Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/P7WJ86r-Ea9LoIhaIH277ol9XV8.roa
File: P7WJ86r-Ea9LoIhaIH277ol9XV8.roa (raw, json)
Hash identifier: 7hQ8B6FwZdcU/dh6LgmDXnafFC/p6R2XKCl4JTALijM=
Subject key identifier: 3F:B5:89:F3:AA:FE:11:AF:4B:A0:88:5A:20:7D:BB:EE:89:7D:5D:5F
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 156605A3
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/P7WJ86r-Ea9LoIhaIH277ol9XV8.roa
Signing time: Sat 01 Jan 2022 11:55:40 +0000
ROA not before: Sat 01 Jan 2022 11:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208119
IP address blocks: 92.62.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359007651 (0x156605a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 11:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fb589f3aafe11af4ba0885a207dbbee897d5d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:0a:fc:75:74:6b:1f:33:0d:06:62:c7:1d:
33:c4:15:38:7b:ee:40:97:bb:53:10:04:39:b8:85:
8d:8e:2c:48:63:dd:f8:23:fa:58:b6:02:e3:9c:52:
ca:d1:4c:e9:ad:d9:f1:5b:b9:19:cc:85:06:1a:8d:
20:72:12:55:69:1b:6e:54:7d:e9:77:52:af:66:0b:
6e:4b:74:a4:ee:04:ce:13:db:bc:59:ae:10:26:9a:
80:6c:88:a3:88:8c:27:b6:9e:36:4c:a1:1e:4b:59:
5f:2c:27:d5:07:d1:f3:e9:6d:f9:12:22:34:76:c5:
5a:91:24:7c:56:ee:db:09:1c:3e:c1:ba:ec:a3:aa:
4e:67:9e:cb:c6:c9:2e:66:10:77:69:d1:c0:98:c4:
36:06:20:40:f2:61:7c:89:ac:f8:ad:f0:77:39:bf:
b2:d9:33:e6:5a:a9:21:06:b7:ec:15:29:a3:6d:d0:
40:91:92:1b:26:cb:85:d6:58:ae:1a:e8:6c:39:f9:
c7:16:c8:aa:dc:90:e9:85:e4:5d:da:38:0e:74:1a:
64:a1:d6:0b:1b:56:5e:c7:23:09:c2:08:c5:8b:c3:
09:7e:4d:a5:bc:eb:89:16:e1:c8:09:e9:bb:91:46:
fd:d8:d5:51:60:24:c0:ca:c1:18:9a:a8:4a:dd:de:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:89:F3:AA:FE:11:AF:4B:A0:88:5A:20:7D:BB:EE:89:7D:5D:5F
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/P7WJ86r-Ea9LoIhaIH277ol9XV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:68:75:4b:54:3d:78:e2:72:1c:e0:bb:fb:db:d9:ff:08:d3:
4f:c6:05:a5:25:85:b2:bb:d8:a3:4d:39:b5:8b:df:e5:28:16:
db:62:87:a5:49:27:50:de:0f:a5:31:3a:aa:b5:ad:85:4d:c3:
32:e7:20:83:79:c7:f7:c8:a1:aa:9d:7d:f6:bd:97:21:9c:4a:
37:a9:8c:de:b0:62:50:6f:c4:24:39:c1:47:89:65:bd:8f:de:
5e:6d:a1:31:36:62:a0:c3:45:e4:ed:23:17:f8:62:3a:cb:73:
6d:30:da:9d:5e:8e:cc:7f:19:3e:7f:3d:c1:48:28:06:9c:71:
e6:f6:0b:a4:ab:c8:f5:8b:7b:64:f3:d7:25:59:80:3f:f2:ff:
7d:ed:f2:8e:d4:a8:2c:d0:42:9a:d5:82:c5:3b:90:a7:bf:81:
58:17:79:15:a2:8d:df:87:ea:e2:ab:97:b7:80:7e:92:0e:5a:
7e:a0:4b:87:0f:6f:b0:72:89:66:74:fa:3f:2a:4e:d3:fe:50:
65:53:2a:23:04:62:82:5e:bc:08:4a:73:74:0d:72:ef:9c:46:
56:b7:e1:1f:ba:83:6b:48:03:63:8e:c2:44:6c:57:01:75:54:
52:24:34:65:f7:e2:23:29:54:ce:1e:71:b8:c3:45:8e:8d:1b:
64:36:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org