Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-h24GoLucoFmLMIQW6V4Q9Lkyl8.roa
File: 1-h24GoLucoFmLMIQW6V4Q9Lkyl8.roa (raw, json)
Hash identifier: c6JUW3DWrQNJEAw1nmJp6AfSF2XhyvZiQYLhiDSaJLs=
Subject key identifier: FA:1D:B8:1A:82:EE:72:81:66:2C:C2:10:5B:A5:78:43:D2:E4:CA:5F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01824A640149942CC4A1AB7E202F71C2491E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-h24GoLucoFmLMIQW6V4Q9Lkyl8.roa
Signing time: Fri 29 Jul 2022 14:37:24 +0000
ROA not before: Fri 29 Jul 2022 14:37:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203553
IP address blocks: 92.38.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:64:01:49:94:2c:c4:a1:ab:7e:20:2f:71:c2:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 29 14:37:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa1db81a82ee7281662cc2105ba57843d2e4ca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:63:79:88:16:89:b8:37:f8:18:ee:aa:04:
51:f0:75:ed:ec:86:4f:bf:d1:85:70:17:ec:cb:2b:
61:62:ca:f3:5b:ee:c8:4b:6d:35:2e:e1:2f:65:92:
32:8c:f1:53:2d:f8:55:7c:66:b0:e9:46:b8:67:77:
b3:8f:e0:29:cb:82:38:55:1c:8c:bb:2e:41:29:a7:
fc:69:7f:e6:bf:01:81:94:16:1d:cd:2d:0b:f4:e9:
01:8b:62:7f:98:71:97:13:39:bf:0b:01:0a:82:3c:
5f:cf:b5:c9:1d:63:e3:1e:28:7d:ee:04:0b:cd:bc:
c3:06:fb:07:34:2c:df:ce:ca:9d:42:84:e4:92:d0:
21:3d:b7:bf:ab:85:e1:b9:ec:3e:05:35:04:c9:ee:
78:af:c5:60:7b:48:a4:dd:97:0e:13:4c:b8:82:93:
90:78:4f:e6:01:b4:26:63:4b:0e:9b:bf:b4:8c:64:
ad:b7:b1:d3:80:b1:ec:c3:a6:25:34:6a:62:ad:96:
b9:4a:11:be:a6:c9:cf:47:22:2c:e8:82:86:3f:04:
17:c0:92:89:00:e6:a3:12:d8:67:3f:e7:70:92:a5:
8f:4a:ec:8c:65:a6:fe:81:ee:a6:44:16:cf:a1:a8:
4a:97:5b:d4:fa:2c:8d:ba:8e:6e:ed:7f:08:94:06:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:B8:1A:82:EE:72:81:66:2C:C2:10:5B:A5:78:43:D2:E4:CA:5F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-h24GoLucoFmLMIQW6V4Q9Lkyl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.5.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c7:d4:ea:93:81:c9:3f:6d:d0:a6:30:17:88:6c:19:bb:bf:
4b:66:a1:92:1e:9c:34:b1:56:97:cc:55:0f:c0:7d:04:54:e8:
8a:4f:df:30:3a:08:cf:28:fd:80:37:33:8b:ec:ab:18:a9:91:
32:be:23:91:00:6c:07:e1:c7:f5:c5:0c:89:ad:83:62:9c:8d:
d3:71:6d:40:94:9a:ff:e5:ef:79:43:cb:2b:fe:68:db:c7:eb:
78:81:ed:2c:99:f7:a8:8e:0f:a1:8b:50:8a:fe:70:46:91:d8:
d5:8a:3b:8a:fe:26:ab:e1:51:f7:40:26:48:d8:ce:fb:41:f1:
86:de:96:de:13:2f:3e:46:62:2d:bd:45:f1:7d:2d:56:ca:31:
09:6f:59:be:8b:23:09:3c:16:0b:5b:7f:b2:e1:e3:59:f1:f0:
b8:72:a3:49:34:11:cf:fe:67:b5:4b:f6:45:7c:1f:c7:f1:a5:
d5:67:48:5e:16:bc:36:a6:36:5d:57:6e:48:1f:b6:64:9c:7d:
d8:4b:2a:34:ad:ea:ee:5b:1f:bc:94:26:83:72:e1:f0:c4:0e:
ec:bf:31:a0:18:0a:9d:22:fc:93:74:2b:30:b2:81:d7:a7:e1:
be:89:fe:78:d1:6f:b6:79:b3:b2:03:fc:3b:b1:68:41:46:be:
6c:87:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:23 2023 by rpki-client on console-ams.rpki-client.org