb:d3:9b:4a:6c:af:8e:e4:62:c5:
f2:ac:e3:9d:8c:40:3d:88:b8:be:c4:6f:e4:ff:18:
25:77:84:b0:03:a8:2e:43:35:6f:0f:fe:5d:6b:dd:
2d:b6:cd:19:80:e3:a4:e0:10:3f:fb:18:6d:92:a6:
1c:49:85:13:63:0a:2f:05:d6:98:e9:34:ef:7d:43:
1b:c1:c1:3b:20:6e:78:3d:75:26:37:88:50:e8:ae:
6d:33:bb:e0:b0:1b:96:14:f2:f2:d0:65:be:62:fb:
ec:5e:2b:dd:58:06:46:07:b8:49:5e:cf:33:15:cb:
12:b4:a2:0c:cc:6e:26:8e:86:94:ce:c1:b0:90:cd:
d7:b3:e4:4a:d5:3f:61:6c:6f:24:40:6f:8c:54:cf:
31:7d:21:06:e8:c4:a9:0b:e9:89:b9:70:a7:42:3d:
10:a4:8d:9c:ad:07:83:5f:80:f3:73:8a:82:e9:a5:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:A1:EF:E6:97:21:76:9F:45:18:F6:D8:72:85:76:9E:5D:53:21
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/dqSh7-aXIXafRRj22HKFdp5dUyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.220.0/22
Signature Algorithm: sha256WithRSAEncryption
09:25:4b:37:c7:7a:0b:50:7a:87:c3:34:e6:5f:dc:eb:b9:d4:
e7:58:54:a2:2c:44:6f:c2:23:1a:7c:b8:e8:fd:0c:27:54:43:
7f:d1:84:ec:77:8f:a4:89:0e:0e:af:1d:02:97:1e:fd:8c:c0:
9b:5b:3c:75:2b:fd:0e:17:3a:b9:17:be:11:0e:08:bb:04:a0:
d1:56:48:d7:41:95:33:9b:c4:30:8b:3d:3b:5e:7a:08:a0:0d:
55:cf:01:8d:64:8d:cb:2f:dd:c8:e1:77:7c:45:7a:60:a2:1d:
c1:11:34:8d:c9:ec:a0:28:e0:cc:49:0b:68:99:08:e3:5e:0f:
50:c2:7b:05:5f:ae:bb:c2:58:74:20:4d:1c:70:46:19:83:90:
ec:bf:b6:fa:e9:5a:d3:64:a3:29:6f:6c:05:f8:54:59:47:d8:
00:30:c8:73:2c:bf:83:f4:df:cd:6a:c8:83:d7:b1:31:8b:5a:
69:c1:db:c8:9c:18:e6:0d:24:ce:3f:6f:a4:c0:84:ea:57:6d:
95:96:a0:b3:d2:48:6b:81:7f:72:b9:e9:a6:8a:16:9e:cf:2f:
0a:c8:e3:94:0e:52:08:f0:9a:63:fa:0d:be:29:92:f6:ff:4e:
12:53:d6:ca:7b:b1:65:42:e1:82:1c:c8:a5:25:74:4b:60:2e:
c1:80:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:39 2023 by rpki-client on console-fra.rpki-client.org