Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1GEg_giTST1S6_E5Ehonsgg-gLk.roa
File: 1GEg_giTST1S6_E5Ehonsgg-gLk.roa (raw, json)
Hash identifier: np+OWTncnoMa7uWvzQBexB5BfJ6P2URzSF1rTiQo2YE=
Subject key identifier: D4:61:20:FE:08:93:49:3D:52:EB:F1:39:12:1A:27:B2:08:3E:80:B9
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 10903DBA
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1GEg_giTST1S6_E5Ehonsgg-gLk.roa
Signing time: Sat 01 Jan 2022 10:02:13 +0000
ROA not before: Sat 01 Jan 2022 10:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211871
IP address blocks: 89.252.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277888442 (0x10903dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 10:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d46120fe0893493d52ebf139121a27b2083e80b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:f8:cc:ad:65:fd:1d:5c:5d:3d:bb:aa:9b:
68:14:5c:3d:9a:67:75:31:a2:56:18:b3:4b:27:3e:
4e:01:e3:5c:65:27:69:23:cc:18:66:de:15:c5:91:
bf:f8:dc:b7:7a:10:63:5a:fc:f5:8b:cf:9e:59:16:
b6:86:83:68:88:2f:65:be:0f:6b:86:04:da:9e:3c:
f2:cd:d5:1a:5e:03:65:11:1e:e5:c6:0f:64:9b:db:
12:9b:40:7c:f5:57:cf:42:1c:ad:a1:9c:2d:24:ac:
c0:aa:d9:21:a3:fc:c2:65:c0:c9:05:4b:57:d5:18:
f2:7c:fc:13:6e:39:b3:b6:25:00:c5:15:ef:fc:3a:
cc:ee:35:43:7a:a8:df:64:a1:07:91:6a:ff:83:91:
e5:4d:7e:3d:da:39:63:5e:3a:58:20:dd:2b:88:57:
5c:2b:22:ff:e5:4c:d7:5b:1b:de:18:fb:d8:18:28:
27:ab:86:ec:2e:a8:e1:c4:04:32:fa:43:dd:42:54:
84:60:09:b3:69:91:84:59:91:27:b7:b3:1f:a5:e1:
23:a2:91:e7:ca:c4:ef:ee:14:e9:66:6a:11:64:a7:
cd:dd:e1:a7:b6:96:93:de:5b:61:50:e9:68:91:ba:
9a:b3:04:e5:0a:4c:15:86:23:01:f8:58:cc:ed:b2:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:20:FE:08:93:49:3D:52:EB:F1:39:12:1A:27:B2:08:3E:80:B9
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1GEg_giTST1S6_E5Ehonsgg-gLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0b:a3:53:e7:e1:22:db:28:85:c7:f5:2a:81:13:18:e8:f4:
39:77:b1:c7:a6:62:88:79:1e:82:ea:d8:47:7d:19:54:53:80:
ab:36:21:b2:f8:f9:1a:aa:6f:ea:f9:c5:95:d5:7d:de:95:4c:
24:00:a6:25:87:2d:50:e6:c5:53:a8:34:55:68:84:07:72:5a:
fb:86:96:5e:ee:f3:1f:35:af:27:9b:4b:83:12:a6:77:4b:0c:
83:d1:b9:99:4e:14:08:f2:bb:60:d0:ae:93:5a:db:23:b2:b6:
69:fb:40:2d:1d:23:b0:ea:9e:36:06:1e:56:46:2f:4e:45:be:
a1:19:01:0c:44:67:35:10:d2:9b:38:ec:0d:01:90:2e:e0:8f:
27:1b:f1:c0:54:e9:6f:01:98:08:5f:7c:5e:1d:5b:4d:29:08:
c4:0e:05:a5:8e:d1:2d:37:11:3c:32:f7:21:21:e0:06:1c:33:
4d:ce:9c:e4:7b:86:f0:97:3f:8d:f8:af:b5:99:f3:55:61:45:
92:62:bf:c9:ea:01:d9:57:48:88:9a:90:d3:ec:57:e6:e8:33:
b4:7a:61:39:ac:52:67:6b:26:04:e1:2e:3a:46:df:5b:c8:98:
d2:0b:a0:a4:2b:1a:cd:69:5a:b9:3f:b2:f5:24:33:02:95:41:
56:41:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org