Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/yPOUjBGuD8YeMwol9cWtt3_rJ6M.roa
File: yPOUjBGuD8YeMwol9cWtt3_rJ6M.roa (raw, json)
Hash identifier: wDheJE1wN2H/FYlwZnFJBoNkY59e8gJnqcTOBNTIftk=
Subject key identifier: C8:F3:94:8C:11:AE:0F:C6:1E:33:0A:25:F5:C5:AD:B7:7F:EB:27:A3
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01834298DA02AAEBB1618FB9BE7A45AC4AFB
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/yPOUjBGuD8YeMwol9cWtt3_rJ6M.roa
Signing time: Thu 15 Sep 2022 19:20:57 +0000
ROA not before: Thu 15 Sep 2022 19:20:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 92.53.184.0/22 maxlen: 22
92.53.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:98:da:02:aa:eb:b1:61:8f:b9:be:7a:45:ac:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Sep 15 19:20:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8f3948c11ae0fc61e330a25f5c5adb77feb27a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:ef:85:8b:6c:12:2b:94:69:3b:fb:14:d5:
42:53:55:31:47:2c:eb:4f:b7:55:59:2e:d1:b4:f6:
15:c2:aa:f4:d4:e3:05:e2:52:1b:50:88:a7:d4:20:
a8:2c:c9:84:83:bc:1e:f9:c9:68:fc:d8:96:48:7a:
ef:09:67:e8:00:7d:4c:f6:9b:4c:91:e6:a9:71:78:
24:4e:4b:d9:46:d8:e8:cf:e3:b5:79:5b:e1:6e:88:
79:1b:15:64:62:c0:15:d4:d5:ab:75:2c:05:88:81:
0c:be:48:a0:e6:a3:75:cd:21:91:4f:b6:ca:8c:3e:
9e:7b:54:d0:ed:2e:57:0f:6d:49:25:60:7d:89:d0:
88:3c:92:7d:c1:22:39:aa:19:4a:10:3f:a7:f3:ab:
9a:a0:e2:81:fa:a4:8d:86:fc:c5:4e:55:4d:c8:34:
c3:fa:b6:cd:50:39:57:82:5e:a3:70:2e:1c:1e:dd:
d2:f9:ca:ae:b2:df:18:b7:fa:5a:fb:af:7a:5b:be:
db:94:ee:46:83:e6:fb:24:f9:cf:11:cb:70:ae:fd:
0b:38:ca:29:18:36:43:19:1d:3b:61:18:88:14:20:
75:ef:44:54:1d:64:88:30:34:80:e8:6f:ff:69:ab:
6f:8c:8d:65:da:fc:75:9a:ce:9b:49:22:65:e3:ad:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F3:94:8C:11:AE:0F:C6:1E:33:0A:25:F5:C5:AD:B7:7F:EB:27:A3
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/yPOUjBGuD8YeMwol9cWtt3_rJ6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.184.0/21
Signature Algorithm: sha256WithRSAEncryption
43:82:f3:d1:cd:94:60:aa:1e:18:89:4b:3c:21:04:01:7c:84:
13:3f:6c:3a:c6:27:b6:82:1e:10:a6:f8:0b:e2:c9:73:53:8b:
c9:b9:33:78:79:bb:f5:57:36:b5:c3:23:35:ae:d1:3c:cf:6f:
dd:9c:04:56:bd:73:d3:64:b3:49:1b:31:94:16:36:75:c0:d5:
ca:8b:81:29:26:2d:2e:28:2b:3a:07:7a:30:21:b5:23:09:3e:
f9:67:37:50:46:3c:02:f1:4a:e4:d3:cf:ae:31:1a:d0:e3:22:
e4:f7:23:88:44:fe:ac:ba:d9:6a:59:11:e7:cd:51:9b:52:b0:
ce:01:9b:37:ab:81:1e:c5:64:1b:1e:47:1c:6b:ac:ec:93:1f:
05:47:3b:d5:12:86:d6:09:3f:4c:49:ef:c8:b2:70:3a:5d:b9:
3a:e7:dc:11:e3:5a:1c:56:1f:9b:f4:e2:03:91:bc:8d:6d:4b:
85:44:29:29:a6:cb:29:3a:e9:20:4e:b2:e4:80:76:18:bd:42:
2c:f5:cc:5b:19:80:51:b4:e4:2f:0e:fd:5c:68:f5:57:76:d9:
e8:ff:62:c7:af:e2:1c:42:57:1f:74:7c:80:9f:79:1f:0e:08:
8a:3b:ea:2b:d9:0d:3b:3b:20:07:df:2e:2b:cd:23:0f:08:1d:
b6:39:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org