Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Cz7HD59ZbL5FPhUXY1498tWtkMw.roa
File: Cz7HD59ZbL5FPhUXY1498tWtkMw.roa (raw, json)
Hash identifier: 9XUbTdbl/mLjUAtuV61s1kAeCK28WiEVzTyl+8i4cX4=
Subject key identifier: 0B:3E:C7:0F:9F:59:6C:BE:45:3E:15:17:63:5E:3D:F2:D5:AD:90:CC
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 048445F7
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Cz7HD59ZbL5FPhUXY1498tWtkMw.roa
Signing time: Wed 30 Mar 2022 21:36:16 +0000
ROA not before: Wed 30 Mar 2022 21:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 92.53.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75777527 (0x48445f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Mar 30 21:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b3ec70f9f596cbe453e1517635e3df2d5ad90cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:52:9f:b3:54:32:07:60:fd:b9:13:b1:d6:
06:9e:23:52:34:56:47:7e:ce:27:63:52:68:06:f4:
db:d3:c7:86:fc:c5:63:44:b0:53:02:b4:e4:28:45:
92:2d:ac:84:20:3d:ef:da:88:ea:4b:66:a8:2e:3e:
d2:d5:4c:b4:f7:d5:ac:8e:5c:22:0e:67:d5:77:e8:
0d:ff:fd:32:2f:c4:2d:04:ce:18:47:e2:72:1b:85:
88:3b:0f:55:c6:cc:a1:4c:38:51:1d:ca:2d:91:71:
92:21:0c:2b:57:01:76:80:61:3d:9f:57:dd:af:41:
7c:09:14:24:1d:69:31:1a:51:9b:66:f4:ce:40:cc:
c3:7f:54:1a:72:30:b1:25:ba:0c:e7:c4:8a:ff:43:
a0:31:e6:dc:27:0a:d2:4f:e4:64:57:d3:dc:3b:72:
b3:98:c6:4f:c9:e5:c7:a3:b3:36:ce:73:fc:b7:d9:
8e:49:08:82:ae:33:4b:26:32:fa:da:f8:09:87:c1:
b0:a0:60:8d:44:52:f2:b7:b4:85:1f:13:68:92:fe:
18:83:b5:4b:8a:2b:a8:08:f5:c1:e4:f4:de:e8:98:
c8:69:0a:9e:0a:76:a1:f4:0c:49:44:34:88:d7:ff:
02:5d:b3:db:e4:8c:b5:d5:e7:27:8a:c4:11:23:fc:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:C7:0F:9F:59:6C:BE:45:3E:15:17:63:5E:3D:F2:D5:AD:90:CC
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Cz7HD59ZbL5FPhUXY1498tWtkMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.164.0/22
Signature Algorithm: sha256WithRSAEncryption
79:df:54:13:61:e0:a8:33:59:ec:dc:93:40:dd:45:88:86:1e:
c1:14:67:b0:b0:1f:f0:0a:78:d8:a3:c5:d3:9e:b5:ac:68:2e:
3a:4d:68:d9:93:bb:bd:6d:1f:db:09:c5:a3:55:e8:6b:c4:03:
94:c6:0e:24:a1:cf:11:74:45:18:14:b5:fa:e1:bc:b9:76:eb:
9b:17:04:65:c3:e1:ec:93:62:c1:00:2f:03:73:87:fc:13:20:
b5:4c:7c:54:7d:93:7a:ad:39:de:3c:c8:03:9f:e3:f2:27:a2:
dd:e9:0f:24:60:12:f3:53:db:30:48:42:f2:40:0b:67:0b:7f:
df:88:71:01:73:1c:b2:f4:b1:13:93:c6:58:3c:7f:3d:26:4b:
f1:98:a7:2b:e7:bc:ef:d4:86:15:63:18:ab:9a:3f:76:0b:f7:
60:e5:1f:7c:9a:17:89:ce:7b:51:bc:d4:bd:f7:1d:f7:20:8c:
91:68:6f:1a:d4:ee:ec:a6:71:e9:26:b3:ab:57:d1:79:78:84:
ca:e3:c1:d3:9d:19:82:91:75:40:fa:e2:ee:d6:3d:54:c0:fc:
48:b4:ae:3c:bd:9f:e7:11:e8:5d:4e:1c:8c:1a:2f:15:33:d4:
f1:17:c6:56:93:ea:b5:96:af:a5:5a:72:07:c0:50:29:bf:5a:
34:eb:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org