Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZSm5qwMlyrpzIBrIreAnyaiK3fg.roa
File: ZSm5qwMlyrpzIBrIreAnyaiK3fg.roa (raw, json)
Hash identifier: v6wRmg+c4DI8hruBrD+xMjiEezCTu2K6PjZmRms3oos=
Subject key identifier: 65:29:B9:AB:03:25:CA:BA:73:20:1A:C8:AD:E0:27:C9:A8:8A:DD:F8
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01824A697EFEC0B2E4963C480F92E62649AE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZSm5qwMlyrpzIBrIreAnyaiK3fg.roa
Signing time: Fri 29 Jul 2022 14:43:23 +0000
ROA not before: Fri 29 Jul 2022 14:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202243
IP address blocks: 92.52.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:69:7e:fe:c0:b2:e4:96:3c:48:0f:92:e6:26:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 14:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6529b9ab0325caba73201ac8ade027c9a88addf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:66:55:10:e1:bb:17:63:fc:e4:d0:4a:a4:
34:7b:0f:f6:3c:5f:64:7d:b6:10:d7:13:3a:4a:3e:
d2:fa:83:72:8b:5b:b3:14:60:63:ab:fb:70:e7:a3:
80:63:df:93:1b:18:5f:97:da:f3:2c:5d:f0:52:e3:
6c:78:74:2c:a8:b7:dd:cc:23:d9:c1:8d:2f:da:6d:
34:b1:ee:17:c5:f0:d7:31:a9:14:c3:88:76:af:86:
38:22:d6:cf:8b:31:21:39:54:bb:04:bf:1c:c9:c1:
64:37:92:9e:fa:39:d2:6f:79:1a:5b:8e:8e:80:68:
00:21:8f:c8:03:b3:17:c4:6e:08:3f:77:c6:c9:93:
2b:90:4c:3d:2d:46:fe:a9:70:0b:a9:0b:3b:2c:be:
bd:ca:d1:c7:eb:85:63:45:cc:91:b4:05:28:2c:95:
f4:17:44:c1:d6:89:ca:ac:db:59:2a:01:d0:6f:34:
5c:9b:79:29:fb:5e:88:ae:d9:b2:42:b5:9a:15:47:
62:df:4c:90:05:50:33:08:fe:e1:cb:bb:48:cb:1d:
03:cf:4b:47:9f:18:48:a2:5a:b2:1e:2a:78:ca:e1:
06:7e:a1:53:53:e3:b3:e9:2c:df:9c:29:3f:db:a6:
c8:36:11:1e:b9:13:fd:7c:9e:7f:fc:1a:70:8a:32:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:B9:AB:03:25:CA:BA:73:20:1A:C8:AD:E0:27:C9:A8:8A:DD:F8
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZSm5qwMlyrpzIBrIreAnyaiK3fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.220.0/24
Signature Algorithm: sha256WithRSAEncryption
71:39:45:35:ef:ed:34:a2:2a:99:22:4b:6b:9d:1a:b0:8b:c0:
3c:8a:3c:05:43:06:e9:11:a8:69:d0:8d:34:86:a1:cb:a9:b2:
b6:b9:1f:f2:69:8f:4f:4c:ca:f8:a2:12:50:bc:40:4c:18:95:
cd:b5:2a:5b:a6:8d:df:8f:ec:4d:45:54:f4:7f:b7:44:9a:b7:
bc:b1:db:36:82:a9:d2:a1:60:df:71:59:13:06:3a:a1:e3:9a:
50:96:e2:49:3d:e6:34:f7:e5:e9:ab:75:8a:bd:6b:f7:58:4a:
b1:29:24:d6:8f:1f:ea:32:18:f3:73:17:14:47:d3:fa:16:21:
90:cd:e8:87:43:11:f9:58:05:74:23:7f:48:d9:ef:d6:ce:0c:
0c:f7:ee:99:60:a9:c9:3d:2e:20:14:3b:ba:75:39:b1:b5:d3:
8a:ac:36:99:59:32:e9:12:d9:a4:88:25:83:73:c4:4c:ee:9d:
a5:fc:c2:65:5f:ac:75:1c:b7:90:6b:0b:65:d0:dd:06:a8:76:
4b:80:28:d5:1c:2f:f7:d8:07:2f:9c:7a:33:89:8f:b8:82:a4:
fe:8f:89:3f:33:ca:0c:84:23:31:07:bd:39:3f:02:ee:22:6c:
c9:4e:14:28:9e:74:e9:34:3d:45:53:3c:bd:f1:d4:a0:54:ea:
64:8a:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org