Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/o1p38ouV89BGG3zZD5U5eGEWX-U.roa
File: o1p38ouV89BGG3zZD5U5eGEWX-U.roa (raw, json)
Hash identifier: /E5D7OQFQ7520CXrG/Z9bCAGDqLOI5yWKF3n9VccHy8=
Subject key identifier: A3:5A:77:F2:8B:95:F3:D0:46:1B:7C:D9:0F:95:39:78:61:16:5F:E5
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0183D6F270F6B4629993B7A0846673F30CD4
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/o1p38ouV89BGG3zZD5U5eGEWX-U.roa
Signing time: Fri 14 Oct 2022 14:42:36 +0000
ROA not before: Fri 14 Oct 2022 14:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202273
IP address blocks: 93.92.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:f2:70:f6:b4:62:99:93:b7:a0:84:66:73:f3:0c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 14 14:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a35a77f28b95f3d0461b7cd90f95397861165fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:3a:1e:c3:57:a7:eb:b7:26:30:55:29:8c:
83:f0:58:ef:4b:81:43:68:34:6e:09:e6:8a:a4:10:
ab:98:25:50:a2:73:8e:45:2c:62:c8:85:87:bc:13:
9d:4b:db:4d:1c:5f:71:87:a7:87:79:a6:e5:3d:21:
72:45:df:c5:e1:a4:0b:68:70:b3:0e:0d:ac:a0:e7:
1a:97:02:fd:c4:2b:ab:d3:39:fd:6b:a0:57:39:4f:
a8:53:27:f1:69:5d:16:c0:b8:23:12:7e:02:4b:84:
6f:29:2c:aa:28:3a:aa:19:a6:45:8c:df:6a:73:d1:
2f:35:8b:f7:5e:c6:89:d1:29:52:55:d1:73:09:7e:
54:c0:2b:bc:64:09:1d:b3:bc:3a:37:e3:55:e4:c5:
39:7e:7b:32:c1:87:f1:b1:bb:06:e3:60:46:93:8d:
8f:ef:f0:cc:5a:62:d7:9f:bc:bd:f5:3d:10:e4:45:
0c:55:af:04:a5:c8:b2:90:ad:97:11:2b:b2:5b:7b:
74:2c:30:88:09:4c:2d:12:ee:88:50:ca:f2:a2:03:
9d:61:d9:86:32:2b:5c:5b:99:cb:0d:8f:8a:85:8c:
51:e5:75:19:a8:20:5a:a6:1d:b8:7c:a2:fd:58:0a:
e5:ec:91:0b:99:38:d6:4c:a2:24:6c:ef:8a:6c:0e:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:77:F2:8B:95:F3:D0:46:1B:7C:D9:0F:95:39:78:61:16:5F:E5
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/o1p38ouV89BGG3zZD5U5eGEWX-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.113.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a9:48:75:bd:fb:fe:75:be:f5:49:c1:36:0d:f8:f0:b8:af:
34:8f:5f:0f:3f:d0:07:e5:a8:1b:cf:d8:0a:01:26:a8:9a:a5:
42:94:f1:9c:7a:07:37:99:ca:6f:cc:7b:2f:77:6c:06:a4:f6:
a9:78:e9:73:3d:c0:31:7c:7d:16:47:ad:2b:8f:c6:5f:ba:c7:
1a:91:17:cc:cb:e1:be:ce:eb:cd:ba:35:b7:a0:55:ee:6c:cf:
c3:f3:80:e2:42:14:ec:7c:c9:50:70:77:d7:cc:30:61:6f:44:
ce:89:b9:f9:6c:b1:90:3a:3f:0c:97:cc:0f:d6:e5:9a:86:03:
cc:d0:80:db:a8:fa:40:ce:ca:f5:68:66:98:4a:a3:a7:12:4c:
d1:38:8a:a0:50:25:be:2e:cf:b9:c1:87:67:73:39:70:47:23:
58:33:fe:71:81:03:92:51:7f:14:60:91:6c:99:8a:98:ed:70:
4f:1e:5a:19:1b:bc:d3:ce:1b:1f:f1:90:9d:f6:bd:d7:48:b8:
1a:c7:01:e0:7a:12:91:a0:04:e7:06:86:d8:52:2f:86:dd:40:
dc:3b:3a:c6:a0:4e:c7:e4:ce:92:85:18:bb:4a:4e:28:d0:51:
08:d9:65:7b:1d:03:f3:65:07:85:5c:26:1f:fe:0e:d9:e8:37:
77:4e:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org