Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/_IgUuSNtonTI0p0_Av8ect98xtE.roa
File: _IgUuSNtonTI0p0_Av8ect98xtE.roa (raw, json)
Hash identifier: fjyhlIFo492S3M0e4L+lNp+Rf0NZHhRXN7Q4zEe0pic=
Subject key identifier: FC:88:14:B9:23:6D:A2:74:C8:D2:9D:3F:02:FF:1E:72:DF:7C:C6:D1
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0AB28A9E
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/_IgUuSNtonTI0p0_Av8ect98xtE.roa
Signing time: Thu 12 May 2022 10:46:46 +0000
ROA not before: Thu 12 May 2022 10:46:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44534
IP address blocks: 90.156.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179473054 (0xab28a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: May 12 10:46:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc8814b9236da274c8d29d3f02ff1e72df7cc6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:92:3d:a3:8e:44:4a:ad:08:f8:aa:2b:54:
04:fd:1e:09:ce:df:9c:e4:89:e4:0e:4d:f2:4b:b8:
e5:f4:5d:3a:bf:f8:20:07:ff:66:7a:e8:1d:b5:d4:
97:be:ff:30:24:70:59:30:00:37:d7:db:4c:46:7c:
7b:32:79:2f:c6:ef:2a:61:03:24:50:45:cd:4b:8c:
ac:2a:0f:71:82:6b:51:4c:68:01:07:a8:a5:f8:b1:
b5:32:ea:e2:65:d3:54:77:48:b0:ac:64:9d:82:f7:
33:fb:77:60:c2:a3:45:a2:f4:3d:49:f3:79:a9:a3:
92:84:c2:df:c1:cc:7b:0b:2a:60:db:b4:77:25:7e:
a6:7d:1a:87:6f:96:81:a4:2c:7d:c8:2b:94:4f:ec:
ff:40:11:b1:2e:ba:2a:35:cf:2f:5f:67:7e:11:69:
d7:7e:0b:b7:7d:8e:68:63:3c:de:ea:d5:5b:a6:32:
09:63:28:ea:25:eb:a1:c5:93:50:b5:48:4d:e9:e4:
73:f0:b9:12:8d:8f:a8:f8:4b:82:52:d4:63:d1:17:
c0:97:36:cc:97:63:2f:7a:01:44:23:ea:00:51:8d:
7f:16:b2:4d:da:58:74:3a:9f:0e:7c:f1:0f:57:0a:
ab:49:96:35:29:1a:4f:12:36:30:03:3c:d7:f8:71:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:88:14:B9:23:6D:A2:74:C8:D2:9D:3F:02:FF:1E:72:DF:7C:C6:D1
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/_IgUuSNtonTI0p0_Av8ect98xtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:98:ad:83:7d:64:20:4c:bd:94:fb:5c:91:cc:7a:88:03:c2:
02:6f:32:97:df:32:b0:14:ef:0a:81:e4:34:78:39:e5:aa:05:
c3:34:ce:45:70:78:62:ca:3a:b3:fb:85:0f:05:93:44:25:e4:
77:d4:7e:d4:60:27:ad:d4:94:5f:d1:9a:a1:ad:17:6b:6d:11:
98:c2:68:2e:0a:d0:06:04:71:ff:25:d1:e2:01:0e:82:0c:1c:
6e:97:e6:d8:5c:7f:46:a8:83:51:69:0e:80:31:8c:5d:15:cf:
82:af:e8:f9:f7:7f:0b:35:35:84:1c:79:f4:a6:9e:fe:f7:62:
05:88:f8:94:ef:06:71:28:47:64:93:7b:47:4c:1a:1b:47:03:
cb:dc:2a:26:26:95:7c:33:a5:69:81:00:3b:e6:aa:cd:f4:af:
56:dd:d6:5d:c5:1f:04:12:ed:06:9f:6d:76:76:de:1f:da:cd:
7a:65:88:b8:4c:cc:73:ba:7f:bf:eb:d5:a4:5c:4c:95:9a:f1:
d5:7d:76:99:2d:d2:5b:ec:ce:aa:8b:00:b8:71:db:c7:55:1a:
52:b4:22:af:52:e3:e4:1c:d0:3a:36:6f:e5:7c:fd:0e:b9:99:
f8:21:7d:ed:75:b4:57:23:f5:d2:31:84:d8:59:e8:56:47:9e:
29:0b:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org