Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/938xR8hIpFPf6xYIpnpcBSQpmi0.roa
File: 938xR8hIpFPf6xYIpnpcBSQpmi0.roa (raw, json)
Hash identifier: FNjzklxlHXxbIAupYJLuslCzAvCJnQPx4czVhZO65zo=
Subject key identifier: F7:7F:31:47:C8:48:A4:53:DF:EB:16:08:A6:7A:5C:05:24:29:9A:2D
Certificate issuer: /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial: 016009
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/938xR8hIpFPf6xYIpnpcBSQpmi0.roa
Signing time: Fri 27 May 2022 10:03:13 +0000
ROA not before: Fri 27 May 2022 10:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208097
IP address blocks: 192.122.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90121 (0x16009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Validity
Not Before: May 27 10:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f77f3147c848a453dfeb1608a67a5c0524299a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:3b:70:1b:56:ce:47:3d:14:fc:04:71:41:
d5:04:bf:e8:dc:df:a0:c0:87:3b:89:55:13:24:67:
20:00:05:b8:02:34:52:da:f9:e7:77:41:5c:97:5e:
84:a0:d0:5b:fc:77:1f:d7:1a:a7:64:a8:18:cf:3b:
93:17:7b:9a:02:8e:bc:76:9d:50:74:35:72:ee:b3:
08:a3:76:94:bd:4c:c1:b2:0c:f0:ef:6a:16:36:67:
8f:ef:92:d7:a6:a6:22:fb:9f:83:47:90:70:dc:a7:
ad:6d:17:6c:1f:a5:fe:5d:e5:92:1b:01:3b:3f:a8:
69:6a:dc:66:61:ba:48:4a:43:9f:3f:6c:35:7a:51:
80:cb:34:5e:de:35:23:f2:79:d4:f5:ad:84:30:a0:
de:fe:d0:e8:91:99:d3:2c:bc:ac:9e:d9:95:14:26:
f2:d8:48:22:73:5f:e6:67:f6:73:7c:1a:ff:4a:18:
5b:ec:96:72:68:1c:ae:1d:24:00:fe:2a:50:d6:b5:
3a:ec:72:97:0a:52:c7:da:cf:99:06:4c:6d:3b:44:
a8:c1:4d:9c:1f:98:f9:10:78:89:f2:c0:44:26:10:
cf:68:4a:05:1a:d5:e3:47:c6:2b:76:85:61:16:d7:
1b:09:64:5e:4e:51:3d:f7:06:6f:8a:60:91:15:fe:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:31:47:C8:48:A4:53:DF:EB:16:08:A6:7A:5C:05:24:29:9A:2D
X509v3 Authority Key Identifier:
keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/938xR8hIpFPf6xYIpnpcBSQpmi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a0:29:b4:74:ab:e6:79:17:f6:bd:b0:6b:e4:f0:2f:45:6c:
4f:91:fa:d5:78:e8:23:8d:b3:7a:fe:4c:d9:e1:8e:bd:42:95:
c6:5d:41:96:39:ca:44:82:9b:a5:6a:9f:8b:3b:3b:e5:42:69:
bc:35:17:33:62:fa:43:5d:c4:37:4c:41:ef:cd:16:58:ef:ab:
12:f7:6e:91:df:92:a0:86:3b:a2:4d:62:12:01:63:e7:e8:38:
a5:73:a5:2c:43:ef:98:58:ab:c9:a6:ed:fc:69:26:29:10:c6:
0d:29:49:4d:d3:af:cb:79:43:28:8d:90:c4:b9:b1:8f:df:f1:
43:00:f9:54:b0:ca:27:d4:1d:84:bb:0c:24:80:51:ff:b4:61:
a6:0a:63:c0:4d:b7:eb:e8:08:36:7b:16:70:2e:8d:c4:51:fb:
1f:54:49:05:00:e1:f3:85:7f:40:ab:1a:90:9a:4a:7c:6f:77:
7b:a2:46:10:15:cd:6a:53:d1:dd:90:ba:67:10:a5:bd:54:9e:
aa:50:73:6c:84:3e:07:3d:ca:d6:e4:25:6a:b7:22:97:29:1c:
9d:5e:70:27:1f:7e:9d:d6:39:54:09:ff:99:a9:01:2b:f4:ec:
30:75:f8:ce:ea:c4:d1:f0:fb:0c:3f:87:16:b9:90:47:fb:9e:
c8:22:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org