Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V8HxhZLDBUI5NNkfc_ARw48hI4I.roa
File: V8HxhZLDBUI5NNkfc_ARw48hI4I.roa (raw, json)
Hash identifier: 5Q/bJirx7d+ZDUNdBw7rwMdkgkzwsuaIXbAXDvUfp6c=
Subject key identifier: 57:C1:F1:85:92:C3:05:42:39:34:D9:1F:73:F0:11:C3:8F:21:23:82
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0413E37F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V8HxhZLDBUI5NNkfc_ARw48hI4I.roa
Signing time: Thu 10 Mar 2022 11:26:00 +0000
ROA not before: Thu 10 Mar 2022 11:26:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68412287 (0x413e37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 10 11:26:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57c1f18592c305423934d91f73f011c38f212382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:bc:2b:41:0e:c0:33:35:bb:a9:37:fd:3b:
bd:e4:4d:ae:e6:e8:69:f7:6a:cc:40:ea:1a:b2:de:
a8:5a:b7:1a:ad:2f:b9:9a:05:2c:1e:ff:66:80:09:
74:57:57:b5:f7:d1:51:b1:20:a8:8c:4f:ea:d1:50:
77:37:ad:e4:cd:2a:9f:ff:17:db:57:28:1f:e8:77:
29:24:e9:b3:71:cc:cf:34:2a:e7:66:e2:6a:fd:27:
3e:44:05:cb:ae:47:84:3a:16:fc:32:20:7c:00:c7:
2b:d0:48:3a:df:d1:98:02:a3:59:46:93:a9:f7:46:
0e:d4:10:2a:0f:68:9f:13:1a:cb:7e:18:2e:4c:c2:
67:74:61:be:1e:b3:7b:78:70:e2:55:b7:77:0e:29:
20:df:bb:8a:52:23:b0:cd:2f:d5:19:16:3f:66:57:
85:e3:16:bd:9d:c0:d1:ac:3d:36:51:1b:ea:37:cb:
c0:a6:7e:4e:09:d1:01:22:1e:46:41:53:f5:1b:29:
34:78:c2:87:11:ef:c8:46:12:1d:00:a5:19:a8:26:
90:db:9f:50:b5:38:e2:3e:49:8b:7d:08:da:29:1a:
22:cd:1d:91:c9:28:ef:35:17:4c:45:cd:5e:85:d6:
d9:b9:be:56:d9:b6:8e:ca:1e:79:98:90:a4:88:c1:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:F1:85:92:C3:05:42:39:34:D9:1F:73:F0:11:C3:8F:21:23:82
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V8HxhZLDBUI5NNkfc_ARw48hI4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f9:a9:5a:d1:84:9e:2a:67:06:6e:65:c9:f9:d8:e6:4a:60:
69:0d:2e:96:5d:69:7f:a6:7c:ca:62:a3:d5:c6:40:a1:4b:47:
09:4f:c7:b5:20:f8:35:6e:72:75:76:5b:60:2d:6e:c3:68:95:
b6:d1:ac:27:34:d0:ed:80:4a:6b:d0:78:ca:a2:c9:0c:c9:e2:
ca:b8:99:c4:2b:6d:95:8c:ad:2d:84:8c:62:07:fe:ea:c1:22:
2c:34:c2:24:43:3d:cd:c7:aa:cc:c8:49:3f:49:f9:af:25:4c:
f7:75:84:99:c0:fe:46:88:8b:12:91:d0:c7:f5:e6:7d:f3:df:
c6:dd:a9:e3:a7:f6:db:5a:4d:57:ce:11:aa:d5:27:3e:11:46:
5f:2d:d2:50:32:75:c5:ae:61:1d:27:e8:2c:b1:42:ee:55:10:
7e:82:ae:57:08:45:b1:76:74:ae:1b:58:9a:88:08:54:ff:ef:
12:da:71:f2:2c:14:2f:1d:f5:82:ba:66:9b:37:05:20:c0:69:
33:0c:8d:7f:3b:fd:72:a9:f6:ed:66:ad:32:90:26:fb:11:94:
7e:15:45:2a:4a:8a:f9:e2:ac:e0:a2:c4:f5:f0:1b:f7:a4:30:
e7:50:d7:48:f4:55:56:af:b9:9d:6f:ac:73:94:3f:e6:1c:43:
32:d4:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org