Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/xVNtLZ8gUYi8NNr6l2deA3Laxi4.roa
File: xVNtLZ8gUYi8NNr6l2deA3Laxi4.roa (raw, json)
Hash identifier: KRhlumYrK/6K501/1KIyZQ6tTVYM9NTmF/i/4gHj4R0=
Subject key identifier: C5:53:6D:2D:9F:20:51:88:BC:34:DA:FA:97:67:5E:03:72:DA:C6:2E
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0184565964BC472B8D6EE6A8CF65F93786C7
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/xVNtLZ8gUYi8NNr6l2deA3Laxi4.roa
Signing time: Tue 08 Nov 2022 08:26:49 +0000
ROA not before: Tue 08 Nov 2022 08:26:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400536
IP address blocks: 92.53.184.0/22 maxlen: 24
92.53.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:59:64:bc:47:2b:8d:6e:e6:a8:cf:65:f9:37:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Nov 8 08:26:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5536d2d9f205188bc34dafa97675e0372dac62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:54:cb:21:39:1d:13:94:99:5d:71:f6:62:
c5:07:a9:83:b8:c9:d7:65:6b:b0:2a:1f:cc:3e:01:
8b:a4:aa:50:99:78:73:8a:a6:e9:68:20:d2:29:f1:
59:ae:01:29:ea:df:84:dd:9a:bb:ba:c6:61:1d:cb:
ea:b3:f1:5e:22:3e:d7:7b:c6:de:05:21:f1:ae:85:
91:ec:bf:3b:86:c6:8a:ca:09:6e:b1:39:86:bb:ed:
77:39:94:be:d7:94:b2:4c:65:fb:e8:3d:f5:db:74:
63:9c:0e:42:dd:79:f1:ef:0f:44:e6:dd:ce:04:40:
4d:2e:bf:25:b2:44:c1:b2:e0:0f:2e:cc:77:a0:e0:
6b:fc:33:74:ac:8c:5d:2a:cf:59:3d:33:a1:48:b7:
4e:cf:91:b1:de:2b:2c:bf:25:7d:9e:86:9c:57:96:
a4:c9:39:55:bb:ba:8d:b5:e7:78:9f:c3:d9:2b:74:
c1:0d:0d:9d:70:0c:1e:de:a5:cd:90:b9:c1:88:eb:
04:01:09:c4:86:b8:ec:a3:1f:13:d1:0e:b8:ae:92:
a4:85:c3:95:d2:33:2d:28:6b:fc:ea:5b:79:2b:74:
5b:45:d7:3d:f0:32:5e:2f:09:e5:a9:e0:51:29:a5:
e1:55:da:cd:e8:fa:3d:37:b4:40:ff:49:78:15:dc:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:6D:2D:9F:20:51:88:BC:34:DA:FA:97:67:5E:03:72:DA:C6:2E
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/xVNtLZ8gUYi8NNr6l2deA3Laxi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.168.0/22
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:e7:ee:c3:5f:77:82:76:3d:d7:7c:3f:5b:f5:4a:fd:8b:3c:
ad:78:d5:6b:6c:6c:22:af:23:8a:e2:8f:0a:8b:fb:e3:ab:ab:
74:bb:6b:2b:e1:13:91:91:9c:37:69:6a:d5:71:a3:cb:ce:dd:
44:fe:c9:a0:0f:73:58:a4:91:de:a7:c8:00:84:3b:a2:7d:a8:
71:8a:1c:7e:27:6a:08:7c:d7:93:ea:9f:24:33:dd:b2:3f:30:
c4:9f:ff:d8:4f:b2:d5:e6:31:86:5f:8c:ed:b7:68:ee:94:ef:
ad:ac:3c:3d:ca:67:a7:40:de:65:33:46:55:4c:ce:18:8a:54:
4e:76:ff:11:d0:06:44:a8:bd:f5:99:f0:4d:99:06:5f:2c:e9:
90:55:f2:17:e7:f5:bb:6b:ea:97:03:1e:f9:50:23:4a:99:dc:
61:d0:b7:3e:67:39:c8:43:7d:9e:d4:33:3c:86:0a:01:2f:b7:
56:c6:bd:07:00:3f:32:dc:c0:f7:4b:b7:f9:51:93:f1:06:04:
98:48:bc:3c:a6:5b:9d:88:7a:c9:37:50:9e:0c:fc:13:67:7a:
be:cb:bb:72:4b:38:c9:9f:15:51:51:b3:dd:52:89:06:bf:d5:
fd:6e:6f:0d:b7:3d:b2:6c:05:4d:7e:68:a5:db:88:67:62:1f:
86:fb:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org