Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/XouSfx7tMoZGN4CpNZdEWCEV0bg.roa
File: XouSfx7tMoZGN4CpNZdEWCEV0bg.roa (raw, json)
Hash identifier: XIJ70vME5bQOrABU8I6mlIpihDQj7hcvOqJJ7ogSt4k=
Subject key identifier: 5E:8B:92:7F:1E:ED:32:86:46:37:80:A9:35:97:44:58:21:15:D1:B8
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 06A8714D
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/XouSfx7tMoZGN4CpNZdEWCEV0bg.roa
Signing time: Sat 01 Jan 2022 04:56:01 +0000
ROA not before: Sat 01 Jan 2022 04:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50469
IP address blocks: 153.92.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111702349 (0x6a8714d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 04:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e8b927f1eed3286463780a9359744582115d1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:e3:cc:9f:05:0b:80:21:5e:9e:2d:62:9a:
8d:57:58:9c:42:83:d3:3b:7d:a6:d4:64:4a:66:ec:
bc:78:51:2f:db:a2:1f:24:75:22:b2:f0:c1:47:29:
f2:b3:73:be:17:4f:41:c5:5e:54:00:92:a0:d7:ec:
bc:0d:e6:3d:d9:35:d6:d5:b8:96:37:ca:a7:61:4d:
2b:64:6e:4a:d6:0e:46:20:1b:a6:e8:45:bd:89:d8:
8f:5b:33:4e:14:26:c8:05:11:a0:0b:83:5c:97:bd:
51:81:4e:6c:86:c8:60:aa:d5:6a:cb:4f:a9:38:eb:
3c:c5:0f:90:f7:15:63:81:c9:54:8e:dc:96:71:50:
6e:64:1f:57:06:da:78:23:71:5b:ef:c7:d4:c9:95:
6e:a8:9e:e9:25:8e:87:4b:b0:fe:38:09:8b:85:df:
cc:3b:f1:f3:6b:7b:92:4e:1a:69:53:31:c7:86:3b:
63:3c:e7:16:3a:8b:78:5e:c2:56:ef:ef:0b:b0:00:
b5:2b:6d:5d:77:3b:6d:21:68:e7:40:35:18:56:e9:
07:7e:7d:6e:be:12:be:d2:e2:2c:b6:31:47:31:15:
95:1c:7b:09:bc:d0:9d:c0:8f:a5:67:90:81:96:40:
84:40:b6:3b:d8:7c:1e:06:9e:1a:56:aa:41:bc:22:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:92:7F:1E:ED:32:86:46:37:80:A9:35:97:44:58:21:15:D1:B8
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/XouSfx7tMoZGN4CpNZdEWCEV0bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.187.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4a:43:2b:2a:f9:8a:dc:82:02:51:c3:57:9f:47:74:90:9d:
30:93:69:bc:21:9e:47:8e:c8:ce:ff:59:f1:bb:04:ad:d7:05:
8d:34:d1:2d:9b:60:64:4b:91:16:1a:58:27:45:09:7f:3a:57:
2c:09:e3:0c:2f:7d:73:d3:df:69:8b:7d:60:ef:b6:c6:f5:36:
7e:bd:86:dc:d8:0a:e0:60:9e:3b:9b:84:5f:8d:17:36:c7:82:
fd:ef:04:c5:46:71:d7:f2:d9:d8:85:90:c2:7e:cc:e3:46:6e:
a6:2e:ad:53:65:26:3a:f4:02:1a:92:29:f5:f9:fb:b7:29:48:
43:39:2c:e1:bd:4f:f1:55:78:56:d9:44:bf:56:e6:b9:0b:89:
ee:85:58:a0:8a:4d:58:a0:ab:13:f7:18:4e:18:07:84:7c:c1:
21:bc:bf:53:66:ab:80:18:4f:97:72:7c:62:c4:8b:eb:4e:d2:
1f:ac:63:d5:81:f1:49:98:63:fa:9a:68:bf:56:80:9c:db:c1:
04:d6:7a:64:22:4e:e8:22:ad:62:71:a3:c6:14:7f:af:47:42:
78:b3:aa:fb:03:c3:54:66:5d:65:02:bf:95:b7:9a:ab:8c:b9:
46:78:73:ee:45:70:a6:c9:8d:05:bc:1e:1e:df:52:5b:42:1d:
1a:c3:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org