Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/sHLIYnrZn69Cu6xIrJI7re05uiI.roa
File: sHLIYnrZn69Cu6xIrJI7re05uiI.roa (raw, json)
Hash identifier: 8CMePHJNeaq62WDud7FQuCqNc2es0fi9wp+VY1m12KM=
Subject key identifier: B0:72:C8:62:7A:D9:9F:AF:42:BB:AC:48:AC:92:3B:AD:ED:39:BA:22
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018B37C569C4C81D04BFF141DE5BC4524711
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/sHLIYnrZn69Cu6xIrJI7re05uiI.roa
Signing time: Mon 16 Oct 2023 09:16:06 +0000
ROA not before: Mon 16 Oct 2023 09:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 152.89.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:c5:69:c4:c8:1d:04:bf:f1:41:de:5b:c4:52:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 16 09:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b072c8627ad99faf42bbac48ac923baded39ba22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:9e:b1:9d:dd:7f:8f:1e:2c:6c:4d:1b:35:
13:19:06:51:75:53:b4:76:de:06:0e:34:4d:cf:f5:
0a:b9:6b:e0:72:02:4f:f4:96:2a:eb:33:bb:44:cc:
ab:9f:2c:87:75:c3:c6:e9:ac:b8:88:c6:ec:0a:54:
69:55:18:de:86:27:5b:c3:da:3c:e7:2b:66:e8:2d:
f4:e6:24:49:97:a9:19:1a:94:3c:41:ff:3e:67:bc:
cd:68:02:09:eb:1f:0c:74:cf:38:6c:50:fd:f1:35:
4e:79:e7:a0:d1:db:4a:05:15:48:79:c0:68:90:64:
a9:68:ea:0e:a0:d8:db:26:c4:b9:e5:73:2e:d1:38:
fc:41:ac:32:b8:b3:27:b8:62:68:6d:86:f7:e8:1a:
42:31:06:2c:49:60:db:0c:ad:17:fa:67:53:04:28:
37:c1:92:d1:2d:1b:31:5b:97:dc:08:7a:62:2d:f2:
c6:db:ab:41:62:06:ff:78:3e:66:ad:66:64:83:31:
2a:cc:b6:f6:d5:1c:52:3e:2c:99:49:24:0c:f5:ba:
fb:06:49:b4:07:45:a3:70:d5:cc:64:0e:58:04:71:
7f:42:79:ed:69:9b:0b:fe:71:fd:07:8d:36:36:80:
eb:01:1d:c0:68:cd:11:7d:29:54:fe:6d:b4:74:e3:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:C8:62:7A:D9:9F:AF:42:BB:AC:48:AC:92:3B:AD:ED:39:BA:22
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/sHLIYnrZn69Cu6xIrJI7re05uiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:58:02:c5:99:c9:ab:c5:27:99:bd:5a:80:49:6c:1b:ca:4b:
f6:07:31:af:08:da:ad:2f:9d:ca:d0:1b:79:0d:06:b7:4f:ff:
68:a0:7d:bc:e1:ae:ca:ec:e0:45:82:bc:28:3e:10:14:12:77:
72:c9:db:30:4d:e8:12:ce:69:ac:46:1e:8a:dd:ff:43:16:0c:
24:bf:df:ee:8a:d8:44:2a:0b:a9:6e:c1:fa:7b:92:40:3f:41:
37:95:84:c9:96:c9:84:b3:e6:a2:4a:54:b7:93:e0:a6:02:54:
84:e1:4d:f8:81:53:23:85:81:e9:d3:87:1c:5e:e3:6b:18:01:
50:d1:43:cb:4e:10:72:9f:00:70:dd:e7:84:5e:02:40:23:1f:
01:c4:1d:6a:9c:ee:5b:33:32:2b:27:50:2d:f4:46:5e:38:da:
0d:e8:af:d8:2f:52:8f:e5:87:36:9c:7f:46:89:c5:af:53:9c:
d3:c0:72:c5:5b:44:7b:06:35:e6:59:e1:6b:55:db:bc:86:f1:
71:db:fa:e9:81:86:07:ef:07:99:5a:c0:b3:1d:03:cc:54:7f:
8b:c8:b0:35:e0:94:36:aa:5f:cc:7e:b4:3f:71:67:7a:7f:6f:
46:37:83:86:a9:e1:13:d9:e1:d5:a6:d4:c6:cc:27:37:eb:19:
31:a6:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:12 2025 by rpki-client