Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/6nLFhWAW4CsnabuZPWQNxeh6XtQ.roa
File: 6nLFhWAW4CsnabuZPWQNxeh6XtQ.roa (raw, json)
Hash identifier: oRPppX9RQ66bUp54H5SOcZd2KOFgeFxf77bXnQVKZes=
Subject key identifier: EA:72:C5:85:60:16:E0:2B:27:69:BB:99:3D:64:0D:C5:E8:7A:5E:D4
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01840037DE88BC12A46B34B91A939B5B0409
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/6nLFhWAW4CsnabuZPWQNxeh6XtQ.roa
Signing time: Sat 22 Oct 2022 15:02:52 +0000
ROA not before: Sat 22 Oct 2022 15:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.53.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:37:de:88:bc:12:a4:6b:34:b9:1a:93:9b:5b:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Oct 22 15:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea72c5856016e02b2769bb993d640dc5e87a5ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:aa:a8:b3:f7:cf:97:f3:c1:9f:dd:3b:60:
a0:e9:53:17:bc:dc:cc:2b:34:71:5a:47:c5:ea:62:
0f:d7:26:e1:65:3b:8d:d2:77:95:0e:27:74:51:c5:
fa:a9:2d:77:2f:f6:ee:76:db:20:80:ba:5e:e1:e1:
8d:ba:59:62:7c:20:06:8e:bb:d5:26:96:42:2e:d8:
23:4a:61:17:1c:5c:d5:bf:34:e5:3c:58:8b:8f:1c:
c3:06:7e:a2:fe:ad:91:e8:83:44:68:c8:4a:85:a4:
ee:bb:b7:ef:53:b0:72:16:b6:a5:e8:3a:67:3a:43:
a5:58:96:10:62:f1:a9:d4:3d:ba:91:cb:8c:ce:c3:
ab:86:e5:fb:60:2c:36:af:a9:43:bf:9e:ed:34:c0:
6b:fb:80:32:84:9a:0a:a8:06:f5:ac:8f:04:04:4c:
34:62:7a:5e:fa:b6:34:31:26:10:a5:af:80:b9:3a:
89:61:ae:c1:d3:e7:4c:4a:6a:db:b0:d3:8d:fc:32:
a8:c5:8d:fb:8b:c1:32:f8:fb:8f:87:15:83:60:94:
7a:08:40:91:e1:76:38:40:50:89:0c:f9:5b:3e:7b:
f7:21:16:25:d5:67:9b:51:d2:78:97:a0:d1:9c:5a:
80:0e:71:5b:21:76:58:6c:40:32:83:aa:d7:77:5e:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:C5:85:60:16:E0:2B:27:69:BB:99:3D:64:0D:C5:E8:7A:5E:D4
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/6nLFhWAW4CsnabuZPWQNxeh6XtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:11:a9:47:37:b9:a3:a4:89:e8:1b:0c:e9:0c:15:09:49:5a:
eb:bd:f0:e5:44:9c:ad:07:db:64:ff:c5:52:d6:90:b7:86:4a:
fe:f0:14:14:ea:f5:e5:e1:bc:da:7e:99:7a:22:a1:4c:f9:3e:
a6:c1:e3:82:a1:2b:5a:cf:89:ed:5b:7a:96:4e:78:7d:86:65:
f7:33:bd:6a:4e:89:4b:48:3c:1a:12:e7:51:b8:54:a6:83:30:
05:15:09:80:33:da:98:7b:0e:94:0b:91:6e:80:76:b0:89:0b:
22:50:06:24:2f:9e:20:f2:d2:12:88:56:17:bb:81:2c:a2:01:
ae:82:fc:6d:a7:47:d7:c9:3a:22:e2:4f:f3:a0:3e:48:eb:bd:
6c:ee:b6:44:6e:45:2f:b5:7c:e2:87:b7:e2:3c:e6:f4:b7:45:
bf:ab:49:8c:fc:64:e9:2d:a5:b1:d4:62:cb:54:7e:03:bd:c8:
e0:06:03:6d:2f:8e:cb:6b:d3:54:34:1e:97:3d:ac:62:ee:d9:
00:8d:e7:f4:3e:20:a2:8f:c6:2d:2e:31:9d:62:c1:f4:a0:f4:
72:a0:89:e1:4b:55:d1:43:ac:d6:a6:22:1c:78:45:e2:a2:a7:
1d:3b:4c:e9:11:cd:0d:06:82:5a:69:14:51:5c:45:c8:64:d2:
ef:ac:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org