Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/1Dn6xqxLqpcB2qMFENN2AwjnHJM.roa
File: 1Dn6xqxLqpcB2qMFENN2AwjnHJM.roa (raw, json)
Hash identifier: 7oH4ia6qZdLSYX3I7Dz8PSHAF12Hkl74Qtw9frmQ4j0=
Subject key identifier: D4:39:FA:C6:AC:4B:AA:97:01:DA:A3:05:10:D3:76:03:08:E7:1C:93
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 0582E168
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/1Dn6xqxLqpcB2qMFENN2AwjnHJM.roa
Signing time: Sat 01 Jan 2022 11:03:38 +0000
ROA not before: Sat 01 Jan 2022 11:03:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208785
IP address blocks: 152.89.119.0/24 maxlen: 32
152.89.116.0/24 maxlen: 24
152.89.118.0/24 maxlen: 32
152.89.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92463464 (0x582e168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jan 1 11:03:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d439fac6ac4baa9701daa30510d3760308e71c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:a9:6a:1b:b6:66:55:a2:b3:64:4a:d2:ff:
6c:8e:ae:74:6c:5f:da:17:80:9f:bd:6a:e8:22:fb:
4e:85:f9:66:89:31:2a:e1:bb:c7:1c:13:ed:f0:85:
69:e5:26:1c:2c:61:d1:1b:a5:26:a7:72:7c:eb:03:
54:b6:f1:92:41:05:3c:55:e7:c2:a0:6f:d7:65:41:
b4:28:a2:aa:45:e7:c1:31:c4:4c:44:d1:db:36:f9:
52:06:07:f9:d4:85:22:a2:d8:7d:e5:07:aa:51:f4:
3c:e0:66:7b:64:ae:97:4b:1b:8e:03:8f:4b:1f:93:
53:97:8d:05:1e:55:74:22:10:31:41:b2:f2:2f:a9:
d1:6a:12:53:20:08:84:35:80:f2:8d:0b:61:27:02:
dc:4b:42:99:9f:a7:bb:80:81:22:24:f4:ed:fc:ec:
65:88:9a:73:68:2b:a1:f2:eb:33:c3:a9:bb:80:7a:
ec:34:cf:3f:54:30:fc:57:04:97:64:f4:66:5e:ed:
a4:f2:6f:ff:0a:97:7a:2f:ab:37:2b:fe:f5:8c:39:
68:57:ab:70:52:09:3c:d6:e5:74:cb:a0:d3:5a:9a:
9f:5d:af:b5:9e:0c:40:29:ce:ab:91:03:9a:c5:2b:
e7:02:65:a4:7e:17:31:68:7d:6e:bc:91:12:9d:ef:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:FA:C6:AC:4B:AA:97:01:DA:A3:05:10:D3:76:03:08:E7:1C:93
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/1Dn6xqxLqpcB2qMFENN2AwjnHJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.116.0/22
Signature Algorithm: sha256WithRSAEncryption
52:08:d1:b5:4a:f9:d3:29:a9:1e:aa:4c:28:d0:51:e2:2e:d2:
43:79:e9:b2:59:ff:f7:53:af:29:59:c7:51:7e:34:ef:40:45:
e6:6d:ea:e7:2b:09:4b:3d:86:b5:29:37:55:39:a4:c8:a4:ca:
c9:94:8d:74:37:fd:5b:ec:b0:1c:1e:8d:23:9b:0c:2a:6d:64:
00:b0:0f:f4:bb:05:fb:eb:87:1a:5a:aa:88:8e:b6:42:71:f8:
4a:1d:4d:ed:b0:cc:1d:97:dd:33:0c:d0:8d:08:28:6c:be:50:
17:c6:61:7b:e9:b7:69:43:9e:79:3b:0c:3b:2a:1c:bd:e4:de:
52:38:45:9e:e7:28:ad:cc:a1:e5:3a:c2:f3:46:d9:1b:ea:f4:
e4:72:40:00:7a:4b:b1:94:f7:89:42:39:9e:63:09:bb:13:37:
ea:ca:31:94:6a:7a:af:b7:c7:66:4c:91:14:a8:cf:8c:9d:bc:
b0:0e:c5:5e:2f:c9:43:7e:2c:d5:8d:98:b0:23:71:97:39:b0:
a4:f8:40:75:da:79:c2:01:5a:6e:5a:e8:60:d7:ae:e2:df:f8:
a4:0a:64:2e:91:b5:ca:b4:f1:6f:ec:02:a3:80:ae:e5:52:63:
2a:62:80:41:ab:11:55:fe:dd:04:99:be:9e:f8:5c:01:7d:83:
58:4c:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:49 2025 by rpki-client