Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3YwzViXVQylgmUfsrEWTG5R4gkI.roa
File: 3YwzViXVQylgmUfsrEWTG5R4gkI.roa (raw, json)
Hash identifier: Ain1l5XkM8XJAdYs4eeD9tBtSpeeGKLX8Ruhy/+Obks=
Subject key identifier: DD:8C:33:56:25:D5:43:29:60:99:47:EC:AC:45:93:1B:94:78:82:42
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018225D48E7AA7D39BA598C9DA8E48F846B7
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3YwzViXVQylgmUfsrEWTG5R4gkI.roa
Signing time: Fri 22 Jul 2022 12:14:23 +0000
ROA not before: Fri 22 Jul 2022 12:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 92.53.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:d4:8e:7a:a7:d3:9b:a5:98:c9:da:8e:48:f8:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jul 22 12:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd8c335625d54329609947ecac45931b94788242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:01:95:30:57:33:d5:22:fc:f1:d6:13:f2:
cc:24:d8:d9:b2:fd:40:73:28:16:1c:c7:03:24:a3:
1a:1f:54:6f:39:5e:74:94:e4:33:19:f4:ee:11:5b:
eb:0b:a3:2e:29:41:b6:b5:31:56:3b:0b:ee:a8:75:
f3:4a:a8:41:b1:9b:89:dc:f9:77:bc:c6:55:46:ed:
43:41:cb:b0:6e:75:9d:83:58:f7:ef:45:dc:d1:c1:
c0:bd:6a:4e:39:8d:b7:b3:97:ca:52:e1:9f:d7:3c:
cf:74:fc:96:d6:e9:62:ba:50:d5:1b:f7:ca:73:86:
59:94:25:54:e3:f9:bd:c0:3d:33:a9:e6:76:e7:5e:
4c:21:1e:66:24:03:2b:57:c7:06:8b:e5:37:50:17:
39:28:de:34:9e:12:52:f4:fd:e6:70:f0:35:77:27:
3a:53:52:56:94:6d:b7:8d:f5:6e:8d:b9:4a:24:1e:
15:78:58:fd:bb:58:78:b7:56:cd:79:1e:f0:68:13:
a3:47:67:e9:a3:f3:46:16:3b:39:c9:45:da:3a:6a:
c7:83:37:b2:72:98:54:a6:e9:09:56:69:09:38:00:
3b:6f:fc:c2:0a:8f:8b:63:cd:ad:37:91:0b:12:74:
25:ea:62:52:aa:13:72:6e:7e:ea:91:00:6f:a8:b8:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:33:56:25:D5:43:29:60:99:47:EC:AC:45:93:1B:94:78:82:42
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/3YwzViXVQylgmUfsrEWTG5R4gkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:96:92:5f:53:70:cf:31:0c:73:aa:62:64:d0:49:a7:94:11:
35:fd:77:68:7e:4b:49:e3:0d:8e:b2:2e:25:db:62:6f:eb:66:
cb:93:5f:e8:29:b1:14:d2:d0:fa:c4:c7:5f:78:f5:74:a1:8b:
95:f8:08:03:d4:b1:76:8c:e0:8a:48:9d:ce:dd:85:66:05:0b:
42:f3:72:bc:65:43:cd:0b:37:e8:5f:b4:93:47:23:da:12:77:
8c:a2:0f:ce:de:c6:f9:87:7b:58:02:ff:f7:40:30:bf:b1:a0:
94:78:04:10:b2:22:93:ed:d1:f1:b8:22:b2:ea:27:e6:33:75:
a8:6b:d7:43:c3:80:6d:81:4b:16:ea:07:d6:08:f1:ad:ac:87:
17:3b:f1:30:ba:e7:27:49:72:e9:bf:15:0b:86:df:ad:47:ad:
41:bd:3a:de:b8:c1:3a:b5:3c:b6:3b:1d:84:94:8b:db:da:1d:
e5:c3:fa:ae:c8:0e:e3:bf:f6:17:09:3c:28:4f:e7:ce:e4:c8:
ed:c3:23:06:0e:3f:51:a0:8e:5c:94:0b:51:a6:bf:85:a7:51:
0c:9a:20:68:03:c8:dc:40:5e:1d:58:0d:45:a5:5d:37:06:5b:
5f:e3:39:c0:dd:31:66:f9:4a:8c:57:42:af:0b:0a:76:e2:a4:
f8:82:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org