Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-FF0iz-An5ceOYQXvum-TU7EX00.roa
File: 1-FF0iz-An5ceOYQXvum-TU7EX00.roa (raw, json)
Hash identifier: BLfmSPZXyz4NLZF5breTXTj95X9RPInRnvYIImjVJ2U=
Subject key identifier: F8:51:74:8B:3F:80:9F:97:1E:39:84:17:BE:E9:BE:4D:4E:C4:5F:4D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 448115E2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-FF0iz-An5ceOYQXvum-TU7EX00.roa
Signing time: Sat 01 Jan 2022 03:58:30 +0000
ROA not before: Sat 01 Jan 2022 03:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31204
IP address blocks: 92.181.0.0/17 maxlen: 24
92.181.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149310434 (0x448115e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f851748b3f809f971e398417bee9be4d4ec45f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:d4:7b:bb:f9:c5:fa:18:e4:da:81:cf:96:
91:28:80:f8:50:a5:f0:33:f5:7c:ce:51:5a:fb:8d:
b1:66:7f:0d:6a:72:c5:b9:f4:c7:0c:c7:fa:77:83:
f1:19:20:77:f7:9b:44:ba:04:ee:b6:cc:b8:5a:2a:
b3:8b:86:af:87:c2:fd:53:12:41:57:99:6c:ab:63:
ab:82:de:32:d5:d6:aa:d1:1e:01:f5:dc:29:8d:33:
16:25:54:64:83:01:01:0e:5b:c2:77:ed:55:cd:4f:
d4:fa:2e:67:26:bd:96:0e:17:ef:79:11:22:30:64:
c0:0f:ff:9a:23:04:de:da:0d:2b:66:ff:f8:52:f7:
c8:e6:cf:ac:a3:f2:0a:8e:6a:7b:96:90:5b:32:f8:
84:9d:3b:6f:a5:ee:97:0c:f4:eb:5f:c5:77:11:46:
95:a1:fe:67:85:31:d4:32:71:8f:60:c2:4c:1f:f9:
c7:14:65:b3:10:aa:9f:87:86:92:61:64:9b:08:1d:
e6:80:ef:94:d1:85:ef:89:cf:d2:33:ad:4c:63:a5:
b3:26:da:ae:b8:90:bb:42:08:5b:8d:b1:9d:20:75:
1e:1c:a2:ed:ff:a4:41:5a:2b:2a:ea:49:b4:5f:34:
bc:28:e5:51:64:c5:f4:a4:b9:fa:0e:91:51:9e:77:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:74:8B:3F:80:9F:97:1E:39:84:17:BE:E9:BE:4D:4E:C4:5F:4D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-FF0iz-An5ceOYQXvum-TU7EX00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.181.0.0-92.181.159.255
Signature Algorithm: sha256WithRSAEncryption
7f:85:53:0e:cc:a5:1c:fa:fa:22:03:44:b1:25:85:5b:9c:a1:
0a:43:f8:ea:19:5e:6f:09:df:d0:77:69:47:e6:83:9f:f5:ad:
15:27:d7:de:bd:86:f2:c3:cd:5b:b5:52:a8:d3:ec:89:f1:f9:
cf:75:3f:a3:e9:0e:0b:85:ab:94:c1:79:73:65:98:cb:5f:de:
28:6a:63:bc:b3:39:c4:17:19:9c:ac:e3:6b:b1:2f:fa:d6:cc:
1b:70:18:8f:ef:03:42:2f:22:e2:e6:d7:a5:09:6b:ce:8c:fa:
bc:41:c8:d3:44:2b:c0:01:1b:7b:4e:72:7d:1f:64:25:2b:d4:
85:f6:65:d9:3c:db:20:26:ba:3b:e1:53:58:01:31:f5:db:cb:
57:c2:87:07:98:a1:1c:d1:3e:36:f8:e1:e1:e5:bd:a9:95:60:
e7:1f:e3:ec:f5:78:c5:20:43:af:b2:3c:47:67:7f:e5:80:8a:
bc:f9:1a:da:16:0b:dc:98:b9:d9:b2:7e:e0:30:1a:7a:b1:be:
ae:68:7f:7c:ba:2d:78:5c:08:40:bb:2e:f7:ef:24:2b:e1:35:
41:15:27:e5:e4:b5:04:c4:fa:b1:e4:8a:b8:be:a8:da:61:33:
b7:db:71:05:73:f4:58:66:c0:9a:40:cd:c5:b2:af:92:7d:69:
3c:84:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org