Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1-FOsdOvuvIMj-Bb-PA0GqprelHo.roa
File: 1-FOsdOvuvIMj-Bb-PA0GqprelHo.roa (raw, json)
Hash identifier: jwYz3M2MtJ2PTFym095BEqvargDZCTYQgRYgyG4sIxE=
Subject key identifier: F8:53:AC:74:EB:EE:BC:83:23:F8:16:FE:3C:0D:06:AA:9A:DE:94:7A
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0A7BC16E
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1-FOsdOvuvIMj-Bb-PA0GqprelHo.roa
Signing time: Sat 01 Jan 2022 08:02:21 +0000
ROA not before: Sat 01 Jan 2022 08:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.189.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175882606 (0xa7bc16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 1 08:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f853ac74ebeebc8323f816fe3c0d06aa9ade947a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:37:28:24:77:3c:5a:d6:38:f9:bd:9e:63:
4b:8f:73:35:f7:a2:4f:32:24:76:fb:17:ef:65:7e:
91:be:a9:20:f3:23:a1:a6:f8:20:b8:45:03:99:b9:
d3:56:00:8e:23:4a:2d:2b:7a:bc:8c:ae:bb:a3:51:
31:f7:f6:2c:d2:60:bc:7c:f1:ea:d1:b7:c6:53:4e:
0e:f8:dc:fb:14:9f:14:f3:08:7f:63:59:42:89:04:
65:39:08:31:ae:0f:08:7f:92:e1:b8:ac:7f:a9:6b:
d9:e5:82:7c:88:4e:e2:a9:6f:66:ee:56:ed:4a:9e:
ec:c6:ac:0f:09:ec:6b:76:b1:14:19:52:f0:03:52:
61:3b:30:df:b7:7c:57:49:61:bb:60:5d:3d:d1:bb:
1c:52:47:3d:00:6d:ec:dd:e7:e7:af:28:76:cf:70:
bc:32:cf:84:38:65:e5:86:10:25:4d:e6:76:a9:a0:
bf:b9:31:82:44:d2:d3:e0:c5:94:0f:dc:47:f3:7f:
5f:6c:cd:e7:b0:f5:2d:e4:0b:3c:91:42:1c:be:f9:
fb:f7:86:ae:25:64:53:81:4c:fe:7c:4c:3f:8a:1b:
8d:d4:01:6e:ba:00:42:42:66:4c:3d:1c:c3:c6:fe:
f4:09:77:0a:3d:eb:17:b4:fb:fd:ec:86:c3:76:d9:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:AC:74:EB:EE:BC:83:23:F8:16:FE:3C:0D:06:AA:9A:DE:94:7A
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/1-FOsdOvuvIMj-Bb-PA0GqprelHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:4d:9d:34:60:18:f7:4b:e1:85:97:73:76:03:ec:fa:b9:19:
61:25:3a:c9:4d:03:64:9c:86:04:c4:27:df:59:73:37:b1:24:
00:7a:e5:91:bd:4c:68:d6:40:4f:3e:3b:b2:f8:07:07:86:50:
fb:bd:4f:cc:88:30:45:eb:4f:f9:e1:25:50:68:4e:1a:1e:51:
85:32:01:82:aa:5a:86:d7:b5:a1:e2:c7:3f:38:b2:f5:c9:2c:
a3:a7:8a:e7:40:2e:6c:de:7f:0e:3c:67:19:48:45:2f:5a:d3:
28:58:09:ea:8b:79:bc:f1:46:8c:82:98:1f:cf:19:c8:5d:a7:
a1:a5:1b:8f:f6:23:cc:96:ac:49:7a:86:d7:46:92:9d:70:1f:
99:db:ef:37:3b:77:94:ae:53:4d:86:57:d8:99:c3:27:ea:8a:
66:33:6d:fb:ad:3b:c7:7c:bf:fc:21:14:66:0d:e0:b1:be:1c:
9e:c6:32:07:a2:47:1e:16:90:4d:db:71:b9:ff:f6:32:bc:4c:
32:67:c2:48:0b:60:e4:e6:71:f2:51:17:f4:f6:21:13:65:15:
97:6e:07:56:ae:5e:c9:63:18:36:a9:50:cd:6c:88:0e:47:92:
8e:4c:72:15:e6:23:f8:40:91:85:ac:07:e5:7e:68:11:78:c5:
45:77:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org