Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Rx0EvYd5DByr4KpO1Anf1nVR3jY.roa
File: Rx0EvYd5DByr4KpO1Anf1nVR3jY.roa (raw, json)
Hash identifier: h3dtp8JEe2cw82NeF7+v3vATkvFRdJcoB9LyaRmmcoI=
Subject key identifier: 47:1D:04:BD:87:79:0C:1C:AB:E0:AA:4E:D4:09:DF:D6:75:51:DE:36
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01857030415ECAC700274CA52ACF6910F0D3
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Rx0EvYd5DByr4KpO1Anf1nVR3jY.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 152.89.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:41:5e:ca:c7:00:27:4c:a5:2a:cf:69:10:f0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471d04bd87790c1cabe0aa4ed409dfd67551de36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:36:12:e2:16:f0:26:80:7c:f8:f6:21:df:
f3:36:e2:b2:85:60:b7:ba:61:a3:0d:b7:ea:60:b0:
dc:71:6a:38:1e:fd:d8:81:aa:3e:ab:ff:65:f8:4b:
81:a3:87:3e:31:aa:c3:3c:66:0b:e6:12:7e:f8:a0:
4c:e6:9b:5f:f9:20:14:1c:0f:7c:23:e1:23:fc:ba:
38:ab:cd:ec:e7:f5:6c:09:84:66:d7:97:3b:d0:3f:
6a:a2:29:88:e0:4f:bb:0d:4e:68:e6:9d:df:07:54:
09:d5:36:45:a2:f7:92:91:b8:d4:b0:25:df:c3:7c:
e5:6d:0a:74:43:14:f1:d4:e6:a4:4f:6c:d1:a3:b2:
b3:7d:83:85:58:85:3b:46:02:50:35:76:cc:d2:a7:
09:14:f6:64:4a:ca:f1:9f:a8:ca:63:65:30:f4:5e:
14:01:4e:e8:91:f4:91:4e:31:72:39:a8:05:6b:27:
00:47:34:b5:e0:b9:74:b8:ad:e7:5d:04:5c:b0:91:
b5:c2:96:30:92:53:9c:04:7d:58:05:75:74:d3:7f:
09:32:bd:0f:c2:48:29:de:9f:a5:e2:11:3a:ee:1b:
64:50:e9:05:c1:54:d4:4b:da:69:87:36:40:43:8b:
45:06:11:84:9c:cd:f7:6a:74:6f:b6:c6:83:97:4b:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:04:BD:87:79:0C:1C:AB:E0:AA:4E:D4:09:DF:D6:75:51:DE:36
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Rx0EvYd5DByr4KpO1Anf1nVR3jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:23:31:05:06:18:d8:31:79:4e:bc:ff:1f:bf:eb:bd:62:f3:
71:17:9c:6a:05:69:db:b8:c0:70:4f:73:26:a3:5f:18:e7:a2:
56:d0:12:2e:c5:2e:2f:1f:ed:a5:63:7a:c7:c1:a0:f0:cd:44:
8d:c9:62:23:58:b2:8f:28:be:3a:94:e5:78:63:2c:a6:1a:05:
88:2d:15:99:f4:20:c2:22:d5:1a:f5:ca:1e:e9:35:66:65:56:
e3:f2:a9:34:da:13:ab:fd:75:56:ac:00:80:bc:c4:63:d8:65:
da:db:64:f2:2b:1f:93:12:77:54:cf:c4:64:2c:94:ea:1f:6f:
04:8e:e7:2e:cd:e0:e4:24:11:b4:75:5b:f0:cf:46:e7:40:4b:
aa:32:31:93:0b:b4:7e:e8:6a:5c:a2:12:51:8e:ab:b8:3e:e6:
c6:b3:e5:6b:80:76:53:fd:98:6f:41:f6:82:75:fa:84:c1:ac:
fb:77:14:c2:d5:27:0e:d1:35:a2:22:86:6e:7b:da:8f:32:00:
73:7c:89:30:ce:b0:45:9e:ad:72:5d:21:aa:28:d8:bc:8b:f0:
c5:4c:a8:b8:48:f4:50:a7:aa:d2:c1:80:8d:d3:9c:f3:4d:26:
e9:5d:54:a0:7b:c2:09:1a:89:c9:55:cb:72:dc:12:74:ca:cc:
68:45:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:36 2025 by rpki-client