Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/aLdW2IrdrThX_LSqCk9W6ySO7zE.roa
File: aLdW2IrdrThX_LSqCk9W6ySO7zE.roa (raw, json)
Hash identifier: oRPgkRZV9axvy4HUoKmGpG5ISF2yrOXKqSQLM+N1q+c=
Subject key identifier: 68:B7:56:D8:8A:DD:AD:38:57:FC:B4:AA:0A:4F:56:EB:24:8E:EF:31
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: AC3884
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/aLdW2IrdrThX_LSqCk9W6ySO7zE.roa
Signing time: Sat 01 Jan 2022 05:05:52 +0000
ROA not before: Sat 01 Jan 2022 05:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197190
IP address blocks: 92.119.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11286660 (0xac3884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Jan 1 05:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b756d88addad3857fcb4aa0a4f56eb248eef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:8f:ac:5c:1a:39:e3:79:b3:d6:f7:a3:f5:
55:0c:0d:b9:d7:4f:6e:f2:b1:bb:30:b5:75:d6:18:
2d:6d:c9:06:28:0f:65:94:d1:2e:7d:5a:4e:fe:1a:
de:35:ee:27:3f:65:15:64:1a:68:ec:20:3d:24:2c:
9c:5a:90:75:ea:42:de:51:98:d2:39:2a:6c:ab:45:
f6:a5:b8:2e:e4:f6:cc:c0:23:90:8d:7f:a5:80:e0:
84:95:cc:9d:17:15:ca:50:ff:16:52:43:1f:c6:86:
95:d4:37:d6:a3:de:19:e1:5e:88:86:c5:7a:cd:32:
8b:5e:62:ee:6b:b7:98:78:b8:89:be:c0:60:ae:fd:
fb:e8:7c:50:97:16:31:5e:7d:e8:e3:a1:5c:3a:34:
ef:f9:61:fc:78:05:64:95:68:1b:cc:74:9f:49:ad:
4f:cb:42:d8:af:c5:d1:eb:37:19:a2:23:ab:6a:b8:
5a:44:76:58:e3:d1:f4:66:c5:27:59:40:48:15:8c:
7d:18:58:d3:d2:6b:f6:4b:c3:41:07:3e:12:41:38:
ba:05:e6:1f:b5:46:f0:1b:74:cb:d5:71:7c:92:e3:
49:9b:47:86:a3:d5:07:7c:8c:25:25:48:68:ad:e1:
8d:e9:5f:7e:90:d0:3c:b6:e4:73:af:8a:2b:a8:d6:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:56:D8:8A:DD:AD:38:57:FC:B4:AA:0A:4F:56:EB:24:8E:EF:31
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/aLdW2IrdrThX_LSqCk9W6ySO7zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
87:23:e3:27:db:6d:e7:a1:ce:15:e9:98:0d:cb:58:74:cb:12:
34:68:13:ff:5c:49:13:9e:91:85:07:a7:83:75:29:69:e8:d9:
30:44:10:d1:98:a6:bb:4b:59:fe:a0:06:1f:32:d0:79:10:55:
29:3c:8b:a8:34:ee:71:50:05:3a:b4:ae:ec:24:3e:a5:8b:42:
83:73:8e:d8:a4:2f:91:d5:d7:0a:d3:9e:30:a9:fb:05:79:56:
1f:a6:4e:fb:9d:85:3b:90:ee:43:52:47:5e:4e:43:6e:5f:60:
ac:d6:20:0f:33:57:bf:dc:49:89:34:70:6f:fd:b4:bc:fa:96:
01:b3:db:b5:82:b8:6f:dd:58:79:23:30:44:3f:31:aa:77:d6:
4a:73:9c:b1:81:cd:9a:b1:18:7b:0d:41:71:e2:d5:22:52:95:
83:7c:cd:07:3e:c1:a5:14:89:8c:fc:95:d2:be:1b:77:ee:95:
11:c7:b8:d8:8d:1d:f5:a3:32:86:8b:e2:b3:6f:c7:70:4c:d5:
6f:4c:3f:ac:92:8a:5c:18:68:61:96:f9:ae:78:2d:fe:19:09:
f0:a9:ae:87:b9:d0:fe:dd:a4:06:d3:c8:12:52:89:d5:5e:c3:
0c:eb:84:10:f7:1b:a5:32:65:fa:7a:a1:02:24:f5:80:29:5b:
31:f3:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org