Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/0ggvXn_xbh0tfm06CyDfgh6PTQc.roa
File: 0ggvXn_xbh0tfm06CyDfgh6PTQc.roa (raw, json)
Hash identifier: GOU+6Ac47XPLGCCNKbfYUqGBd/JGzReWkIqbSdtwUqE=
Subject key identifier: D2:08:2F:5E:7F:F1:6E:1D:2D:7E:6D:3A:0B:20:DF:82:1E:8F:4D:07
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 03705D53
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/0ggvXn_xbh0tfm06CyDfgh6PTQc.roa
Signing time: Mon 14 Feb 2022 09:29:41 +0000
ROA not before: Mon 14 Feb 2022 09:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 152.89.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57695571 (0x3705d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Feb 14 09:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2082f5e7ff16e1d2d7e6d3a0b20df821e8f4d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:29:7c:f8:aa:b8:ab:51:ce:93:25:59:69:
95:ef:f9:76:9a:55:04:06:48:da:b9:28:5b:26:60:
5b:86:9c:8b:e5:19:46:49:d0:a4:6d:a1:38:e9:12:
17:05:30:06:25:93:e6:d4:95:5f:8c:85:39:6e:37:
a7:98:2d:7d:b4:a2:97:ed:a3:38:8d:fe:02:c3:73:
c7:80:17:ab:23:21:c2:87:75:29:bc:34:51:68:bb:
b4:18:af:0c:7d:e4:8e:5e:4d:6f:c9:4a:3b:6a:34:
e5:b7:54:1a:03:2b:7a:ed:56:6d:62:40:dc:10:b7:
76:ed:da:af:85:8d:d1:a0:bb:c7:d2:90:0a:be:7d:
36:a4:f8:9a:d0:0f:b9:43:fe:fb:e9:00:37:22:c4:
b8:76:2d:a1:f6:96:55:65:79:46:63:2f:9c:b6:8b:
3b:08:de:28:fd:aa:40:ec:90:fd:5e:ae:7d:29:50:
1b:b5:fa:9e:15:32:af:bb:1e:f9:c8:55:45:0e:d5:
a5:80:de:6d:f0:3e:78:ac:b3:f7:46:33:53:c6:6f:
b0:ce:a8:2b:2e:d3:99:f2:aa:4f:75:d1:86:85:db:
b1:21:f4:ea:f4:d1:c5:59:f5:1c:18:d9:3a:52:f4:
14:33:8f:24:8c:2c:ad:a3:ec:6b:98:9b:d5:50:ca:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:2F:5E:7F:F1:6E:1D:2D:7E:6D:3A:0B:20:DF:82:1E:8F:4D:07
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/0ggvXn_xbh0tfm06CyDfgh6PTQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.195.0/24
Signature Algorithm: sha256WithRSAEncryption
27:89:cf:ea:47:cc:e6:21:b2:32:ef:e3:c2:a8:a5:f6:67:9f:
80:69:67:b2:91:97:89:8c:65:a7:88:65:d7:36:3e:cc:6c:c2:
cc:77:39:f3:9d:dc:36:5a:d3:83:a0:38:47:69:c8:9b:9f:56:
a2:bb:48:5a:3f:8a:dd:61:8d:0e:1a:56:86:20:b2:2a:87:4f:
c8:66:a7:86:ac:8a:23:8a:04:9f:26:a3:07:b7:d8:7e:76:42:
5f:20:5a:83:1a:dd:85:43:4d:e7:36:04:e2:e9:08:cc:67:f8:
3c:62:64:f4:57:25:64:2d:e8:ce:c7:6d:52:5a:8a:4f:f3:3b:
8f:38:c0:ef:2f:8a:25:70:7a:bd:fd:bc:bd:75:b6:37:e2:04:
1a:94:a3:a5:11:7b:0b:25:27:ff:ad:56:47:49:40:06:8b:db:
d0:81:0e:d6:9c:e8:60:a1:26:21:36:e3:08:fd:a8:fb:b5:84:
6c:22:b6:97:5b:d2:a5:44:a3:cf:9a:75:30:ba:0f:ae:7b:9a:
42:ee:c6:ca:86:65:13:ad:2d:ea:e2:29:15:37:b6:b5:68:e9:
6b:c5:19:11:01:bb:34:2c:cb:6d:36:bd:e8:7b:3c:c0:3b:fb:
36:a4:48:ab:a8:1f:1d:08:94:2a:e8:68:82:b4:a3:5d:c9:3f:
e6:fa:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:49 2023 by rpki-client on console-fra.rpki-client.org