Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P81K7fX5aIEK6XkR0XVohVuvJVU.roa
File: P81K7fX5aIEK6XkR0XVohVuvJVU.roa (raw, json)
Hash identifier: PWfv9TeBORq85LYW1cM4JmkLkW6h+agpS7ZR7UL0bjU=
Subject key identifier: 3F:CD:4A:ED:F5:F9:68:81:0A:E9:79:11:D1:75:68:85:5B:AF:25:55
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0184687EFB6976DAD81C9531556E98C9CC2C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P81K7fX5aIEK6XkR0XVohVuvJVU.roa
Signing time: Fri 11 Nov 2022 21:01:03 +0000
ROA not before: Fri 11 Nov 2022 21:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.92.2.0/23 maxlen: 24
185.241.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:68:7e:fb:69:76:da:d8:1c:95:31:55:6e:98:c9:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 11 21:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fcd4aedf5f968810ae97911d17568855baf2555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:79:ab:9a:43:b5:2f:28:d2:35:91:2d:53:
b3:5a:af:f4:b8:cf:b6:cb:fc:12:f0:2b:03:ed:dd:
d7:77:20:f5:ee:ba:a5:f6:56:81:48:9a:fc:7f:ab:
39:1a:69:07:a5:18:7d:26:f0:9b:10:18:db:6d:52:
2c:38:f1:83:1c:88:ee:c5:dd:9f:2b:90:01:42:e9:
5d:e7:74:4f:1a:95:00:c9:dd:a1:1f:97:bb:21:50:
8d:8d:a6:eb:b0:cb:37:dd:76:c7:5e:ad:f9:74:90:
a2:f3:69:3d:e6:a8:08:54:d3:a6:83:da:89:ae:fc:
f3:e4:db:00:9e:a3:33:57:2d:73:9d:a2:cc:3b:c6:
f5:7c:33:44:e7:29:5f:00:ca:3f:e5:c2:33:3d:9b:
17:8e:58:26:5e:ed:60:81:00:6e:db:44:01:b1:3a:
90:5d:d5:f3:0f:43:06:fe:55:91:36:b1:0c:c4:a1:
ab:17:82:c6:1e:3b:5d:bf:32:e9:36:86:ed:ac:aa:
fd:bc:9b:05:0e:17:d3:81:b4:21:4d:3e:b6:88:28:
d2:a9:75:12:55:20:f8:bd:f3:eb:2f:2b:5f:90:a1:
fc:9a:0e:8a:4d:4c:31:3a:42:70:29:6f:59:e8:0f:
d6:46:b6:81:9a:ef:c0:f6:24:48:86:2e:6f:21:b9:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:4A:ED:F5:F9:68:81:0A:E9:79:11:D1:75:68:85:5B:AF:25:55
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/P81K7fX5aIEK6XkR0XVohVuvJVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.2.0/23
185.241.210.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3c:6e:a8:52:03:1b:85:6f:7a:49:04:86:cc:a8:39:4b:78:
6e:e6:7a:f7:79:46:e3:e3:0d:b6:57:95:bc:a9:cb:7c:b8:4b:
bf:ce:dd:49:76:49:4f:cc:1c:11:23:e2:e2:e5:8a:0e:aa:df:
88:e4:fe:4e:c9:89:ee:4f:30:11:fd:4b:06:d6:c1:f1:16:24:
2d:57:81:15:51:99:2a:92:f4:9a:46:d6:a7:0a:a1:da:9e:85:
ee:20:68:aa:55:88:fd:a3:d6:f2:d1:af:ca:c5:f5:cf:96:ad:
b9:8b:85:74:56:17:a9:22:38:b6:cf:7a:63:e0:b5:d4:61:87:
0b:67:9f:3c:f8:11:11:07:7a:f3:23:61:71:2e:0b:45:1a:d9:
97:ca:ad:75:65:47:35:b4:ff:55:f1:5e:8d:03:1a:45:54:34:
33:51:10:cb:7c:e4:28:7b:ef:48:a1:1e:27:b6:25:2e:d7:87:
71:86:48:72:6e:38:4b:b5:80:c4:96:f5:41:53:66:6c:52:7e:
c1:c4:01:a0:7e:63:2d:6e:b7:f4:2a:ee:b1:d2:ff:5d:db:03:
18:fa:dd:8e:97:12:45:a3:7b:f2:6e:8b:58:fc:7e:0d:ab:2d:
37:0d:7b:5d:34:24:4b:52:bb:d3:ed:9c:5c:d6:26:5a:33:85:
d8:73:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org