Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/0l92AAgbpNEGkIHWytAUyP83mpU.roa
File: 0l92AAgbpNEGkIHWytAUyP83mpU.roa (raw, json)
Hash identifier: 5D32Dac+fGZkDeUZcDQvt261yp1P79SwKKwK/W5r4vg=
Subject key identifier: D2:5F:76:00:08:1B:A4:D1:06:90:81:D6:CA:D0:14:C8:FF:37:9A:95
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 04E5169B
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/0l92AAgbpNEGkIHWytAUyP83mpU.roa
Signing time: Fri 04 Mar 2022 15:05:05 +0000
ROA not before: Fri 04 Mar 2022 15:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.104.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82122395 (0x4e5169b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Mar 4 15:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25f7600081ba4d1069081d6cad014c8ff379a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:9c:ab:ab:94:b7:db:52:55:8a:cb:cf:b7:
6e:ae:25:53:86:f7:4e:c4:28:2b:04:a0:03:3b:56:
8c:95:af:0d:b2:bd:f3:74:07:b7:09:87:a7:68:aa:
ab:82:5e:ae:19:56:76:f4:fe:07:45:c6:fc:72:2f:
a5:5b:b7:5f:10:a1:95:34:71:de:b6:16:2f:6c:98:
88:57:c3:28:65:26:8c:21:55:06:51:34:c3:22:30:
3d:b1:f0:18:43:86:dd:c4:00:4e:ed:0f:ee:87:e0:
59:90:cd:39:bf:3d:03:5d:37:40:93:55:3f:21:d0:
fe:4c:5e:af:80:06:34:4e:e3:06:5c:7d:0f:d3:db:
ed:2b:c5:68:66:ea:b1:58:3b:81:bb:8f:53:c7:4e:
f8:aa:e1:d1:5f:e0:31:1e:36:25:42:ac:ce:74:51:
ce:9c:15:03:af:40:54:ed:15:13:09:f4:73:75:18:
e2:e6:d9:0c:66:99:91:49:49:c1:ad:43:11:c7:6c:
56:87:3c:81:a6:e4:8f:36:b2:39:3e:22:cd:47:d8:
86:6a:2b:e5:a1:40:49:0e:83:5a:04:c6:d6:cb:af:
36:1f:a2:18:38:af:a7:6b:0f:ec:45:24:1a:2e:4d:
1b:7c:43:e3:28:18:51:36:8e:d9:0e:58:44:77:8a:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:76:00:08:1B:A4:D1:06:90:81:D6:CA:D0:14:C8:FF:37:9A:95
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/0l92AAgbpNEGkIHWytAUyP83mpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.32.0/21
Signature Algorithm: sha256WithRSAEncryption
50:52:4f:6f:5b:67:db:a2:a2:0a:8d:42:1e:df:56:76:30:33:
a9:b7:19:25:ed:d8:6c:2a:32:50:ca:87:0e:68:6b:8f:46:54:
79:cd:c9:d3:c6:9d:7b:40:e6:c2:64:ab:30:ab:1e:23:84:f8:
0e:d2:7d:78:7f:72:16:b8:9f:a1:41:bc:6b:41:11:3d:ff:1d:
2c:1e:25:0d:ee:79:bf:9f:e5:fa:65:e5:40:5d:22:6b:68:1a:
fc:09:43:b3:7a:3f:0f:61:2d:21:02:8c:cc:23:b9:d4:c0:fa:
05:50:6b:c0:4a:60:e0:fd:d6:73:a9:b9:7b:d1:7d:c0:e0:b9:
0a:b4:fe:3d:39:59:06:6c:98:c3:5f:d7:fb:8d:10:e8:47:dc:
12:14:7e:9f:f0:a5:44:9b:4d:94:ed:15:29:58:3f:4c:80:95:
a7:cc:e4:89:eb:cb:ed:ee:3a:58:c1:37:86:aa:55:de:7f:dd:
9e:88:4a:38:8d:f0:e9:60:6e:d4:8a:f6:60:2c:cd:95:14:ed:
03:d3:6f:ea:6a:01:85:8f:41:ac:95:b6:b2:66:23:9b:07:44:
ae:62:cf:6f:95:de:53:35:f7:20:43:54:0a:01:09:58:51:bb:
f8:6d:cc:7e:ee:67:81:13:38:25:01:a7:2a:e1:8d:a4:4f:89:
0b:f9:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org