Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ba48rHbTiuznEeIMMedv2WmI5HE.roa
File: ba48rHbTiuznEeIMMedv2WmI5HE.roa (raw, json)
Hash identifier: og+12yZsU72+BVoYPNXhAbFSdi40lnwIVV/9Brb/t1A=
Subject key identifier: 6D:AE:3C:AC:76:D3:8A:EC:E7:11:E2:0C:31:E7:6F:D9:69:88:E4:71
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0184540BCC8D205C2885B2C28DA4B90D6BA7
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ba48rHbTiuznEeIMMedv2WmI5HE.roa
Signing time: Mon 07 Nov 2022 21:42:50 +0000
ROA not before: Mon 07 Nov 2022 21:42:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400536
IP address blocks: 92.53.184.0/22 maxlen: 22
92.53.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:54:0b:cc:8d:20:5c:28:85:b2:c2:8d:a4:b9:0d:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Nov 7 21:42:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dae3cac76d38aece711e20c31e76fd96988e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:e5:f4:b5:dc:72:5c:1a:f2:67:b8:53:f3:
b5:92:06:cb:15:71:0a:63:04:2a:bb:9f:59:c3:90:
e8:3a:47:df:59:c6:ca:4c:48:30:0f:f8:83:e4:14:
22:83:34:2a:f5:4a:45:84:85:af:d3:08:7f:51:92:
4f:37:10:b5:6a:35:55:c3:7c:a2:46:53:e8:a1:88:
66:bf:a2:91:e0:cf:23:27:cb:08:0f:c0:9e:f5:95:
40:d8:24:73:9b:bb:3e:68:6d:5c:8a:a1:20:ea:b2:
38:71:93:6e:87:54:5c:3e:79:a2:e4:1f:4a:dc:88:
5e:dc:91:63:ad:e9:cb:c5:35:80:af:53:82:cb:14:
9c:3e:1d:e7:1b:39:9b:85:e9:77:a9:28:52:ae:ab:
b9:9e:ce:5d:f1:94:0d:24:10:2c:f5:ce:c3:97:09:
b0:80:ed:77:f3:e2:89:72:f6:fc:13:e7:0c:69:fc:
ff:27:40:ee:9d:38:e3:cb:44:b5:7b:72:ba:b0:34:
fa:02:89:66:ff:dc:1f:aa:ea:2e:0e:64:fc:2b:fb:
cf:18:47:24:02:bb:d1:73:a9:88:f7:5b:f5:d6:d8:
3e:38:12:8d:69:72:46:4e:75:77:79:48:0d:09:38:
13:1f:6e:69:53:9f:31:aa:42:87:d7:38:28:ea:d1:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:3C:AC:76:D3:8A:EC:E7:11:E2:0C:31:E7:6F:D9:69:88:E4:71
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ba48rHbTiuznEeIMMedv2WmI5HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.168.0/22
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
58:2a:51:c8:bb:9a:aa:65:fd:28:73:81:70:97:b2:54:81:4e:
88:22:59:bf:d7:9f:b2:1c:7f:e7:28:2f:b5:5d:7e:b1:36:86:
f5:67:47:42:9b:12:ff:58:20:9b:52:68:ac:22:55:f3:b0:2c:
b3:98:47:41:d2:ab:21:67:ae:39:72:ab:55:f8:19:c2:29:12:
bb:c4:fe:85:61:9b:da:fa:01:3f:14:f2:70:69:64:65:aa:73:
ca:3f:a1:86:7b:25:3c:a7:0c:d8:0c:a0:c4:03:c7:1c:57:80:
62:d1:b8:d8:59:b8:ed:1b:e8:bf:a6:02:f9:4b:69:8e:73:24:
46:45:e5:13:18:35:2e:46:4d:ce:0f:40:e5:9a:99:bf:5a:56:
db:17:3d:97:41:82:6d:e9:28:ae:b9:56:34:8d:63:8c:1e:4e:
c5:cd:bb:6b:d4:3c:b6:19:bb:cf:b1:97:62:25:87:97:16:0c:
97:0c:02:76:0f:26:e1:8a:56:5f:5c:0e:5f:81:4c:f9:81:22:
86:82:5c:38:c2:ba:4d:1d:49:3b:61:1d:e0:12:ab:22:21:29:
d7:82:63:4f:2f:f0:0d:75:d7:e2:b2:94:13:02:ba:73:41:3e:
fc:f0:0a:3e:b8:1f:61:33:30:17:7a:2c:a9:be:52:c9:bc:23:
1f:6d:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org