Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/vt3QAV1P3VF1zcwwo3jfhdfw0lo.roa
File: vt3QAV1P3VF1zcwwo3jfhdfw0lo.roa (raw, json)
Hash identifier: 4lq2LlhcDY/df+Tql1h4YBG+xXcx/B3D4/7xlLHCe6M=
Subject key identifier: BE:DD:D0:01:5D:4F:DD:51:75:CD:CC:30:A3:78:DF:85:D7:F0:D2:5A
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 10706043
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/vt3QAV1P3VF1zcwwo3jfhdfw0lo.roa
Signing time: Sat 01 Jan 2022 04:01:28 +0000
ROA not before: Sat 01 Jan 2022 04:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275800131 (0x10706043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Jan 1 04:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beddd0015d4fdd5175cdcc30a378df85d7f0d25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:31:25:7b:45:ce:81:c4:36:5d:5a:3f:27:
f1:a2:ff:38:0c:bf:d6:51:65:7c:0e:99:db:0c:a1:
5d:a7:ae:90:15:c5:d6:ec:56:c6:03:78:44:b4:ce:
bc:bd:9d:d1:88:1e:05:ca:ab:dc:88:bc:74:b6:d5:
7b:9f:17:52:de:eb:b0:32:9f:b3:9b:e6:1e:bf:6a:
92:1a:ec:59:39:25:5a:bd:24:18:27:ec:8d:69:6c:
5b:4e:63:fd:52:b0:20:b3:62:c3:81:84:d4:cf:7a:
8f:31:f1:07:31:f7:d3:9b:85:bf:eb:d9:8c:4d:de:
4d:95:04:8c:52:87:96:23:f2:88:f6:3e:41:be:70:
cf:26:5c:70:f3:7d:17:ee:c3:7a:2f:2f:54:39:3c:
89:3b:86:5c:3d:29:d8:af:d2:12:06:8f:dd:95:55:
20:27:c4:40:b6:e4:eb:84:d6:ac:be:33:d0:57:75:
c5:de:6e:df:56:39:8a:b0:33:88:ce:8e:2a:47:ce:
8e:fe:96:67:49:37:66:59:82:0c:98:55:4d:2a:03:
9e:e8:2c:3f:68:73:b0:4b:db:cf:b7:2c:7f:32:02:
7f:09:1a:cd:e1:20:98:7e:23:c3:b8:4b:1a:55:51:
ac:c4:06:e3:ee:70:ae:27:1e:a1:37:2d:f5:af:cb:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DD:D0:01:5D:4F:DD:51:75:CD:CC:30:A3:78:DF:85:D7:F0:D2:5A
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/vt3QAV1P3VF1zcwwo3jfhdfw0lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.153.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3b:51:dc:d2:e6:96:19:6c:62:79:66:1c:f3:22:3d:a0:81:
e5:b6:60:f6:e3:3d:5a:ff:df:1d:db:81:e3:2f:5c:48:fd:62:
e1:2a:74:2f:2e:63:21:df:e4:66:fa:78:3c:a9:25:5e:32:36:
c8:0e:ed:11:35:c9:93:d2:bc:f3:df:f3:dd:82:4b:aa:57:43:
86:8d:aa:b0:67:d7:82:99:b6:da:52:57:9c:61:20:af:e8:18:
89:a9:01:d8:c3:ba:02:cb:75:f5:41:c1:c6:da:76:9f:fc:4f:
72:4a:9b:99:08:b3:f9:e9:69:94:d2:c4:a1:2a:ca:8b:59:aa:
0d:17:89:02:72:de:11:23:ad:fe:03:2c:c6:63:64:92:37:39:
0f:99:db:54:a0:f1:97:75:b6:3c:1a:97:68:be:eb:84:c5:3c:
1e:97:19:b5:a6:71:58:a9:19:f9:22:3c:00:ae:a4:72:1e:c6:
d2:71:a4:74:cb:cf:c4:8d:fe:5d:27:61:48:49:02:35:cb:0a:
5d:e9:12:30:ce:c0:f7:d8:b0:21:fc:0b:a4:57:49:7c:21:82:
48:2c:cd:1f:88:95:4b:bd:7e:39:c4:1e:4a:f6:d1:fc:10:6d:
27:68:e4:fe:40:53:5a:25:b4:21:36:ca:d9:37:95:af:55:54:
1e:d6:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-fra.rpki-client.org