Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5ehe2mg2dGCGa_ccZl9TLKH03xk.roa
File: 5ehe2mg2dGCGa_ccZl9TLKH03xk.roa (raw, json)
Hash identifier: VdW1ZlG7ZRMr2assCywv1IqAncsv5B6XqMslxUVDi3c=
Subject key identifier: E5:E8:5E:DA:68:36:74:60:86:6B:F7:1C:66:5F:53:2C:A1:F4:DF:19
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0183A331640EDF85C2181D188B89BBBBAD6B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5ehe2mg2dGCGa_ccZl9TLKH03xk.roa
Signing time: Tue 04 Oct 2022 13:31:06 +0000
ROA not before: Tue 04 Oct 2022 13:31:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202485
IP address blocks: 92.52.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:31:64:0e:df:85:c2:18:1d:18:8b:89:bb:bb:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 4 13:31:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5e85eda68367460866bf71c665f532ca1f4df19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:c4:8b:88:5a:21:57:2c:7b:88:3f:d9:70:
72:7a:85:de:c9:2c:b4:11:71:82:ca:cd:55:5d:0e:
32:85:84:a4:38:24:79:8a:20:31:0e:6d:dc:1c:7d:
89:ea:9b:e7:00:42:02:ca:55:7c:44:e4:2e:bf:0d:
50:b9:a3:c3:c1:9c:ae:fc:e4:d8:b3:60:c4:42:db:
df:26:23:6f:9e:41:b5:9c:3c:29:c7:c3:11:c6:e3:
6e:b6:68:2e:83:5c:80:b6:87:d6:98:b7:80:43:d2:
ad:5c:2f:be:b6:14:88:bb:76:1b:10:b1:c1:33:cc:
a8:0c:95:17:3d:c4:b8:22:a3:7c:34:31:57:e9:ee:
fc:52:c4:5a:63:26:99:92:75:87:e8:cd:30:e8:35:
e9:95:3b:e8:23:8c:8d:08:08:a5:a0:c4:07:16:55:
18:dd:91:06:89:55:a8:9c:c0:c3:42:e5:2a:ca:1a:
ab:96:f3:84:e6:d7:d2:1a:98:17:eb:f2:32:43:54:
08:ee:fa:87:09:d5:42:ef:54:dd:32:8e:75:1d:9b:
6c:49:c8:ed:8d:1e:a6:30:2c:ea:b0:b4:52:5b:67:
97:72:66:52:60:04:5b:2d:ae:78:06:32:b0:55:36:
bb:b3:ed:42:59:13:5c:cc:80:d1:1d:e3:ce:79:59:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:5E:DA:68:36:74:60:86:6B:F7:1C:66:5F:53:2C:A1:F4:DF:19
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/5ehe2mg2dGCGa_ccZl9TLKH03xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.217.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ce:0c:f8:a8:58:f6:a1:76:5b:1f:1b:2d:5a:45:38:94:cd:
75:c0:88:5f:ab:21:42:1a:39:97:fa:5b:60:ba:7b:fa:c1:e5:
9d:41:17:87:ef:d5:ff:5c:68:2d:e2:ae:6d:4e:33:2e:95:f5:
b2:1c:30:23:b2:bf:e7:27:83:74:c6:fb:db:bf:2f:d2:de:b8:
b2:eb:13:f8:e2:75:5a:cf:90:4c:91:e9:08:2e:9f:88:b8:e9:
30:59:90:47:e0:4c:ff:a1:db:52:d8:ef:5f:6b:ed:16:ec:c9:
9d:67:21:62:c3:62:e0:aa:0b:92:06:0a:fa:8d:10:4d:38:c7:
34:2f:4c:ce:a7:1e:43:c9:8b:29:eb:83:4c:08:78:e9:2f:fc:
9a:d1:35:27:6b:b0:db:c7:82:71:7c:73:8b:a3:ef:0f:07:c1:
60:a7:68:52:cb:65:f6:0c:dc:2c:1b:b9:25:46:07:de:0f:ff:
d6:46:94:4c:fe:7c:b6:98:f4:ea:f2:7a:04:71:21:67:61:f0:
f6:87:e2:f7:0a:3c:47:6d:d5:ed:3e:b9:1c:ea:84:4b:66:7c:
56:5e:9c:61:69:f7:be:ae:b6:14:77:10:52:a0:90:1a:1d:7e:
b6:47:a4:c3:0b:71:2d:5a:46:00:0b:0e:46:67:7c:f4:32:7a:
4c:28:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org