Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/92FluN_kTFjjhlbDAEdp_F3mOLA.roa
File: 92FluN_kTFjjhlbDAEdp_F3mOLA.roa (raw, json)
Hash identifier: 7GoRnI71Gl1h8cKMyUMtJgY2Pj/ILBTnbhHQzg5Ym0o=
Subject key identifier: F7:61:65:B8:DF:E4:4C:58:E3:86:56:C3:00:47:69:FC:5D:E6:38:B0
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 19DBFE20
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/92FluN_kTFjjhlbDAEdp_F3mOLA.roa
Signing time: Sat 01 Jan 2022 04:55:10 +0000
ROA not before: Sat 01 Jan 2022 04:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136620
IP address blocks: 144.48.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433847840 (0x19dbfe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 04:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76165b8dfe44c58e38656c3004769fc5de638b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:c2:3f:3b:68:5e:fb:31:cd:66:6d:15:eb:
8a:54:6c:28:41:bf:01:b6:fb:b6:30:65:6d:c8:5a:
38:b9:72:9f:bc:4d:45:08:13:8a:4c:e7:6e:66:c4:
a4:a7:38:08:ac:f4:56:88:25:da:ce:04:0d:e8:59:
01:d7:c5:dd:56:6d:2b:eb:64:0a:89:a3:75:cb:08:
48:a8:42:45:91:57:6a:2c:8b:1b:2d:c8:e1:80:33:
0a:01:9e:af:d1:3d:72:fd:b7:80:a4:4e:23:78:51:
23:03:bb:3d:d7:19:77:d5:e4:f6:21:af:23:7d:72:
5f:87:82:1f:09:eb:f7:95:65:ec:ad:20:e0:3c:9b:
ec:2f:33:3c:55:a4:7c:de:63:a3:e4:83:86:e0:7f:
e4:11:52:82:79:c5:ee:7f:84:eb:fb:90:a1:d6:75:
0c:9b:fb:da:ac:98:cf:aa:5b:73:30:9d:b2:1c:e9:
62:7f:32:5d:4e:f9:43:8d:d3:87:c1:df:c4:86:ff:
5e:ca:f1:4b:57:c5:45:6e:d8:d9:3f:62:cf:db:db:
cc:77:45:5c:ab:a3:28:91:e2:80:ea:e2:6b:b2:40:
07:37:cd:a7:2f:4e:02:ff:88:cf:74:71:35:c8:2e:
3d:ce:b8:7a:3b:66:9a:60:f7:7f:1a:bd:bf:d4:52:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:65:B8:DF:E4:4C:58:E3:86:56:C3:00:47:69:FC:5D:E6:38:B0
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/92FluN_kTFjjhlbDAEdp_F3mOLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.63.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e0:e8:0e:cf:a3:29:9f:63:ff:ea:19:3d:6e:19:93:f1:0d:
52:b3:b6:d0:9c:db:76:c9:12:7f:91:6c:fd:6b:4a:88:bd:54:
88:5b:2d:42:db:c1:79:7b:15:57:ae:e0:e5:ee:ce:1e:33:57:
32:3b:84:b1:0b:fb:ed:71:96:5d:e7:7a:1c:b4:38:b3:e0:aa:
fb:b3:fe:7c:df:3a:52:f5:ca:b5:e6:6f:14:23:26:63:6c:e1:
a4:25:2f:6a:69:8a:90:8a:53:ed:d8:74:44:e0:dd:1d:25:fa:
7d:1e:77:cb:55:ec:5d:35:2d:ab:83:de:a8:8b:ba:ca:33:59:
90:f7:02:fc:7b:18:3e:b3:a7:f4:54:ff:09:42:fb:02:0b:cc:
a1:44:25:58:af:af:9a:48:b5:67:2f:06:53:55:00:f5:b3:0b:
fb:ae:d0:88:83:be:33:02:cf:a0:16:a7:26:2e:09:c5:7c:a5:
67:95:42:5f:6f:ef:20:1f:c6:21:8d:b0:75:91:48:53:d8:21:
7d:24:99:48:8d:84:75:71:fc:8b:44:3d:3e:bb:f1:95:6c:83:
64:e9:ca:38:d3:7e:e0:77:92:3c:b2:21:5d:b3:2c:3c:f8:74:
cd:b8:df:bb:11:56:ef:b3:fc:ba:9f:af:41:da:a0:c5:ee:5a:
90:c9:f1:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGdv+IDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmRlYzRhNDZhNmU2ZTRmOWE5MmQwYmEyZTBiM2FiNTY1OGJlMWJkMB4XDTIyMDEw
MTA0NTUxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc2MTY1YjhkZmU0
NGM1OGUzODY1NmMzMDA0NzY5ZmM1ZGU2MzhiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALIhwj87aF77Mc1mbRXrilRsKEG/Abb7tjBlbchaOLlyn7xN
RQgTikznbmbEpKc4CKz0Vogl2s4EDehZAdfF3VZtK+tkComjdcsISKhCRZFXaiyL
Gy3I4YAzCgGer9E9cv23gKROI3hRIwO7PdcZd9Xk9iGvI31yX4eCHwnr95Vl7K0g
4Dyb7C8zPFWkfN5jo+SDhuB/5BFSgnnF7n+E6/uQodZ1DJv72qyYz6pbczCdshzp
Yn8yXU75Q43Th8HfxIb/XsrxS1fFRW7Y2T9iz9vbzHdFXKujKJHigOria7JABzfN
py9OAv+Iz3RxNcguPc64ejtmmmD3fxq9v9RSo3ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT3YWW43+RMWOOGVsMAR2n8XeY4sDAfBgNVHSMEGDAWgBT/3sSkam5uT5qS
0LouCzq1ZYvhvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L185N0VwR3B1YmstYWt0QzZMZ3M2dFdXTDRiMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8x
LzkyRmx1Tl9rVEZqamhsYkRBRWRwX0YzbU9MQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
MTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8xL185N0VwR3B1Ymst
YWt0QzZMZ3M2dFdXTDRiMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJAwPzANBgkqhkiG9w0BAQsFAAOC
AQEAquDoDs+jKZ9j/+oZPW4Zk/ENUrO20JzbdskSf5Fs/WtKiL1UiFstQtvBeXsV
V67g5e7OHjNXMjuEsQv77XGWXed6HLQ4s+Cq+7P+fN86UvXKteZvFCMmY2zhpCUv
ammKkIpT7dh0RODdHSX6fR53y1XsXTUtq4PeqIu6yjNZkPcC/HsYPrOn9FT/CUL7
AgvMoUQlWK+vmki1Zy8GU1UA9bML+67QiIO+MwLPoBanJi4JxXylZ5VCX2/vIB/G
IY2wdZFIU9ghfSSZSI2EdXH8i0Q9PrvxlWyDZOnKONN+4HeSPLIhXbMsPPh0zbjf
uxFW77P8up+vQdqgxe5akMnx5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org