Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/fna-HjI-mggOhT5LeRZ8abvBvoo.roa
File: fna-HjI-mggOhT5LeRZ8abvBvoo.roa (raw, json)
Hash identifier: YHb9NDl6fayc/vUavRU2JN7ZKqLc8HdVOH5U2xaQvCw=
Subject key identifier: 7E:76:BE:1E:32:3E:9A:08:0E:85:3E:4B:79:16:7C:69:BB:C1:BE:8A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01826457C81B4D818ABBBE6A52FC35A63473
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/fna-HjI-mggOhT5LeRZ8abvBvoo.roa
Signing time: Wed 03 Aug 2022 15:34:10 +0000
ROA not before: Wed 03 Aug 2022 15:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.92.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:57:c8:1b:4d:81:8a:bb:be:6a:52:fc:35:a6:34:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 3 15:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e76be1e323e9a080e853e4b79167c69bbc1be8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:f9:b4:cc:ed:e6:a5:96:ea:6c:b8:f1:3a:
56:5b:ad:04:4a:5b:b4:f9:75:57:93:29:c4:3e:26:
1e:e5:46:52:e4:e6:29:27:cf:32:83:7f:f1:c1:d3:
6a:96:89:56:7d:6d:fb:b3:9e:79:91:f2:00:e1:33:
c1:09:6b:f1:64:4e:96:b8:a6:54:62:cc:15:39:8e:
98:d1:da:b4:35:db:1f:36:6c:b2:9c:c0:ff:9c:37:
c0:41:1a:d3:fb:b9:13:6c:b3:a2:f8:a9:b1:72:3f:
d4:cf:5c:0d:4b:11:b6:1c:1b:ee:22:69:9c:b4:57:
0f:a1:4d:b7:46:c8:e3:97:52:ed:cd:f9:4c:5f:c9:
e1:51:3d:37:e2:ad:28:51:c2:e6:f9:72:2b:ce:2e:
b2:5e:54:37:7f:8f:bc:95:f0:54:71:52:a2:4e:2d:
ae:a8:a1:fb:c0:d1:f6:36:27:84:fa:f3:8c:41:53:
da:fd:bc:53:44:4a:fb:15:93:54:97:06:83:a6:05:
3c:51:08:77:a3:47:a6:8d:7e:84:8e:62:b8:a6:06:
a4:b0:9e:35:25:1e:73:a7:01:8d:08:ff:f8:e1:62:
be:40:f7:c1:d4:e4:cb:82:6d:8b:d2:b0:4e:49:61:
89:e7:12:12:a1:14:3e:c7:54:a0:f4:e8:74:98:f8:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:BE:1E:32:3E:9A:08:0E:85:3E:4B:79:16:7C:69:BB:C1:BE:8A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/fna-HjI-mggOhT5LeRZ8abvBvoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:c3:a2:19:6d:cf:88:69:54:8c:1a:d2:27:36:91:9d:c1:fa:
fd:52:ec:ee:fc:3f:b9:6f:9d:5f:c0:03:d1:0b:45:f8:a5:35:
21:4c:67:b0:f6:3b:79:e2:45:3d:20:c5:26:31:59:23:b5:61:
5b:0e:d1:50:2e:fb:96:b8:f3:51:d4:95:f8:f9:81:27:5d:df:
57:1c:99:d8:13:70:74:1f:06:f8:f6:03:c7:4b:79:f5:52:7a:
32:0c:ae:af:b0:f1:92:4c:5e:3c:28:5e:13:4a:72:d1:ee:09:
1e:fd:3c:d2:2d:2c:96:51:71:64:df:b3:29:fc:4a:d2:5f:68:
30:17:8d:e3:d9:f0:1e:3d:31:c2:19:8a:be:69:17:ad:df:81:
44:28:30:b6:68:c8:32:03:91:1c:8c:4a:9d:b3:8e:14:b0:0c:
a5:e5:85:58:21:08:90:6b:30:3a:bb:4e:52:13:2f:09:35:a6:
2d:0d:5d:1c:fd:13:5e:7b:f7:af:3c:0a:a6:30:21:00:28:2d:
c0:de:31:c9:65:7f:c5:9f:d6:b0:a6:76:19:eb:07:2a:a0:f4:
3b:a2:f2:90:bd:e4:fe:14:ed:17:9e:2b:2d:ae:90:f9:06:48:
74:d2:ed:a3:6f:55:b2:ed:21:79:ae:0e:ce:7a:10:5c:d4:51:
42:13:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:26 2024 by rpki-client on console-ams.rpki-client.org