Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/a7G8HGawOGv_iDjJ8TBqGFJZNVw.roa
File: a7G8HGawOGv_iDjJ8TBqGFJZNVw.roa (raw, json)
Hash identifier: MFZDRO2IQV5Zm6/m6oqU5KsFcvb4qN7PDMKoD2Fi4Ug=
Subject key identifier: 6B:B1:BC:1C:66:B0:38:6B:FF:88:38:C9:F1:30:6A:18:52:59:35:5C
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01838A0B205C0C2ACE6569A34DD67F57616C
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/a7G8HGawOGv_iDjJ8TBqGFJZNVw.roa
Signing time: Thu 29 Sep 2022 16:18:48 +0000
ROA not before: Thu 29 Sep 2022 16:18:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25098
IP address blocks: 92.53.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8a:0b:20:5c:0c:2a:ce:65:69:a3:4d:d6:7f:57:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 29 16:18:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bb1bc1c66b0386bff8838c9f1306a185259355c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:5c:12:11:63:b2:0a:d5:79:7f:ff:72:18:
f3:32:da:d1:03:4c:f4:d8:44:06:15:d0:f9:74:ef:
f4:98:04:aa:51:0a:4e:51:9c:35:44:15:12:c6:ec:
07:60:1d:d8:96:77:9c:5e:bc:86:ca:65:58:28:78:
77:3a:44:e9:03:e4:45:f1:31:9f:23:49:d0:c3:3a:
36:05:f4:4d:ed:51:f5:ff:18:42:a7:e0:01:73:7e:
fe:96:6f:18:1b:b4:66:f0:01:3c:f6:2a:8b:f4:95:
c6:e8:c5:5d:51:63:9c:37:49:a4:4d:fd:cc:40:7b:
31:32:85:2d:dd:a3:a7:c5:b4:9c:8a:cf:fc:cf:f7:
c8:ae:e8:e9:10:ac:67:36:8f:e4:ee:45:3d:d4:00:
81:81:2c:91:61:f1:7c:73:64:7c:02:f9:5e:1e:3c:
e6:ff:aa:19:74:5a:83:67:a8:c4:1e:82:a6:b3:fb:
e0:dd:5c:9d:f0:6b:a9:35:43:5a:5d:4f:2d:b6:07:
a5:e1:8d:eb:02:af:ea:43:57:7c:10:d9:2e:90:b0:
b4:0d:81:6b:51:9e:78:cf:32:d5:92:bc:15:68:a5:
7d:26:41:22:7b:aa:69:62:24:f8:3e:90:a4:40:f7:
88:e1:81:60:04:15:46:b0:eb:be:3e:33:cb:a9:c6:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:BC:1C:66:B0:38:6B:FF:88:38:C9:F1:30:6A:18:52:59:35:5C
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/a7G8HGawOGv_iDjJ8TBqGFJZNVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:aa:4f:2a:9b:24:a9:89:43:8d:0c:b1:22:f3:51:9b:1a:77:
0e:43:49:e9:54:85:c8:2f:22:3c:53:5b:ca:20:b3:5f:29:1d:
8e:36:ce:86:5f:e6:94:80:f2:48:e3:62:f1:07:94:46:27:20:
19:51:90:c1:56:36:38:12:48:5d:c3:60:50:c5:73:0f:77:c1:
fd:43:04:93:ca:a4:35:79:be:be:fe:fb:2a:4f:4b:eb:76:01:
e2:d7:8f:33:e8:49:e6:45:1b:ca:e3:f0:66:7d:c1:6d:aa:9e:
fa:41:cf:97:b0:94:e2:60:38:20:5d:a5:dd:b0:e6:5f:21:7e:
a6:fa:4e:58:65:dd:4f:35:6f:6f:69:17:0d:d4:47:37:46:86:
ea:1d:a8:be:7b:76:4e:84:04:b9:d9:9d:b3:7c:04:50:fb:ff:
f7:f2:fe:30:92:e7:a2:bc:91:82:6c:90:0f:81:3e:84:71:5e:
ab:f3:88:aa:24:22:25:7d:e3:ba:a7:46:53:6a:1a:85:bf:49:
af:01:af:e0:5b:72:c4:e3:c7:72:a0:c9:0c:cd:59:d4:5f:d4:
8c:70:d7:f0:fd:a8:7b:f9:ef:d8:99:b2:38:9b:74:6b:2e:bf:
3d:38:d6:cc:20:5c:c1:e5:49:18:29:b5:52:f0:77:bc:35:ee:
50:e9:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org