Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/fWQ8yPZREBXaT5jAUZR-627dgXA.roa
File: fWQ8yPZREBXaT5jAUZR-627dgXA.roa (raw, json)
Hash identifier: JggDus5FHK+Hp5edRLJBKV/0ID5We/c1j/OY83AorXo=
Subject key identifier: 7D:64:3C:C8:F6:51:10:15:DA:4F:98:C0:51:94:7E:EB:6E:DD:81:70
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0183A8CBD14FF77E9619D24BB7C83EB05BFD
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/fWQ8yPZREBXaT5jAUZR-627dgXA.roa
Signing time: Wed 05 Oct 2022 15:37:53 +0000
ROA not before: Wed 05 Oct 2022 15:37:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 152.89.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:cb:d1:4f:f7:7e:96:19:d2:4b:b7:c8:3e:b0:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Oct 5 15:37:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d643cc8f6511015da4f98c051947eeb6edd8170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:7d:3c:95:03:5c:81:1b:e6:21:90:3a:0b:
75:13:a0:3d:32:23:5e:27:d7:2d:59:ed:7e:27:f3:
b7:33:d4:5c:31:dd:b9:4e:9b:6a:0a:29:8d:18:50:
e3:f1:34:f2:05:41:58:e0:4e:fd:9e:a4:3c:c8:8d:
69:29:8b:25:df:23:44:60:48:8b:a5:7f:9a:c1:48:
f4:2f:74:8f:da:4f:7b:1d:82:fd:90:bd:f2:dd:4a:
21:4b:42:00:42:36:32:20:9f:8f:01:08:8d:7f:d5:
3b:f3:91:00:27:f5:d3:11:39:38:4d:8d:e2:3e:eb:
6f:70:eb:f9:1d:13:05:54:5b:a9:68:24:62:61:87:
4e:99:d3:58:9e:a1:e4:18:6d:e5:7e:46:10:98:65:
58:4d:be:9b:bd:a6:3a:a0:43:4d:c5:35:cc:13:e5:
91:21:4b:d1:a8:bd:91:31:65:b9:e9:06:58:66:2d:
c5:c9:e1:fe:96:35:fd:1b:87:9b:65:4c:56:75:f0:
0a:41:84:77:6f:9e:f8:f2:85:71:12:14:06:8b:c7:
6d:d5:2b:25:f3:53:d0:99:78:91:b4:5a:02:af:64:
c7:26:73:4c:b6:2c:8b:7d:1e:dc:04:17:71:a9:8f:
0a:58:10:1c:07:70:52:8d:c6:d4:75:ef:88:9f:43:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:3C:C8:F6:51:10:15:DA:4F:98:C0:51:94:7E:EB:6E:DD:81:70
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/fWQ8yPZREBXaT5jAUZR-627dgXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4b:6c:e9:95:fd:9e:7a:61:47:b6:ed:67:10:88:e1:63:d4:
f4:0c:84:d8:71:06:18:b9:8a:bc:c4:6e:9a:80:2a:03:fa:1c:
ad:5c:ca:23:14:92:e5:cc:80:24:8b:9a:57:67:f1:30:43:08:
7a:a3:50:92:33:3a:bd:04:0d:24:49:9c:52:63:8e:80:bd:36:
59:42:5a:76:f9:de:d7:77:76:2c:a7:74:f0:86:05:c9:ef:70:
dd:33:0c:63:29:91:13:be:18:40:07:bd:54:6e:75:fc:68:b4:
b8:b1:6f:75:cd:54:e5:d1:fc:9b:64:11:e6:19:72:43:8e:f9:
77:0a:fd:b1:3b:3a:9e:c7:f4:82:f5:d1:e6:0f:48:33:dc:2f:
4b:8f:b3:65:f5:a7:0f:e4:6a:da:30:2e:a6:8b:1e:22:87:3e:
c7:25:84:d8:57:56:11:9b:87:e7:04:06:b9:74:02:06:de:71:
05:64:53:76:1e:f7:c5:ef:c0:fd:de:e7:d8:3e:19:41:e9:f8:
c4:22:91:49:f9:31:6b:55:2e:07:3f:0a:aa:2e:54:8c:a4:3e:
93:fd:d1:29:0c:12:23:d7:1f:56:34:b5:92:00:a9:73:3a:1e:
f9:df:8b:e6:cb:5e:64:16:74:c8:36:5f:08:06:48:f2:bf:01:
68:52:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:28 2023 by rpki-client on console-ams.rpki-client.org