Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gHkNtMIpZOE5WCjCdJlFjDPLOIQ.roa
File: gHkNtMIpZOE5WCjCdJlFjDPLOIQ.roa (raw, json)
Hash identifier: 6NUECAcosS19lqmtMIkoT8jJLdtmnIIEdSrOuEoQL3g=
Subject key identifier: 80:79:0D:B4:C2:29:64:E1:39:58:28:C2:74:99:45:8C:33:CB:38:84
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0456720B
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gHkNtMIpZOE5WCjCdJlFjDPLOIQ.roa
Signing time: Mon 14 Mar 2022 09:50:39 +0000
ROA not before: Mon 14 Mar 2022 09:50:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 92.53.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72774155 (0x456720b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Mar 14 09:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80790db4c22964e1395828c27499458c33cb3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:d8:33:e7:8d:32:84:6c:c8:04:c6:a9:f7:
c2:b2:e5:7b:13:df:05:3a:3b:67:d2:43:0c:25:a8:
8a:a6:19:59:64:c3:b0:bb:18:91:5d:f9:27:32:99:
04:eb:46:d5:84:87:18:71:13:1a:fd:94:60:ab:10:
41:87:93:0b:fd:06:19:55:c9:dd:48:36:96:69:20:
07:52:11:cb:ab:d3:5d:ce:d9:03:f5:2d:8e:cb:f5:
6e:4b:6c:29:47:46:a6:92:ac:bc:a1:cb:00:2b:ac:
d1:e3:cd:48:e6:0b:80:21:86:6f:99:2e:ca:96:db:
c9:47:20:0c:da:13:34:c5:0c:df:74:73:c5:bb:23:
d7:9d:14:49:10:b4:fb:24:aa:8e:da:2a:17:a1:34:
80:41:e0:9d:48:29:14:cb:cf:71:26:94:68:30:d9:
45:eb:a5:e6:32:53:4c:81:7a:78:b6:92:c4:01:f9:
95:e2:3b:c3:8f:2d:28:51:53:a0:cd:6a:92:9c:3d:
c9:53:e4:ec:b4:c3:ee:e0:7a:f9:17:72:1c:0c:70:
5f:d6:9b:d7:92:eb:fd:48:0d:96:34:74:8a:8b:f6:
5e:26:2b:b4:cc:fd:d7:4e:06:02:f2:7b:e9:18:fc:
26:13:3e:2d:b2:fd:d6:17:06:7e:e6:d9:d3:2f:49:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:0D:B4:C2:29:64:E1:39:58:28:C2:74:99:45:8C:33:CB:38:84
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/gHkNtMIpZOE5WCjCdJlFjDPLOIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
43:18:51:1c:2b:b9:5d:77:09:f6:93:50:c9:85:1a:6e:a5:95:
00:67:c3:82:d4:f7:b8:28:b0:f0:2f:f9:d4:3d:7c:f3:3f:b5:
88:91:49:35:44:d1:fd:41:1d:8f:62:23:61:fb:c1:c3:4a:17:
fe:d4:3c:d9:ac:a1:00:4d:c7:24:6d:6f:52:aa:27:55:16:83:
9b:ca:9f:c9:de:2e:93:d6:9e:ba:2f:b8:d8:45:31:e8:21:1b:
cd:96:a0:6f:72:63:82:73:02:8f:bb:51:0e:8d:66:51:4b:09:
53:48:cf:31:4c:83:0b:eb:cd:93:10:71:18:c8:f9:8a:83:41:
5b:24:62:46:77:b7:6e:c0:52:5b:b6:29:6b:22:12:59:f3:22:
be:07:43:1e:b9:3f:7b:65:37:0d:9a:07:2d:ec:c3:16:a5:ad:
27:79:62:8c:37:1d:bf:ad:20:f4:65:b7:a8:4f:17:30:59:dd:
a7:d2:96:e0:dc:84:c6:8d:31:5b:f0:57:7e:b5:88:a1:ff:95:
e5:d4:83:84:98:73:32:39:c8:75:ca:64:8d:e4:cc:2f:53:aa:
78:53:10:84:2b:4d:99:37:53:f6:60:86:c5:ec:80:81:93:1e:
ec:59:22:dc:8d:d3:e0:69:64:ed:a8:2a:0e:22:10:e6:0e:31:
d8:e3:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org