Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/v_PNR1fmhIxEh8zT7xSewjBM3T4.roa
File: v_PNR1fmhIxEh8zT7xSewjBM3T4.roa (raw, json)
Hash identifier: TtSvdgI9eKWH1wAUVUfWLXfEnXHXOE3/A6//C8CWAx0=
Subject key identifier: BF:F3:CD:47:57:E6:84:8C:44:87:CC:D3:EF:14:9E:C2:30:4C:DD:3E
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 01587BF8
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/v_PNR1fmhIxEh8zT7xSewjBM3T4.roa
Signing time: Sat 01 Jan 2022 10:59:52 +0000
ROA not before: Sat 01 Jan 2022 10:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41692
IP address blocks: 194.54.92.0/22 maxlen: 22
2001:7f8:3a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22576120 (0x1587bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Jan 1 10:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bff3cd4757e6848c4487ccd3ef149ec2304cdd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:b7:71:fe:8b:f1:eb:1e:61:f5:91:47:13:
24:ec:41:9f:0f:d0:94:07:f2:0c:fb:61:e1:30:24:
47:4b:76:52:f7:e1:18:ee:b9:80:ee:18:81:2f:a1:
48:24:f7:6a:58:a2:51:52:6f:b8:61:42:f4:0b:7a:
05:1a:4c:bd:14:e2:16:b5:ed:8b:07:68:ee:43:68:
1d:9a:1b:f7:64:96:67:43:e2:67:92:93:8b:7f:a2:
3a:1a:00:d3:01:95:5c:22:28:19:b4:ff:b1:17:ab:
00:d1:1f:9e:d5:ba:b4:31:49:0c:1a:f7:ea:25:5a:
72:38:4f:a4:1d:24:90:71:dd:0f:f4:78:66:30:e2:
e2:54:ac:e3:db:e9:53:71:40:89:94:60:d6:e6:3c:
cd:8d:95:68:18:94:a7:54:3a:71:1f:b7:f6:63:fd:
a2:03:cf:2a:13:cf:cc:5c:f0:d9:6f:20:eb:21:9f:
9b:79:37:37:a3:c6:16:cf:77:ea:9c:bb:00:6b:98:
0b:9c:37:09:3f:eb:01:3b:8a:66:9d:9d:81:c6:eb:
e0:9e:e6:20:06:6f:c7:95:4d:7c:93:f1:c2:08:62:
e0:98:02:6f:10:83:85:98:30:ee:b5:70:56:38:bc:
6e:17:9d:a5:6a:87:70:88:fa:14:90:43:87:e4:aa:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:CD:47:57:E6:84:8C:44:87:CC:D3:EF:14:9E:C2:30:4C:DD:3E
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/v_PNR1fmhIxEh8zT7xSewjBM3T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.92.0/22
IPv6:
2001:7f8:3a::/48
Signature Algorithm: sha256WithRSAEncryption
91:6c:b0:56:28:8b:50:c4:22:df:30:a7:30:5f:06:21:fe:ec:
a1:81:77:1f:78:ea:58:77:f4:62:96:45:6a:bd:92:78:ed:32:
31:90:d3:00:65:59:f5:19:98:31:1f:23:fd:ef:50:8a:c5:16:
10:fb:28:53:f5:11:ff:45:2f:ef:34:dc:7d:f1:a2:77:96:83:
b3:bb:da:f2:86:3d:f8:6c:d8:9d:9f:10:be:f0:8e:79:07:f4:
41:32:1b:34:f2:d1:ca:fd:c2:d0:96:f9:a3:9f:89:95:91:38:
0a:5e:6a:62:05:0b:54:5a:53:97:a0:24:50:90:8a:fa:8d:b1:
55:5f:59:0c:27:28:1c:5e:61:58:7f:c9:b2:55:a2:fb:17:b1:
d7:43:ad:18:98:a7:67:bc:99:ac:41:08:76:40:67:00:69:67:
2e:b4:8e:0c:c4:52:ab:5d:c4:07:8f:27:39:dd:33:84:a5:68:
03:ca:f8:81:92:5f:b0:6e:ea:aa:5d:eb:f0:77:34:ea:2d:96:
32:a2:ed:26:dc:62:8f:f5:50:a0:60:aa:3e:2a:23:ea:3e:3d:
94:6d:61:7b:96:f5:92:f7:5d:52:65:9c:63:8b:b1:31:e3:2e:
6e:aa:0d:4d:4d:03:6c:83:f7:34:9e:99:1b:e6:ef:f8:b6:c4:
9b:81:d9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:23 2024 by rpki-client on console-fra.rpki-client.org