Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/hF89rUYHCZA7pG7jDfttI9-YbKk.roa
File: hF89rUYHCZA7pG7jDfttI9-YbKk.roa (raw, json)
Hash identifier: 30O0F3ZnwHJYvUKyXDKxjcKYrtuvxhR2LTNfzr+BQIE=
Subject key identifier: 84:5F:3D:AD:46:07:09:90:3B:A4:6E:E3:0D:FB:6D:23:DF:98:6C:A9
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 03C08314
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/hF89rUYHCZA7pG7jDfttI9-YbKk.roa
Signing time: Sat 01 Jan 2022 14:05:08 +0000
ROA not before: Sat 01 Jan 2022 14:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61389
IP address blocks: 92.55.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62948116 (0x3c08314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 14:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=845f3dad460709903ba46ee30dfb6d23df986ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:42:72:9d:9d:f6:6a:60:5c:9e:d9:fb:c7:
ed:8e:18:b8:1e:e0:3c:59:0a:35:af:65:b4:52:23:
33:88:02:d6:44:2f:3c:64:2f:8f:0f:46:e9:af:d6:
4f:c7:38:18:0e:22:8a:9b:b5:52:0b:28:68:f7:dc:
78:41:5c:d2:aa:07:34:69:74:d4:fb:ae:4e:37:6a:
b8:de:4a:c0:ca:e3:5d:ff:e4:5e:7b:11:8a:42:87:
6b:97:7f:37:93:7f:1b:77:3c:a0:d2:9a:d1:15:46:
02:57:bf:02:4c:df:6b:8f:17:92:2b:16:63:bf:95:
72:5b:ba:d1:24:06:03:9b:ab:f9:63:fa:a3:cb:30:
f1:fc:b2:1d:4b:53:69:14:93:36:66:33:a7:a5:5e:
49:02:c0:0f:93:e4:26:80:0b:c6:8c:f3:50:02:29:
3c:e2:da:7e:40:48:7f:ed:88:3a:c7:6a:ea:c9:4e:
48:1b:95:c8:b2:b5:ae:96:06:ba:94:39:1d:8b:51:
79:54:e9:81:03:60:fb:2d:cf:7f:9a:e3:f1:55:4b:
2f:d0:34:53:3f:e5:bc:3b:6b:4c:81:de:96:13:d0:
d5:fe:35:f5:5d:e5:46:2c:64:2a:b8:90:d5:b2:7f:
94:24:b0:5e:81:7a:cf:5a:98:a8:6c:b6:4e:3e:4d:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:3D:AD:46:07:09:90:3B:A4:6E:E3:0D:FB:6D:23:DF:98:6C:A9
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/hF89rUYHCZA7pG7jDfttI9-YbKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.55.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:49:72:4d:be:19:7f:cd:f8:e4:fb:b9:3c:2c:f4:8f:3d:a1:
e1:ed:64:0d:79:7b:42:27:cc:70:2a:41:23:7c:9e:54:97:77:
c6:8c:b0:1c:55:84:44:13:0f:59:da:0b:5c:c3:35:e5:ca:e2:
e6:2d:ca:d4:a6:1b:2f:f7:c1:fb:d2:ce:3c:4e:49:25:4e:9f:
20:59:1b:77:12:4d:44:99:f1:31:73:58:84:f2:e2:3b:63:f3:
3c:8d:5f:a4:91:39:7e:44:7c:0a:b3:00:1a:d9:2b:4e:0e:95:
61:d4:56:c3:04:91:ef:94:7a:a5:1d:12:3e:79:99:eb:0a:5c:
f9:f5:e3:bc:6e:b5:f3:62:d0:a8:24:ae:4e:8d:75:2f:4f:d2:
98:a6:09:07:6d:12:c1:cf:d7:53:63:a4:fb:58:12:ee:07:e8:
79:87:9d:aa:9f:b0:d7:d0:dc:9b:38:60:b0:cb:bd:e1:5d:90:
86:f0:df:1e:f4:ac:14:e1:53:91:0c:d1:7c:08:8d:6a:1a:7a:
97:5f:29:50:26:37:e6:1f:90:e8:81:ac:e0:b1:02:8f:07:5e:
61:24:f7:e3:00:9d:5e:12:6c:e1:76:63:7f:3b:99:1f:d3:0c:
36:06:40:ab:7b:df:e3:20:70:ad:ed:9b:79:7a:3d:4c:17:f9:
8d:5b:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org