Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/ItT2VzVdGq1jrPmYPFUEVVYoB90.roa
File: ItT2VzVdGq1jrPmYPFUEVVYoB90.roa (raw, json)
Hash identifier: 17FLpxRe9AWvyCEuqasOj0rJx3FaH1NZ8i9a6Ww8pQ8=
Subject key identifier: 22:D4:F6:57:35:5D:1A:AD:63:AC:F9:98:3C:55:04:55:56:28:07:DD
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018B65AF193214E9FEB82A30F5FF3CC66EC8
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/ItT2VzVdGq1jrPmYPFUEVVYoB90.roa
Signing time: Wed 25 Oct 2023 07:14:15 +0000
ROA not before: Wed 25 Oct 2023 07:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 152.89.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:af:19:32:14:e9:fe:b8:2a:30:f5:ff:3c:c6:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 25 07:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22d4f657355d1aad63acf9983c550455562807dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:62:da:c3:2d:fe:a7:a2:92:9f:17:0c:67:
f8:a0:1f:72:28:a4:f9:a6:f9:0e:1b:b4:c5:de:ff:
9e:f3:54:37:f8:6e:45:e0:12:f1:30:14:49:85:0d:
3f:e2:e3:28:6d:c7:0f:97:44:5d:3c:76:27:f3:b6:
3d:ff:b7:f4:e1:53:24:d1:de:b2:57:fa:17:14:14:
c7:ea:ab:c2:47:b0:67:7e:59:db:a3:90:20:50:1b:
05:de:e9:dc:56:13:9f:9a:68:7a:26:07:11:4e:9b:
dc:c5:43:7b:cd:9a:ba:6b:39:40:45:dd:86:d2:40:
99:57:2a:b0:16:e0:13:49:f5:56:54:40:dd:28:9e:
21:bc:7e:74:d4:30:9b:5c:a8:af:7a:1d:9b:d7:ea:
8c:e5:ad:85:db:6e:47:cd:d2:30:11:fe:f9:a7:8b:
e4:88:44:ad:44:ba:3e:a7:f7:cb:a2:39:ce:78:fa:
72:99:d5:cd:59:95:43:1b:d0:61:55:3f:33:a0:e8:
95:8c:df:9a:a5:aa:0f:8a:f8:6a:54:ae:7f:86:98:
e0:89:f2:6f:23:54:3c:7c:ae:6a:a2:90:42:3d:9c:
6d:d2:b6:ea:15:dd:ad:58:ee:78:df:bf:e2:90:c6:
48:06:cf:52:d6:07:7c:a4:ff:f1:73:5c:14:48:90:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:F6:57:35:5D:1A:AD:63:AC:F9:98:3C:55:04:55:56:28:07:DD
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/ItT2VzVdGq1jrPmYPFUEVVYoB90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d1:65:df:bc:26:f9:68:d4:40:d5:43:21:ef:cf:a4:51:15:
45:76:a3:9a:a8:5d:28:98:09:53:15:3f:da:b3:0e:33:67:84:
7d:bf:23:cc:ce:e3:10:61:cd:05:cb:47:44:44:e3:9b:3f:ab:
d9:c8:96:7d:6f:1b:10:2a:80:7a:96:fa:86:6f:c4:8d:b4:a4:
d4:2f:97:6d:c4:b0:d3:ce:66:81:ac:86:08:0f:17:d4:4c:18:
18:23:a4:7e:7f:86:f3:4a:6c:33:69:c8:d5:db:d8:e1:b9:35:
b9:d7:cd:19:8e:96:49:ff:7b:d8:cf:76:55:c0:89:4e:ca:f9:
58:d8:c0:be:fb:1d:73:9b:7a:32:d2:7c:23:82:09:0e:d2:ab:
dd:60:14:7d:db:63:d9:ee:c0:8f:df:44:24:c8:e3:88:a5:d1:
c0:8b:ab:d7:41:84:ec:37:b4:13:50:68:bb:35:ac:c7:23:88:
a0:dc:ae:f3:7b:12:6e:bc:1a:ec:77:ca:91:ab:cc:c8:60:f0:
a6:1e:15:44:6f:5b:0e:23:b1:a4:89:68:0b:fe:54:c5:71:09:
9f:01:d7:34:57:3b:39:de:11:fc:76:44:ce:7e:fc:76:c5:e4:
91:e7:ea:fa:6d:07:b6:dd:a2:43:b9:9e:d3:07:42:a8:13:41:
63:9e:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:48 2025 by rpki-client