Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EtPqzjDUvvyu2hEFhpWjyX4dP7w.roa
File: EtPqzjDUvvyu2hEFhpWjyX4dP7w.roa (raw, json)
Hash identifier: holBsv88kVuOVkwmNPZqmut/bkt1fa5Dcu7Z4lrlz5g=
Subject key identifier: 12:D3:EA:CE:30:D4:BE:FC:AE:DA:11:05:86:95:A3:C9:7E:1D:3F:BC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28078A43
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EtPqzjDUvvyu2hEFhpWjyX4dP7w.roa
Signing time: Sat 01 Jan 2022 16:09:27 +0000
ROA not before: Sat 01 Jan 2022 16:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62028
IP address blocks: 92.38.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671582787 (0x28078a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d3eace30d4befcaeda11058695a3c97e1d3fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:47:d4:15:a5:83:d2:7f:5e:bb:98:bf:75:
ed:0b:fa:cb:46:e4:c0:cb:f5:15:43:1d:98:33:ea:
c8:16:51:96:5f:53:5b:60:2c:8a:7c:71:43:cb:96:
a2:16:6d:e8:4d:60:5f:61:9b:1f:3a:31:e5:ca:24:
e4:d3:9a:fe:73:1b:40:94:2c:79:85:57:66:c6:72:
fb:8f:d3:86:30:84:5f:d5:15:ee:86:a8:9a:ce:47:
04:3d:e3:86:4f:9b:12:30:7b:2a:26:31:54:23:b2:
a1:99:2a:d3:50:ae:f4:02:d0:8e:46:73:c6:fd:14:
b0:ce:0b:a1:2c:0f:5e:13:e3:eb:8f:93:e0:f2:84:
79:61:7a:9d:bf:c6:56:03:b8:76:08:fb:b4:fd:96:
d7:61:13:56:34:31:92:41:ac:66:12:23:8b:4e:75:
60:ec:b4:71:fc:c3:44:2a:b3:38:e2:6e:7d:77:6d:
21:3a:a6:c9:40:c8:d7:ea:36:a4:71:1d:36:9c:35:
53:ca:2e:80:1e:ec:90:7c:f8:a4:c6:5b:e5:48:9e:
ca:73:60:a6:93:7b:b2:ce:ce:b9:31:a9:31:d8:0c:
d3:f0:b3:a9:3c:62:13:85:b6:85:f6:91:1a:64:8e:
bc:3c:a1:05:bb:85:be:7b:6e:da:58:85:d0:5e:2b:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:EA:CE:30:D4:BE:FC:AE:DA:11:05:86:95:A3:C9:7E:1D:3F:BC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EtPqzjDUvvyu2hEFhpWjyX4dP7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.40.0/24
Signature Algorithm: sha256WithRSAEncryption
72:85:be:a3:f0:78:28:71:e5:72:60:46:bd:e0:d9:71:dc:41:
01:7b:ec:2e:c4:b0:cb:7f:13:60:e8:6d:40:45:92:08:a7:ae:
54:a8:55:d9:68:25:b0:2a:2a:e2:71:47:66:49:14:1b:1f:bb:
c3:b5:3f:e9:d8:8b:a9:12:bf:75:33:20:ad:7a:24:8e:9d:38:
c5:fe:9d:a4:de:95:43:d3:81:be:7b:6d:d9:72:48:f3:33:6f:
ac:e2:b5:8a:63:59:5b:92:be:a2:2f:6d:f6:fb:6c:9b:33:9b:
2e:b5:45:fa:95:fa:7b:98:ed:92:f3:7d:b4:20:f8:66:57:c3:
f2:fc:c2:6f:c9:b4:58:f9:86:6d:c4:b4:96:a7:f9:c2:09:7b:
98:3a:3e:30:75:56:4c:20:b2:dd:1b:cd:27:41:77:7c:41:e1:
1f:38:d1:2b:9b:97:c6:2e:00:e6:55:78:8e:99:df:3b:63:d1:
4c:95:a7:0c:47:16:6b:2d:e1:97:bb:34:ea:a7:1d:8c:71:85:
b6:09:24:e4:ae:74:fc:3d:a0:29:14:a8:ca:38:79:d7:46:b2:
11:34:0f:57:c5:8a:8f:20:63:f9:a6:56:66:33:49:20:d0:c7:
d3:b4:96:03:e0:b3:02:3d:07:1d:b2:7b:44:23:1a:8d:f6:e9:
ce:07:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org