Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/40tjgMnPN2d6UqbXbNMzbxz3cWU.roa
File: 40tjgMnPN2d6UqbXbNMzbxz3cWU.roa (raw, json)
Hash identifier: WzJ2WCGouKMl3jbhUQW/B51RM87wsYu+tdEZBmKVgto=
Subject key identifier: E3:4B:63:80:C9:CF:37:67:7A:52:A6:D7:6C:D3:33:6F:1C:F7:71:65
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 08FBB805
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/40tjgMnPN2d6UqbXbNMzbxz3cWU.roa
Signing time: Sat 01 Jan 2022 12:57:43 +0000
ROA not before: Sat 01 Jan 2022 12:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213117
IP address blocks: 92.119.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150714373 (0x8fbb805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 1 12:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e34b6380c9cf37677a52a6d76cd3336f1cf77165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:d8:7c:15:29:d6:9d:a5:ce:a1:cd:05:0e:
6f:7d:b4:86:20:2a:15:56:c3:28:dc:2d:4a:b2:41:
64:50:b4:98:86:ca:88:1f:9e:b0:f3:a8:60:31:38:
f6:77:c9:c1:b5:ea:a9:12:6c:6f:da:d7:61:c9:3e:
92:93:82:f4:ce:35:e9:cc:4d:23:ea:d2:c6:5d:29:
30:b2:8c:c2:4b:15:e0:0b:da:62:86:a2:43:32:f9:
95:64:7c:be:1b:cf:da:fe:57:21:86:98:27:74:3e:
10:7f:84:fa:1c:c8:80:1c:e3:62:e9:22:e2:a8:72:
38:13:69:75:16:e7:c2:85:d5:10:fa:b9:9c:1a:88:
e1:cd:45:6f:c5:10:bf:aa:2f:e7:75:6d:99:70:f9:
eb:8d:6a:79:13:66:32:78:b5:da:f0:56:79:24:9c:
4b:42:aa:f5:d3:8e:35:53:e9:fc:93:00:65:40:df:
1a:d1:c4:74:cc:e2:a0:1e:77:0c:19:c6:94:3b:80:
72:cf:e7:5f:5e:a6:97:94:b4:5c:c5:fa:22:b9:8b:
bd:97:30:f3:3b:ba:75:7d:83:2b:5f:c6:51:11:1b:
eb:6a:91:d7:ba:dc:3e:0e:4f:40:ac:9e:92:65:c9:
80:21:2b:51:df:35:4b:99:83:89:8d:e1:8d:fa:ca:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:63:80:C9:CF:37:67:7A:52:A6:D7:6C:D3:33:6F:1C:F7:71:65
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/40tjgMnPN2d6UqbXbNMzbxz3cWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.216.0/24
Signature Algorithm: sha256WithRSAEncryption
45:23:57:05:ea:83:50:2e:73:17:e2:e6:07:e8:f7:5b:e2:e9:
b0:3a:e1:0c:a0:21:ad:f1:ea:38:88:4e:ce:1e:82:0e:2f:c2:
27:92:59:ad:67:17:cf:5b:f0:c9:3a:fb:8f:06:fe:ec:74:36:
ce:12:10:d5:42:ca:8e:44:13:98:1d:9e:53:94:ee:59:93:53:
e7:e6:d0:cd:47:5e:fb:f5:89:2d:8e:42:c8:54:db:3c:98:9c:
9b:84:9a:93:7f:c6:2e:c9:ef:07:72:17:f2:6b:dd:b5:54:dc:
69:55:4b:5b:46:ac:49:5a:93:1b:80:27:10:3f:49:ab:0e:9e:
b4:f7:7b:be:2b:62:ad:27:a7:e2:ca:fa:33:19:e6:3c:c5:9a:
aa:c9:d7:8b:aa:97:a5:c7:3c:66:02:c2:88:89:6c:fa:b2:ac:
7f:ff:3c:7e:98:db:45:92:8a:02:1b:5c:8c:83:1f:29:ac:4f:
28:14:5e:0e:c4:c3:0e:b9:f1:78:68:6c:75:0b:4c:68:cb:ce:
27:80:15:62:5b:f2:c8:35:65:26:2d:c1:00:8d:f8:ae:4e:b0:
ab:ff:80:d2:a1:25:d8:b4:18:52:9b:d3:c9:89:8e:ca:10:d2:
be:4a:a0:08:2e:f6:70:17:50:a3:40:81:55:1a:58:47:8d:71:
ef:b5:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:16 2023 by rpki-client on console-fra.rpki-client.org