Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/P2swUwNUEfM6c2N3XN4uj-RuRMk.roa
File: P2swUwNUEfM6c2N3XN4uj-RuRMk.roa (raw, json)
Hash identifier: B5IwC9tu7gLN+oKaRIvXPUTItjwjUoNlewU2SQ5LQ/w=
Subject key identifier: 3F:6B:30:53:03:54:11:F3:3A:73:63:77:5C:DE:2E:8F:E4:6E:44:C9
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 14A4D8BD
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/P2swUwNUEfM6c2N3XN4uj-RuRMk.roa
Signing time: Sat 01 Jan 2022 12:02:11 +0000
ROA not before: Sat 01 Jan 2022 12:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346347709 (0x14a4d8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Jan 1 12:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f6b3053035411f33a7363775cde2e8fe46e44c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:de:d7:f0:5e:3c:64:54:d5:a9:e7:ef:85:
78:e9:6e:a3:7b:a8:e2:6d:d3:f1:6a:5f:91:7b:d6:
94:3c:13:0d:8d:3c:be:3e:5e:8c:fd:f0:c5:3d:01:
c6:91:6c:fb:a0:df:39:cd:a9:d5:86:14:a8:d2:ea:
8d:80:56:83:b7:e6:61:81:be:06:d5:0c:6a:df:21:
62:10:ff:85:08:95:ae:80:b5:24:a7:46:33:bb:a3:
85:14:47:d0:f1:75:95:24:a2:42:c1:26:55:c1:42:
b2:81:42:5c:ba:48:1e:47:4d:02:28:a0:fa:40:c1:
a4:0b:25:77:a5:96:f7:2e:f6:36:3f:67:e8:34:a0:
a9:4e:59:d0:56:ad:27:6e:69:65:ae:3b:b0:ec:1d:
92:8e:ec:b5:f7:ed:23:85:6e:e6:92:62:fd:c0:a8:
ad:88:1f:5f:74:01:53:ed:d7:8b:8e:ea:3a:fc:09:
e9:72:a9:f7:57:8f:d6:05:71:fa:07:a2:fb:96:e6:
e0:07:72:19:a2:6e:8c:50:56:40:fd:eb:18:6e:ee:
5a:51:75:08:a9:6a:8d:7d:4d:7c:98:59:16:3b:57:
79:14:ed:22:85:57:c1:00:5b:d9:4a:c9:5a:42:d6:
0a:e2:6c:8f:5d:a1:27:8f:82:98:ac:29:e7:cc:e3:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:30:53:03:54:11:F3:3A:73:63:77:5C:DE:2E:8F:E4:6E:44:C9
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/P2swUwNUEfM6c2N3XN4uj-RuRMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e1:cc:39:4e:35:07:8a:5e:0b:aa:3b:29:f8:7e:06:ef:e5:
f8:fc:6d:1d:dd:77:af:32:7f:9c:c7:dd:66:d2:14:ad:fb:4c:
ec:d3:2e:8e:91:0d:b6:9d:e6:98:8f:e4:f4:92:5c:29:1c:d7:
4e:a5:07:04:b1:cf:27:f5:0d:ce:51:e2:8e:1d:cc:13:14:d7:
b8:a5:ac:6f:d3:cd:8f:24:50:9a:59:f5:e2:c9:bb:46:56:c8:
b3:88:a4:8b:f3:ac:af:fe:f3:69:3e:44:29:9e:98:a6:b4:be:
21:68:5e:62:39:fa:39:6b:a4:30:08:b6:86:5f:f0:e4:a6:e5:
a6:68:72:7e:82:2b:83:81:29:2a:71:c5:5a:b7:f2:d4:d5:92:
59:7b:f9:aa:e8:96:40:31:fe:1d:ab:c5:e3:09:fb:00:28:cc:
bd:26:63:59:da:fe:93:a1:ce:b9:cb:c7:1a:10:ae:26:16:cf:
84:4f:15:51:1d:e6:a8:85:37:a5:bb:1a:dd:30:ed:44:30:9d:
c2:bd:ac:61:13:17:e9:7f:f9:93:5b:a7:b9:37:f6:52:2e:e3:
b5:57:4d:e3:8a:e8:7a:4d:93:b2:25:c6:89:23:e1:c4:ab:c0:
02:19:5c:2f:d0:a0:d7:70:91:7b:9c:71:b3:8d:17:de:0d:8f:
46:23:cb:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFKTYvTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NjNiNjYwZjU2OWI1NDZiNTMwZWM2ZGU2OWIzMDhiMzY5M2U3Zjc0MB4XDTIyMDEw
MTEyMDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y2YjMwNTMwMzU0
MTFmMzNhNzM2Mzc3NWNkZTJlOGZlNDZlNDRjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALwp3tfwXjxkVNWp5++FeOluo3uo4m3T8WpfkXvWlDwTDY08
vj5ejP3wxT0BxpFs+6DfOc2p1YYUqNLqjYBWg7fmYYG+BtUMat8hYhD/hQiVroC1
JKdGM7ujhRRH0PF1lSSiQsEmVcFCsoFCXLpIHkdNAiig+kDBpAsld6WW9y72Nj9n
6DSgqU5Z0FatJ25pZa47sOwdko7stfftI4Vu5pJi/cCorYgfX3QBU+3Xi47qOvwJ
6XKp91eP1gVx+gei+5bm4AdyGaJujFBWQP3rGG7uWlF1CKlqjX1NfJhZFjtXeRTt
IoVXwQBb2UrJWkLWCuJsj12hJ4+CmKwp58zjbB8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/azBTA1QR8zpzY3dc3i6P5G5EyTAfBgNVHSMEGDAWgBQGO2YPVptUa1MO
xt5pswizaT5/dDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JqdG1EMWFiVkd0VERzYmVhYk1JczJrLWYzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjEvOTJiYTViLWM3MzUtNGEzNC04NTM0LWJjMjVhZTZlYjEzYy8x
L1Ayc3dVd05VRWZNNmMyTjNYTjR1ai1SdVJNay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEv
OTJiYTViLWM3MzUtNGEzNC04NTM0LWJjMjVhZTZlYjEzYy8xL0JqdG1EMWFiVkd0
VERzYmVhYk1JczJrLWYzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBcmDANBgkqhkiG9w0BAQsFAAOC
AQEAFuHMOU41B4peC6o7Kfh+Bu/l+PxtHd13rzJ/nMfdZtIUrftM7NMujpENtp3m
mI/k9JJcKRzXTqUHBLHPJ/UNzlHijh3MExTXuKWsb9PNjyRQmln14sm7RlbIs4ik
i/Osr/7zaT5EKZ6YprS+IWheYjn6OWukMAi2hl/w5KblpmhyfoIrg4EpKnHFWrfy
1NWSWXv5quiWQDH+HavF4wn7ACjMvSZjWdr+k6HOucvHGhCuJhbPhE8VUR3mqIU3
pbsa3TDtRDCdwr2sYRMX6X/5k1unuTf2Ui7jtVdN44roek2TsiXGiSPhxKvAAhlc
L9Cg13CRe5xxs40X3g2PRiPLOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org