Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Rwr6Tx5MHVV3lf8PJ6I2a6Cb9I8.roa
File: Rwr6Tx5MHVV3lf8PJ6I2a6Cb9I8.roa (raw, json)
Hash identifier: R/M7oPMxoiW2+C+erbSAlacAR0FM/JIid+r0ytWJxoY=
Subject key identifier: 47:0A:FA:4F:1E:4C:1D:55:77:95:FF:0F:27:A2:36:6B:A0:9B:F4:8F
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 03958E80
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Rwr6Tx5MHVV3lf8PJ6I2a6Cb9I8.roa
Signing time: Sat 01 Jan 2022 11:01:27 +0000
ROA not before: Sat 01 Jan 2022 11:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44647
IP address blocks: 209.16.140.0/23 maxlen: 23
92.53.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60132992 (0x3958e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 11:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=470afa4f1e4c1d557795ff0f27a2366ba09bf48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:08:bc:ef:0d:ad:59:2f:ef:b6:51:cf:e7:
c1:a5:b7:c3:d4:97:7c:2a:fa:cc:71:fc:eb:f4:87:
cb:36:a6:82:d3:a5:a0:38:2a:1b:10:a6:fd:d0:cb:
cc:c9:a9:df:e8:43:87:3d:32:c7:18:9b:59:5a:a7:
0f:45:d9:3d:d7:f5:29:93:cf:72:9f:72:61:6b:88:
c4:36:0b:3b:e5:4a:44:31:79:c5:95:93:c0:e2:f6:
a2:f9:af:2f:07:ec:50:86:35:5e:ec:2b:3c:fc:47:
80:1d:49:6d:79:10:58:e4:14:07:36:d5:3b:0e:2e:
7c:b7:dd:bc:35:b1:46:99:cc:73:2d:4d:5e:49:90:
f9:19:95:71:8f:51:49:77:7f:0c:1b:27:41:13:5f:
75:62:3a:aa:17:d3:e0:a3:79:09:76:f5:1a:d9:cf:
2f:5d:f0:06:73:9c:1f:71:0b:e0:e3:2f:fc:ee:5d:
45:b5:2a:f5:86:8f:8b:79:d5:7c:c8:02:7a:25:7d:
0c:cb:91:2c:c2:c9:1f:17:cd:5e:f5:4c:17:c6:eb:
d7:40:4f:6b:14:6c:4e:9b:b5:cb:ea:2f:8c:bd:c1:
ff:9d:47:46:c9:74:5f:a0:1d:54:1f:cf:0f:6c:e1:
b9:b4:5d:f2:65:02:18:6b:28:fb:0a:93:bd:44:6c:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:FA:4F:1E:4C:1D:55:77:95:FF:0F:27:A2:36:6B:A0:9B:F4:8F
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/Rwr6Tx5MHVV3lf8PJ6I2a6Cb9I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/19
209.16.140.0/23
Signature Algorithm: sha256WithRSAEncryption
15:ab:f7:28:b4:eb:0b:6f:df:16:ca:cd:6c:5c:94:d3:ea:b0:
46:23:e1:a6:cf:57:c1:e1:1d:03:d9:2d:1c:0e:01:d9:60:2e:
88:5b:8d:9c:e7:9d:55:b5:89:b6:3c:fb:7e:24:eb:be:b1:cd:
a1:83:3e:27:de:5a:4a:96:26:e3:66:0f:8b:ac:78:3d:43:33:
aa:77:69:60:e0:e8:2e:81:cd:af:4b:2e:c0:16:f9:d5:f9:fd:
a3:f5:9b:4e:56:fc:38:cf:0b:e5:f4:5b:18:9b:0d:48:a4:5a:
b7:dd:9d:f2:44:b6:3a:a0:e0:bf:70:79:c7:0b:1a:66:81:16:
2f:d2:d1:40:17:c5:4d:6c:57:36:bd:d0:76:d8:36:12:7d:c5:
d0:bf:6d:b9:8a:b5:58:34:22:22:bc:e9:5b:55:43:31:d6:7d:
a6:52:4b:5e:a9:88:b9:f8:80:9e:82:32:28:ca:b5:42:b1:f1:
52:29:c5:03:62:1b:cc:92:77:9e:8a:97:89:c8:f4:7c:c2:24:
c0:50:11:fa:92:d4:e3:a1:b9:39:c1:af:ce:a0:12:fc:0a:5e:
38:d4:1e:a2:0b:be:e6:50:1d:f4:b2:8e:52:07:82:45:a4:91:
4b:72:65:e2:31:d8:1e:f3:24:63:e4:5a:64:69:3f:9b:83:fb:
7b:55:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org