Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/VuEsP7gXTzwye-LTcEvZ3IpuMFc.roa
File: VuEsP7gXTzwye-LTcEvZ3IpuMFc.roa (raw, json)
Hash identifier: qnUNJkFl4nygw0ufaGXd1kDm74KMDw/88jLrMHlkuJ8=
Subject key identifier: 56:E1:2C:3F:B8:17:4F:3C:32:7B:E2:D3:70:4B:D9:DC:8A:6E:30:57
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 3797F0BB
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/VuEsP7gXTzwye-LTcEvZ3IpuMFc.roa
Signing time: Sat 01 Jan 2022 06:00:43 +0000
ROA not before: Sat 01 Jan 2022 06:00:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44431
IP address blocks: 92.43.224.0/24 maxlen: 24
92.43.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932704443 (0x3797f0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Jan 1 06:00:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e12c3fb8174f3c327be2d3704bd9dc8a6e3057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:3f:8d:d2:ff:76:4a:a8:5e:81:d0:33:f6:
9f:72:07:08:ee:c1:22:af:e1:2f:ab:ee:36:6a:4a:
0e:3c:88:91:af:05:83:39:13:e2:55:ee:6b:4a:91:
6f:2f:63:ff:c4:00:f4:fd:3f:fb:45:73:2e:db:0b:
6e:c0:1f:d7:0f:f0:84:75:81:6e:c5:32:26:74:ee:
70:74:57:74:cc:14:48:b6:e4:be:0c:f5:95:57:cf:
75:b5:e6:a4:9a:16:62:d1:24:21:d2:d6:f9:05:98:
10:6c:1f:76:cb:fe:01:59:0d:24:a8:4c:92:af:a5:
73:0e:b7:7a:a9:b5:34:0e:8a:69:f5:5b:13:cf:85:
5c:d5:5a:c2:e6:a8:9c:e9:08:13:77:da:40:a9:0d:
8f:4d:4f:f9:5a:d4:d7:76:43:71:cb:9f:10:fa:dd:
cd:16:fc:f2:24:7f:e6:bb:52:3e:1e:9f:7c:61:e7:
02:1b:2c:b0:8b:10:fb:5e:55:8f:d2:cc:f0:8f:9d:
89:47:8c:c0:b3:8c:dc:40:d3:99:fe:ed:62:27:c7:
fd:75:00:8c:ee:d8:4a:7a:2f:93:78:20:27:6b:a9:
f0:00:48:ad:1a:86:0d:b2:70:08:45:16:f2:e7:2d:
96:00:1e:54:3e:cc:fc:70:ac:54:3b:14:c3:0a:ed:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:2C:3F:B8:17:4F:3C:32:7B:E2:D3:70:4B:D9:DC:8A:6E:30:57
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/VuEsP7gXTzwye-LTcEvZ3IpuMFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.224.0/21
Signature Algorithm: sha256WithRSAEncryption
47:fd:82:18:e4:d4:af:74:8d:df:7f:d9:a8:43:6f:00:94:a7:
2c:c9:8c:70:0e:dd:e0:f8:cf:1d:54:58:bd:ec:fd:23:d7:c9:
9f:4a:89:0d:a4:56:c0:27:00:74:6a:a8:de:f8:1b:da:06:ed:
81:f1:ef:72:f7:1d:90:c4:b9:14:fe:7f:d0:4b:50:2d:56:c0:
af:21:00:cc:9b:9c:ad:d0:cd:63:0e:5d:63:f3:c2:33:39:0a:
0c:6b:a2:c2:a7:bc:38:7a:66:07:83:89:fb:20:80:2c:76:7f:
82:5b:38:23:12:d4:8c:34:2d:24:dc:5c:ef:1d:99:ea:8b:12:
04:aa:66:d6:a0:ac:06:57:6a:dd:b1:93:33:51:e3:c6:c7:a7:
3d:52:9a:c3:61:8f:1a:c4:2d:94:da:61:17:e4:dc:d6:76:79:
f0:31:de:74:4d:ef:a4:f2:14:ec:e8:7c:b1:07:b7:8d:c2:65:
db:3c:44:72:54:f0:91:ee:eb:34:e1:78:ed:b0:80:f4:21:e7:
a1:0e:cb:54:68:5c:f4:21:d0:c0:0f:09:18:d3:e8:a0:66:11:
0f:e1:59:8f:2f:3e:07:38:99:96:db:6e:94:20:8b:45:76:33:
ab:ef:0f:5f:75:3f:52:7a:61:db:5e:3e:fd:9e:4d:0c:77:8d:
20:b4:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org