Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/CZZOskQDQZUZqb8BgoLziDwmljM.roa
File: CZZOskQDQZUZqb8BgoLziDwmljM.roa (raw, json)
Hash identifier: EisjjKzf+AFenMNNYr25ew85Aeh+z/kRU/LxV1tL1JI=
Subject key identifier: 09:96:4E:B2:44:03:41:95:19:A9:BF:01:82:82:F3:88:3C:26:96:33
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 03CD3CD2
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/CZZOskQDQZUZqb8BgoLziDwmljM.roa
Signing time: Fri 14 Jan 2022 13:03:57 +0000
ROA not before: Fri 14 Jan 2022 13:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 92.53.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63782098 (0x3cd3cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 14 13:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09964eb24403419519a9bf018282f3883c269633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:cc:b2:f5:8b:ce:0c:05:a5:f7:22:ec:48:
90:30:a2:ca:e1:8f:86:36:d6:e2:ea:e3:e8:f4:aa:
c3:f8:3a:7f:f2:ee:20:0f:ee:65:74:49:b0:5c:ef:
33:47:33:4d:7b:53:dd:dd:fd:3a:f1:33:d4:e5:17:
1f:9d:bb:07:e7:d6:97:a1:67:99:64:b6:a6:a7:98:
b0:d6:d0:a6:e7:bc:eb:dd:b1:cf:7e:3c:4d:1c:68:
64:ef:b2:f1:dc:47:af:b4:83:58:24:2d:62:16:25:
32:3c:65:d1:a8:00:ba:3b:82:2b:9c:c0:45:9e:7a:
09:f6:0c:86:19:a1:5a:ab:2b:16:cf:14:7f:6d:82:
cf:45:3f:07:4d:b2:b1:4a:a3:00:91:f7:be:fc:c7:
74:5a:f8:d3:bb:92:f0:2b:9e:b6:cb:42:df:df:65:
0d:55:f5:ec:28:77:98:20:d5:42:6a:16:98:e6:7b:
65:18:cf:39:b3:44:b4:b3:43:2d:c6:73:49:6c:34:
ca:b3:1d:a5:69:00:89:cc:35:78:aa:1f:5f:60:54:
c0:80:68:1e:eb:15:57:07:be:0f:71:b8:ca:d6:02:
82:23:be:df:70:da:f1:75:dc:dd:01:0a:68:79:40:
25:bf:b4:a2:25:4f:74:b5:00:68:b9:0e:a9:e7:20:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:4E:B2:44:03:41:95:19:A9:BF:01:82:82:F3:88:3C:26:96:33
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/CZZOskQDQZUZqb8BgoLziDwmljM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
44:39:03:02:cb:f6:51:ea:67:fd:09:c5:91:c5:47:5c:fd:27:
ed:1d:93:1f:28:8c:fa:80:6b:1f:47:22:ab:53:0d:de:9f:37:
36:a5:34:51:f9:6b:f9:58:69:3e:a9:74:52:3c:08:48:84:49:
80:fc:c5:02:b6:32:2d:a0:33:57:81:23:92:87:d4:73:cb:97:
0c:48:ab:d6:73:97:ee:b6:db:eb:70:43:ec:3c:49:bf:82:74:
4c:37:74:1f:80:de:e6:64:ba:b1:ab:8d:9e:45:74:fc:2e:60:
04:d1:47:aa:1a:c4:4c:17:25:3b:41:96:15:17:0b:77:54:c3:
95:a7:41:32:2e:24:06:fb:c2:5a:52:ac:87:81:2f:ec:4e:aa:
af:a8:33:53:80:f0:3d:d1:40:6e:37:7a:45:d4:bb:f9:c4:0a:
82:e8:dd:74:a8:15:14:97:43:0e:02:c7:44:89:26:e9:f3:53:
d1:42:62:3a:46:35:94:d7:0c:36:7b:9e:b5:04:8a:e7:37:5f:
d3:c2:1b:a9:88:a4:62:5b:97:04:07:9b:b7:bf:e0:fd:34:e9:
3a:62:e3:50:11:e5:18:c3:54:b0:f9:82:54:ee:6f:43:93:43:
02:8e:a4:6c:59:fb:bf:4b:00:86:cf:9d:a8:06:e9:36:2d:c2:
c6:e7:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org