Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/38ztJ3Vmj7DA5jziQGHbhMrGiyI.roa
File: 38ztJ3Vmj7DA5jziQGHbhMrGiyI.roa (raw, json)
Hash identifier: /Emd6rWSKjseJk7xdY19NWP671AoRW6snC4oiu10mZo=
Subject key identifier: DF:CC:ED:27:75:66:8F:B0:C0:E6:3C:E2:40:61:DB:84:CA:C6:8B:22
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 19AF3957
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/38ztJ3Vmj7DA5jziQGHbhMrGiyI.roa
Signing time: Sat 01 Jan 2022 05:52:42 +0000
ROA not before: Sat 01 Jan 2022 05:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212333
IP address blocks: 92.255.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430913879 (0x19af3957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 05:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfcced2775668fb0c0e63ce24061db84cac68b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:09:50:f8:20:95:2b:ac:fd:c7:13:1d:02:
f7:55:32:bb:bd:d1:7b:98:dc:b1:73:7d:71:0d:49:
3b:91:f1:d3:60:86:36:6f:ac:14:85:08:f6:92:f5:
99:7b:5b:4e:ce:b1:83:6d:8d:c9:ea:51:e2:54:3f:
90:4e:69:d9:72:7b:cc:b4:8a:05:f7:6e:33:90:80:
0d:55:6e:f0:fa:5c:1f:2f:7f:78:69:10:dc:00:da:
96:95:ff:96:02:66:81:a0:45:92:62:49:73:b7:bc:
7b:87:e5:af:e9:4e:2e:c3:09:9f:f3:4d:ad:af:18:
c9:c0:42:7b:7f:aa:69:73:61:57:65:76:65:36:28:
1b:ed:81:c2:d8:9d:46:d4:de:8a:f1:30:0d:2a:ca:
bb:71:22:a2:24:ae:3f:4b:9d:ad:db:a3:78:a1:ad:
a2:6a:fa:78:de:01:eb:86:73:c5:51:d4:35:20:a9:
cc:e6:33:1a:5e:dd:5b:d1:93:9e:07:21:36:45:9e:
ea:cc:84:51:e7:78:e3:e9:77:fd:c2:e3:c0:b4:fb:
d1:6c:0e:6e:0f:9f:e5:02:ac:04:d5:ca:2d:db:4f:
72:09:d9:4d:e9:54:84:a6:f8:aa:5e:81:26:6a:22:
e9:24:95:4c:35:bc:a7:07:e6:1f:37:b6:76:72:9c:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:ED:27:75:66:8F:B0:C0:E6:3C:E2:40:61:DB:84:CA:C6:8B:22
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/38ztJ3Vmj7DA5jziQGHbhMrGiyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9e:32:5f:70:37:83:db:53:a0:0c:21:ec:8f:d5:1f:30:b5:
ea:eb:31:ce:ab:67:d5:48:d5:97:b8:f6:e1:e8:9b:80:2b:e2:
50:b6:2b:df:e6:1c:83:54:6c:94:cd:4e:c4:78:11:e2:4c:a3:
95:e2:5d:6d:30:78:fd:81:21:54:af:ed:7d:f0:57:1c:36:e4:
ba:32:54:d2:73:6a:4b:93:9f:d4:06:91:07:f7:88:92:e8:68:
a5:31:6e:2f:b1:61:1a:24:4e:94:18:a8:d8:65:1a:cc:c2:a3:
a1:82:94:52:b0:aa:30:72:f3:7f:0b:39:fd:b7:46:25:89:e1:
07:ba:36:86:48:5a:5d:52:b3:e2:88:3f:d5:ec:9c:f7:31:44:
6a:de:f1:ac:fc:f2:1b:5f:ec:05:57:94:60:f8:41:b6:c4:5b:
87:2b:06:4f:81:85:6d:68:d0:28:89:7e:4a:42:1a:86:c8:92:
4c:a5:0e:62:2d:83:28:bc:13:aa:3f:54:f9:85:e9:26:3d:6e:
50:b7:fa:46:46:9b:87:33:e7:41:a4:f6:d2:a8:ed:12:f5:6f:
6f:59:00:f5:ff:e4:6b:83:67:f3:e0:e4:94:c0:a7:a5:7d:2f:
96:97:37:02:2c:2a:05:2a:6a:92:93:07:18:13:48:a3:08:80:
29:3c:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org