Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/9Wjm1wEMfQWCfc_KZ8L6SvkOQzA.roa
File: 9Wjm1wEMfQWCfc_KZ8L6SvkOQzA.roa (raw, json)
Hash identifier: DwNJNRw0y5Pb0nL7IkAYihhPLxlMZdTpyZrCYMKrfyM=
Subject key identifier: F5:68:E6:D7:01:0C:7D:05:82:7D:CF:CA:67:C2:FA:4A:F9:0E:43:30
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 02242733
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/9Wjm1wEMfQWCfc_KZ8L6SvkOQzA.roa
Signing time: Sat 01 Jan 2022 10:04:08 +0000
ROA not before: Sat 01 Jan 2022 10:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207918
IP address blocks: 92.246.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35923763 (0x2242733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 10:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f568e6d7010c7d05827dcfca67c2fa4af90e4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:ef:c1:36:1a:59:f8:97:41:d3:e5:37:96:
82:79:d8:97:bc:77:9f:83:af:92:1b:a2:84:90:04:
85:87:5e:84:f8:f4:1d:2b:b7:77:c6:38:3a:89:4d:
01:4f:24:c7:61:f2:74:0c:fc:f5:ce:7b:a4:cd:26:
da:b3:72:ac:cf:bb:41:65:ca:8b:0b:d1:92:20:f4:
a8:27:a3:10:be:1a:a1:87:6e:39:2c:91:8d:23:5f:
4b:d1:a1:fd:e4:d4:13:1e:dd:7a:b8:a6:f1:96:6a:
93:0a:44:6b:5e:6c:53:62:98:54:41:0e:be:70:4b:
03:19:fc:33:28:cd:c8:24:bd:14:34:8a:b5:5c:1a:
42:cf:44:c1:f7:cd:71:9a:45:27:53:c2:54:da:5f:
fd:50:f3:e0:54:72:cb:92:b9:07:3f:8c:47:eb:19:
46:72:b3:25:a4:d0:5c:52:6d:19:5e:eb:1e:69:20:
b1:e4:68:45:c5:e2:97:f7:9b:73:e0:cc:76:29:b7:
58:22:a1:ef:3b:64:04:69:cd:a6:be:23:34:6c:b5:
32:46:c9:f2:59:78:17:4b:11:56:b4:8b:c9:16:71:
c1:9d:71:82:c8:5c:b5:56:f5:aa:fb:c8:e0:9a:6d:
0c:fd:ca:9f:0d:39:2b:03:c7:9d:6f:cf:36:66:1b:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:E6:D7:01:0C:7D:05:82:7D:CF:CA:67:C2:FA:4A:F9:0E:43:30
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/9Wjm1wEMfQWCfc_KZ8L6SvkOQzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ac:3b:20:ad:35:7e:17:b9:9e:2b:11:e3:83:40:6b:1d:93:
b7:39:d6:f7:6c:2e:43:28:0f:c2:f2:ef:08:ac:7a:91:64:6e:
66:5e:36:aa:6a:00:3e:df:b0:05:c9:d2:46:7e:f6:2e:28:31:
34:f9:dd:db:39:ce:9a:3b:cc:6c:35:7b:fb:15:ca:f2:02:63:
44:0f:db:2b:18:51:9c:50:cb:54:b1:59:d1:ac:00:7b:63:b8:
b0:37:ac:82:c5:2e:a4:cf:b4:96:2d:ca:51:04:6d:1d:14:95:
00:e0:2a:d6:15:35:c6:6e:ef:b2:28:a4:b5:e1:ea:ed:b9:6b:
96:f4:a4:52:58:3d:10:78:c0:0b:de:ee:d1:8b:05:00:8e:4f:
d8:76:39:57:30:05:33:50:f7:fe:a2:f1:3c:9e:13:ff:98:31:
c5:04:cd:b6:55:67:c5:32:b1:91:fe:7f:cf:2b:4e:f1:4a:87:
48:7f:4d:2e:58:df:f7:fe:5b:90:78:80:4b:70:de:91:89:e2:
0d:e6:ef:ee:b2:f9:9e:79:d8:17:38:ec:47:87:26:5d:ac:70:
ab:c2:d9:29:a1:c0:20:05:9e:6d:78:b1:30:f6:60:7b:4c:35:
5a:ba:53:35:17:45:54:38:eb:0e:ea:76:f8:2e:54:57:8d:3b:
94:0e:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:26 2023 by rpki-client on console-ams.rpki-client.org