Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/92XnmI0cDMNMjGVum4MbtGHpK2g.roa
File: 92XnmI0cDMNMjGVum4MbtGHpK2g.roa (raw, json)
Hash identifier: HGfVm7qaLWofnDINTZkb8g038uY5kNko7h79J4mzUWk=
Subject key identifier: F7:65:E7:98:8D:1C:0C:C3:4C:8C:65:6E:9B:83:1B:B4:61:E9:2B:68
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 17630768
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/92XnmI0cDMNMjGVum4MbtGHpK2g.roa
Signing time: Tue 15 Mar 2022 00:27:55 +0000
ROA not before: Tue 15 Mar 2022 00:27:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36231
IP address blocks: 185.33.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392365928 (0x17630768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Mar 15 00:27:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f765e7988d1c0cc34c8c656e9b831bb461e92b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:53:f2:61:5f:e2:7d:e0:f3:36:bc:98:74:
92:eb:6e:e3:3f:92:a6:e9:24:13:0f:d3:e8:5a:87:
56:19:43:df:fa:a4:24:ec:ca:b0:b1:4c:6b:b8:0a:
de:09:38:dd:b9:dc:e8:28:80:db:98:79:3c:98:ff:
61:d6:a5:19:b0:a3:c2:80:d8:30:0e:81:3f:64:6d:
48:9a:26:35:23:64:5b:71:32:f1:16:99:2c:75:8c:
b4:72:b6:9c:10:92:a3:8a:98:1f:a3:03:26:2f:fb:
c5:5c:fe:62:8b:a2:ab:70:d1:f5:53:8d:54:f7:03:
13:ec:3a:a7:22:3e:f9:1b:ec:6b:44:0d:76:96:44:
77:d8:f0:ac:30:40:c7:0c:68:55:e5:4f:e7:96:ca:
08:10:4e:ca:dd:63:ad:f1:e2:52:c3:ff:54:2c:41:
75:d0:2c:52:56:cc:b1:cb:7e:13:a2:d3:a3:19:25:
8f:c9:b9:33:d6:c3:81:7e:d3:4e:c6:34:3b:94:9e:
34:03:74:c5:36:dc:30:b4:73:86:42:0b:24:34:53:
5d:7b:f2:21:6c:55:16:f3:97:46:52:f3:8c:1c:81:
2a:30:67:62:36:4e:91:c0:71:3b:17:4f:94:87:fb:
ac:3b:19:25:26:45:9c:08:be:c7:73:65:c8:f6:7b:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:E7:98:8D:1C:0C:C3:4C:8C:65:6E:9B:83:1B:B4:61:E9:2B:68
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/92XnmI0cDMNMjGVum4MbtGHpK2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ec:b6:92:38:5c:9b:b5:3b:d2:39:e5:d3:d3:dc:ad:d1:88:
ce:82:6a:87:bf:50:37:65:6d:98:37:ae:2c:f6:a6:c2:1d:a8:
3f:ca:a3:8b:37:db:97:0f:ac:fb:11:89:2c:57:29:dc:4e:0b:
5b:ea:a3:8a:4d:5f:0c:36:f7:2a:79:e5:4d:81:3a:8e:2f:5c:
b6:a0:83:ff:ef:ad:4a:8a:cb:93:09:0b:f1:75:69:31:8f:47:
5f:0d:e1:28:a2:3d:0d:05:e2:57:c4:6b:7d:b0:75:80:8d:91:
c7:ff:9a:b0:ae:d3:3d:d2:e4:e8:f5:fb:35:d4:37:27:a8:7a:
10:07:93:73:c1:0e:a6:9b:25:56:b3:00:46:05:7e:6e:5e:12:
92:81:bb:5d:1f:bc:52:e9:b9:2c:65:97:5f:f0:42:3a:9c:6b:
26:c7:ef:92:d9:d5:a3:73:12:ea:15:05:cc:41:7e:9f:00:dd:
f6:9b:1d:0f:1b:66:ed:73:5a:41:a3:27:2f:b5:52:7c:1e:2a:
68:ef:82:ac:d7:85:82:26:0d:1a:8e:03:ff:84:5a:01:f3:8a:
ae:77:c1:19:9f:b6:07:fd:2b:81:a6:3f:fc:a0:5d:cc:31:6e:
7c:2c:f8:2d:db:aa:31:7d:33:d5:2c:ed:73:8c:b7:e5:6d:0f:
8a:f8:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:15 2023 by rpki-client on console-fra.rpki-client.org