Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/t22x_uaPRcdiNXG4AmVYHWAQu4Q.roa
File: t22x_uaPRcdiNXG4AmVYHWAQu4Q.roa (raw, json)
Hash identifier: KTOcjp3fGNvYJQeEjEeInaJwnN6Ul2Jzd8QW7VouX8M=
Subject key identifier: B7:6D:B1:FE:E6:8F:45:C7:62:35:71:B8:02:65:58:1D:60:10:BB:84
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 11C8D439
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/t22x_uaPRcdiNXG4AmVYHWAQu4Q.roa
Signing time: Mon 16 May 2022 17:18:40 +0000
ROA not before: Mon 16 May 2022 17:18:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213252
IP address blocks: 89.252.141.0/24 maxlen: 24
89.252.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298374201 (0x11c8d439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: May 16 17:18:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b76db1fee68f45c7623571b80265581d6010bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:ed:10:c9:3f:88:df:3c:a4:27:6d:53:fa:
b1:57:b0:0f:1b:b4:e9:d1:33:6b:6c:84:5b:0c:0f:
bd:6c:ee:14:4a:8c:9a:6f:7c:66:d1:08:0b:f9:21:
b9:f1:8e:9f:7a:10:12:15:b0:35:ca:17:96:b7:79:
16:be:7a:01:4b:e4:3b:a9:0c:8a:a6:e4:59:e1:02:
f3:0e:9f:20:4e:73:9a:01:01:e5:81:34:91:8b:05:
03:29:00:81:42:21:a0:bc:24:5b:39:da:f1:4b:92:
28:df:66:a7:f5:96:3d:9f:a4:5c:c0:6a:74:d4:37:
53:bb:b2:a6:76:82:e5:81:d4:e6:40:41:88:6e:93:
fa:2f:b8:f3:5d:91:8a:01:b7:e8:24:b9:3e:1c:2c:
84:19:ec:f4:7a:49:c9:fd:53:50:1d:2a:f3:40:7d:
47:84:09:ab:6e:d8:4e:8e:69:6c:6c:e3:45:ab:c4:
50:f3:3f:44:89:f0:a0:be:75:64:dd:a3:0d:ce:54:
4e:36:e0:de:43:cd:05:59:a8:98:a9:92:8b:67:f1:
23:0f:38:2a:4e:14:7f:30:3f:b7:5e:c3:27:0f:27:
8f:e1:d8:10:07:82:bc:a4:9c:2b:6f:07:d5:ec:72:
e7:37:ce:90:92:f6:24:63:01:ba:88:01:5e:92:27:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:B1:FE:E6:8F:45:C7:62:35:71:B8:02:65:58:1D:60:10:BB:84
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/t22x_uaPRcdiNXG4AmVYHWAQu4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.141.0/24
89.252.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d0:27:db:d4:27:f4:40:9f:30:11:e6:7b:45:69:ba:60:b5:
54:8d:60:26:1b:0e:d3:cb:76:19:9a:60:7b:cf:80:03:02:5d:
0e:98:ce:72:1a:fa:5d:4f:58:6b:09:02:0a:06:cd:95:d5:73:
1e:94:85:ee:e6:1a:f8:b9:93:ab:5e:eb:bf:fa:d8:ab:f5:ad:
8e:cb:de:78:61:82:30:32:7e:64:3c:93:0d:85:b3:6a:ff:a6:
be:87:c0:40:3a:b3:f0:15:89:72:01:db:c8:e6:88:33:ee:5d:
14:13:fa:76:01:14:bc:0c:5f:da:26:cd:ca:8f:5c:a3:ee:32:
98:82:e8:ca:66:86:a1:1f:8e:31:ad:4c:f7:33:54:e4:df:fc:
d3:38:a3:2a:27:c2:02:51:28:eb:4f:b9:ab:ef:4b:98:cd:e3:
96:ec:76:04:27:18:5d:bd:32:c2:da:ac:3e:63:49:fd:52:1f:
b7:45:2c:3a:dc:ee:62:75:4c:35:95:5b:f9:9d:77:38:0b:c8:
28:ff:08:0a:6b:dd:de:d7:0a:c6:79:6c:62:bf:c6:e8:2b:aa:
34:6e:8f:1b:74:a3:82:93:c9:f0:8a:cf:95:06:89:de:e9:d9:
26:bc:33:07:f7:9f:34:fe:02:8e:b0:4d:77:34:2d:94:65:fd:
f0:3d:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org