Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/0_vgf0Ndf1MDJD7y0bWZ5OV8atQ.roa
File: 0_vgf0Ndf1MDJD7y0bWZ5OV8atQ.roa (raw, json)
Hash identifier: 4in284z5IPMghutbxyeC/tqLwBC+gYuO+GfJJXuV9gk=
Subject key identifier: D3:FB:E0:7F:43:5D:7F:53:03:24:3E:F2:D1:B5:99:E4:E5:7C:6A:D4
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 037F6ECD
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/0_vgf0Ndf1MDJD7y0bWZ5OV8atQ.roa
Signing time: Tue 22 Feb 2022 13:58:06 +0000
ROA not before: Tue 22 Feb 2022 13:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 92.51.20.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58683085 (0x37f6ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Feb 22 13:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3fbe07f435d7f5303243ef2d1b599e4e57c6ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:bd:27:20:0b:05:82:f4:f7:66:05:05:16:
a6:f3:49:f1:cb:a6:9f:8b:de:2a:fe:10:9b:06:66:
cb:74:e2:22:24:3a:3c:a4:f2:dc:9c:bd:3a:6f:3a:
35:d5:78:d2:a6:08:63:64:40:f2:3b:a0:1d:9d:dd:
1d:72:3d:55:d0:a2:a4:21:a5:f8:46:50:7d:b4:4a:
2e:b4:fb:a1:6b:95:d2:2d:8c:f2:ff:c2:74:78:3d:
34:f0:4b:17:50:76:9f:db:ec:8c:32:5b:f4:9b:95:
a6:8c:d0:c6:89:da:67:96:d5:73:f5:92:54:76:cb:
ed:47:ec:7a:2e:c2:73:09:ab:cd:89:ba:f0:1f:19:
f7:0d:b2:1f:8c:88:73:82:29:e5:20:83:e8:ca:05:
09:05:42:47:d7:30:4f:e9:ec:9a:40:c4:fc:6c:a4:
45:03:bf:a6:01:45:17:d2:f2:a5:1b:9f:a6:21:50:
25:4c:71:f4:50:8d:89:60:19:9b:5d:90:ea:78:ed:
66:3e:ce:07:9f:a2:a1:59:53:24:b5:c6:34:e0:a3:
dd:b7:9c:b6:de:a5:d4:93:4d:3c:5b:b3:e7:42:94:
25:4f:2d:be:92:7a:84:b9:14:36:17:e6:27:64:b4:
a9:54:7e:8f:38:b6:f7:80:dc:86:f7:36:81:3a:32:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FB:E0:7F:43:5D:7F:53:03:24:3E:F2:D1:B5:99:E4:E5:7C:6A:D4
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/0_vgf0Ndf1MDJD7y0bWZ5OV8atQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:83:c4:09:fc:fb:d8:14:7e:76:92:68:e4:7a:90:96:e9:53:
a6:37:5c:a8:ec:07:bc:8e:e2:bd:62:ef:cd:33:52:36:7b:43:
ea:87:47:18:ba:27:3d:ec:3e:7d:3c:67:a0:b0:40:f2:bd:59:
13:42:a6:d3:78:c5:9a:e3:94:86:cc:d2:5f:b9:37:5a:af:bd:
a3:28:09:4e:34:02:98:dc:b8:16:47:e2:79:be:18:09:1a:46:
56:aa:77:82:11:e7:78:b2:24:c5:cc:85:3c:48:2b:b3:23:8d:
85:8d:c6:64:ad:60:c9:cc:11:05:22:4a:c3:5f:35:20:82:3d:
f0:9a:4a:31:d7:55:02:a3:85:4c:39:57:f2:f0:4d:af:28:4c:
54:64:c1:3b:bc:c3:26:4d:32:1c:5d:73:7b:94:9c:1b:8b:75:
9f:b5:45:8a:6b:3e:b3:fc:38:a7:2e:64:4c:b0:9f:64:ea:ce:
2a:61:de:2a:1e:55:0e:64:e3:4f:a4:73:01:bd:64:ef:f2:9d:
ac:0d:a6:4c:48:6c:d8:c4:2e:79:54:d2:d2:1f:07:e5:be:b9:
12:41:c5:6d:bc:df:0e:b5:ec:59:38:fc:09:d1:9f:f4:1e:9e:
88:22:1e:cf:6e:0d:5e:5d:06:a0:d4:26:01:45:be:eb:9c:f0:
58:af:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:05 2023 by rpki-client on console-ams.rpki-client.org