Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/9pZpwSPR8V_1pX0vFtu1hdVj8UU.roa
File: 9pZpwSPR8V_1pX0vFtu1hdVj8UU.roa (raw, json)
Hash identifier: EFuZN9lteWNzcgEPz07Q8omhpuYyRHun3vBnnA3XsWY=
Subject key identifier: F6:96:69:C1:23:D1:F1:5F:F5:A5:7D:2F:16:DB:B5:85:D5:63:F1:45
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018520994B67C6CBB314F41C4917F2BCE826
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/9pZpwSPR8V_1pX0vFtu1hdVj8UU.roa
Signing time: Sat 17 Dec 2022 14:59:55 +0000
ROA not before: Sat 17 Dec 2022 14:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212166
IP address blocks: 92.53.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:99:4b:67:c6:cb:b3:14:f4:1c:49:17:f2:bc:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Dec 17 14:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f69669c123d1f15ff5a57d2f16dbb585d563f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:e8:96:04:57:fb:05:ab:08:f1:75:f0:de:
d6:98:98:be:e9:55:9d:e9:d4:f3:e4:db:eb:01:48:
fb:ea:f7:f3:d5:2d:59:27:9b:8b:42:f1:c3:3e:e8:
b2:06:c9:bb:33:73:6b:33:40:09:e6:07:67:ec:4d:
dd:14:66:82:da:23:0f:de:d7:05:c3:cf:da:3c:de:
8e:63:a5:07:59:da:c1:12:5b:3f:bc:da:7b:2b:d6:
20:4a:58:fa:66:09:ab:ab:86:0b:54:bc:dd:86:a8:
55:71:b6:d8:15:fb:66:d2:6a:34:14:92:87:04:a4:
4d:fe:66:ad:1d:af:e5:0b:e8:14:6e:af:31:13:a5:
f0:fa:59:3c:81:5c:b9:64:9b:f0:b1:38:20:a1:90:
5a:e3:d3:dc:bf:93:5a:7d:d7:d1:6c:bb:d0:b6:a4:
71:a4:ea:b2:e7:58:fa:84:76:08:8b:88:68:08:b9:
5b:1a:8e:a6:7e:cf:c7:e5:93:7e:18:d7:57:b7:dd:
13:bb:e4:48:88:de:53:0d:04:f3:bd:54:f8:6b:91:
ec:88:c1:16:ee:47:48:9e:bb:77:fa:ba:7d:ac:46:
8f:92:04:05:46:22:01:14:25:a0:d7:e8:de:47:16:
13:5a:fe:21:55:26:78:d1:61:22:a7:e5:8b:ce:97:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:96:69:C1:23:D1:F1:5F:F5:A5:7D:2F:16:DB:B5:85:D5:63:F1:45
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/9pZpwSPR8V_1pX0vFtu1hdVj8UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.172.0/22
Signature Algorithm: sha256WithRSAEncryption
53:22:39:d7:34:7c:04:34:6c:22:6b:6c:f8:33:a1:b5:cc:f0:
62:b7:d8:af:4e:84:27:22:5d:02:c0:9d:c8:17:fa:1d:e6:af:
ef:10:5e:44:7c:3c:15:ed:2c:d3:2c:a7:82:8a:e1:58:b8:78:
1d:bb:eb:de:ad:03:91:11:06:04:b8:2a:a2:f7:63:7d:2f:b7:
74:b1:5c:62:5c:9a:9e:4c:9a:a9:2e:f1:0c:87:78:73:e8:5c:
c5:45:04:4d:3b:ff:6e:8a:f4:b2:5b:cd:0d:38:72:13:41:a5:
c1:28:4e:04:98:1c:48:be:29:ba:54:6e:b1:0f:64:68:8d:92:
81:89:c7:f4:61:7f:b9:f1:c9:a4:4b:c6:85:80:f1:a2:f3:2f:
69:f9:5a:2d:99:81:74:08:fd:a0:c3:a8:b1:5d:41:8f:78:63:
52:0c:1e:76:1d:96:c2:52:cf:0b:87:81:6b:13:6a:f2:cb:55:
0a:bd:77:bc:bc:5b:13:0f:53:22:e9:bf:ac:3d:03:c3:5e:65:
59:6f:74:0d:ff:cb:71:b8:04:f7:64:b9:bd:cf:42:cd:c1:e1:
4d:21:c6:04:3b:fb:f4:7b:7a:1d:f7:c8:db:91:ec:d8:85:4b:
d9:f0:3a:4a:d8:b3:67:bb:cc:04:66:76:cf:76:8a:3a:f2:67:
7a:fc:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org