Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/6DF4jZoSNASrRMjPjS33w3WeO0c.roa
File: 6DF4jZoSNASrRMjPjS33w3WeO0c.roa (raw, json)
Hash identifier: 9ekH9W01uUFvYPp0nCZMB8bq6SQGahFeRAi0v9vMIjY=
Subject key identifier: E8:31:78:8D:9A:12:34:04:AB:44:C8:CF:8D:2D:F7:C3:75:9E:3B:47
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 018355160D21AAA594328C8F2BD399DE0370
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/6DF4jZoSNASrRMjPjS33w3WeO0c.roa
Signing time: Mon 19 Sep 2022 09:30:51 +0000
ROA not before: Mon 19 Sep 2022 09:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2871
IP address blocks: 92.42.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:16:0d:21:aa:a5:94:32:8c:8f:2b:d3:99:de:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Sep 19 09:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e831788d9a123404ab44c8cf8d2df7c3759e3b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:7e:06:32:f9:25:30:bb:21:cf:1b:d4:a7:
50:f3:67:cb:bc:e9:0f:45:86:35:39:c3:41:59:34:
fd:08:b2:19:71:88:58:5d:89:f8:30:04:f3:37:fa:
07:f9:f7:67:df:7d:37:45:5a:8f:46:04:84:36:50:
ce:ab:23:16:cc:58:2d:ab:c2:26:45:cb:3d:00:d3:
11:54:4a:a1:47:12:ef:6a:73:a4:11:2c:d1:6c:03:
ed:38:4a:42:2a:d1:26:30:31:06:07:bd:ce:cc:e7:
8f:e9:56:67:f2:d9:b7:5f:2c:ab:3d:38:26:a9:9b:
ae:48:1f:23:db:ce:09:45:30:a4:e3:72:7b:11:02:
f0:75:d7:5c:85:bd:2c:04:63:97:fe:f4:bf:d2:b5:
0a:0e:c4:92:e5:2e:f9:1c:6e:c9:58:02:39:a4:31:
17:15:b2:71:09:7f:4d:c9:e8:df:45:e1:39:6e:11:
e2:eb:10:03:9e:34:04:1b:b0:13:93:12:6f:30:e8:
7b:b2:8a:ae:31:9f:61:90:53:5c:90:03:bd:ce:c0:
f8:25:0c:e1:12:39:aa:a8:5a:e0:f5:2b:25:b2:34:
e4:00:1e:d7:fa:3a:63:d7:05:41:e5:81:53:b7:b3:
59:fe:75:51:6b:f4:e1:45:f6:4c:e7:fe:1c:98:df:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:78:8D:9A:12:34:04:AB:44:C8:CF:8D:2D:F7:C3:75:9E:3B:47
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/6DF4jZoSNASrRMjPjS33w3WeO0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.141.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:50:ca:10:70:21:c8:ec:db:6d:51:2e:af:b9:1c:54:c7:38:
41:8e:88:64:c0:77:74:8f:e7:c2:11:39:6b:73:5f:95:f0:53:
e8:5d:6e:c9:2a:f2:83:66:21:8b:5a:7a:e9:a5:ef:19:1c:25:
64:4b:24:a9:86:df:19:cc:37:97:08:08:c2:b5:64:8c:78:8c:
42:41:a8:e5:52:1d:7f:73:a8:0a:68:ce:4d:9a:d8:a1:a0:22:
20:35:2c:29:65:dd:cb:4c:9a:ae:51:66:e1:13:b6:ed:05:e7:
b4:40:80:0e:84:01:1c:af:98:ef:df:3b:46:b7:01:d6:bb:e0:
51:25:a7:e1:e4:dd:14:a0:f1:63:93:af:a1:de:df:93:14:72:
29:95:42:08:da:cb:14:e4:22:0e:dc:31:36:46:90:a0:fc:d0:
57:4b:d5:c1:6a:e7:4b:20:9b:e5:12:be:f5:db:16:5e:b8:a2:
db:79:57:a6:ec:dc:0e:be:c1:9f:82:34:fe:c6:a9:3e:31:7c:
e9:54:e6:cd:cd:78:a4:b0:f0:4f:f3:95:c1:60:df:f2:a2:fb:
93:10:ba:d8:d3:88:a5:e0:6a:f8:51:2a:03:d0:18:bf:a6:c4:
d5:01:db:16:d4:13:99:5e:45:e9:2c:e9:af:81:74:fb:c9:29:
36:f6:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:34 2024 by rpki-client on console-fra.rpki-client.org