Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/iX_Y-vAG6tuPHd1-qf6r0bG8r5w.roa
File: iX_Y-vAG6tuPHd1-qf6r0bG8r5w.roa (raw, json)
Hash identifier: aw+gxAuSFwX348/3zBXHaw9O5gtkS33KZ6AYXKR9XhU=
Subject key identifier: 89:7F:D8:FA:F0:06:EA:DB:8F:1D:DD:7E:A9:FE:AB:D1:B1:BC:AF:9C
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 37472F44
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/iX_Y-vAG6tuPHd1-qf6r0bG8r5w.roa
Signing time: Sat 01 Jan 2022 08:53:22 +0000
ROA not before: Sat 01 Jan 2022 08:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34079
IP address blocks: 188.92.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927412036 (0x37472f44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 1 08:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=897fd8faf006eadb8f1ddd7ea9feabd1b1bcaf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:38:b5:5e:ef:c4:fe:6d:e4:8a:ee:44:24:
e0:37:0c:9c:a7:61:c5:c7:33:ec:29:45:f1:35:90:
a1:5d:f1:7c:f4:0d:a9:77:4e:64:3d:4a:7c:18:1b:
db:ad:f0:e5:bf:71:70:ee:e8:d2:53:e9:9a:68:5b:
a8:b3:a2:b9:0f:1c:ef:fe:ce:00:e7:c1:9c:32:4a:
be:8d:24:22:bc:64:a1:c4:e9:28:18:db:f0:b9:19:
08:73:ea:c8:0a:8d:dc:89:e0:98:9a:9d:3e:49:db:
bd:5c:33:56:ea:cc:ea:d0:73:cf:56:95:ce:91:95:
92:97:3e:43:4e:a7:e0:8b:ca:d2:8e:30:67:41:9e:
64:c2:08:02:88:91:a0:ec:85:8b:70:4f:96:07:c9:
67:bb:ed:04:1e:c4:7c:ad:57:72:ad:18:12:f3:81:
a6:7b:9c:d7:34:a4:ed:95:32:20:ce:1d:21:55:5f:
92:5f:a2:d9:ad:0f:30:a3:98:fa:d4:00:fd:b8:d4:
5b:e8:d5:4a:a0:df:5b:57:90:b0:18:2c:7a:0c:81:
97:79:70:e7:dc:75:bd:f1:47:c8:bc:d4:1f:30:b3:
38:77:f3:f1:b5:23:02:40:6d:ae:8e:ab:9f:34:d3:
f2:08:f8:0b:d4:30:56:1b:74:76:d5:86:54:d9:cd:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:D8:FA:F0:06:EA:DB:8F:1D:DD:7E:A9:FE:AB:D1:B1:BC:AF:9C
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/iX_Y-vAG6tuPHd1-qf6r0bG8r5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.138.0/23
Signature Algorithm: sha256WithRSAEncryption
30:be:32:2c:65:81:0e:9b:11:c3:98:64:41:16:3d:de:56:04:
9d:07:22:2e:d9:4a:8c:d9:60:26:06:0b:28:af:78:43:86:5b:
42:88:00:4b:94:e7:00:67:ff:5f:a9:ab:d2:e8:23:2b:bc:dd:
4c:36:f4:a3:d0:af:65:89:2e:b6:5b:c8:00:8f:bb:ca:15:e6:
ce:1e:61:fc:51:e8:c2:58:04:46:76:c3:6b:7d:da:a6:df:30:
e4:fe:9b:38:5a:29:d0:b6:ad:8c:96:80:7b:81:bc:29:7c:c1:
21:91:3b:c3:43:74:07:56:f8:e3:fa:ed:5d:19:0c:02:56:c1:
a7:8c:44:89:a3:6c:d3:e1:53:83:c0:2b:1b:1e:12:d8:78:1f:
59:80:06:75:1f:0f:4e:ee:8c:45:9a:89:05:29:1f:b3:89:49:
7b:8c:8e:20:ba:67:a6:aa:07:5a:28:7a:71:c8:2a:88:69:db:
05:30:98:f1:e3:07:1c:c4:8f:e2:50:b3:c4:59:19:c3:8d:ec:
f7:4a:ce:2f:f8:fe:96:6c:09:93:37:22:83:e5:4b:02:2b:dc:
68:72:c3:69:97:bf:55:98:dd:24:61:cd:cd:10:e0:82:36:95:
35:ff:75:a3:dd:cb:29:e4:06:5a:1d:d1:ab:0a:1f:4f:c0:70:
72:18:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:59 2024 by rpki-client on console-ams.rpki-client.org