Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/mCP4SXRWUmTcqEBscIoFWBgkeWg.roa
File: mCP4SXRWUmTcqEBscIoFWBgkeWg.roa (raw, json)
Hash identifier: D9PlyFworO5h5aqD1X9Ag4es9k1T+nINvdhLBXnugz0=
Subject key identifier: 98:23:F8:49:74:56:52:64:DC:A8:40:6C:70:8A:05:58:18:24:79:68
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0991CECA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/mCP4SXRWUmTcqEBscIoFWBgkeWg.roa
Signing time: Mon 24 Jan 2022 21:44:48 +0000
ROA not before: Mon 24 Jan 2022 21:44:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41944
IP address blocks: 92.118.206.0/24 maxlen: 24
92.118.205.0/24 maxlen: 24
92.118.204.0/24 maxlen: 24
45.142.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160550602 (0x991ceca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 24 21:44:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9823f84974565264dca8406c708a055818247968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:1d:1a:70:a0:95:1f:b7:b2:43:e2:68:f5:
45:98:cc:d5:b7:c0:0a:08:a6:28:2f:ed:a9:13:8b:
cf:9e:c6:01:93:bd:ef:24:c3:b9:02:3d:b6:20:b7:
b0:79:11:fe:68:17:68:a4:7e:14:31:73:ee:42:df:
ad:aa:c3:66:37:1b:4f:53:3e:a5:de:63:24:bd:ec:
c5:08:b7:46:69:55:f3:59:48:ee:64:e3:95:4d:a5:
a7:71:89:ce:59:c6:50:81:54:af:06:08:42:08:25:
ac:de:0d:90:86:55:ed:8d:cc:f8:7f:58:03:ec:02:
87:ab:77:ba:fc:ad:85:a3:b0:3e:b8:f8:8b:6c:f1:
ad:96:20:44:54:2c:c3:cb:8b:52:bf:cb:bc:f7:2a:
cf:7c:ad:af:ca:4e:29:a6:dd:1a:3f:75:72:f3:ef:
06:d9:71:1c:27:14:30:0a:65:d2:0a:d8:79:17:cc:
43:8e:5a:1e:ec:39:1d:3a:8e:07:3f:8a:52:45:da:
d3:ec:3a:ae:5d:08:ed:1b:dd:32:70:e2:62:d3:41:
34:c7:82:c3:25:8e:44:76:b4:88:b3:87:32:b2:e8:
78:dc:19:4b:94:a4:9b:70:d2:59:08:66:c4:4e:4d:
c8:e6:bf:bd:bb:9e:f9:6b:07:6c:bf:5c:f9:17:cc:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:F8:49:74:56:52:64:DC:A8:40:6C:70:8A:05:58:18:24:79:68
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/mCP4SXRWUmTcqEBscIoFWBgkeWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.105.0/24
92.118.204.0-92.118.206.255
Signature Algorithm: sha256WithRSAEncryption
00:06:7a:3c:ff:9b:9e:87:d0:64:d2:62:eb:5f:02:94:af:3a:
80:e4:02:68:b8:73:5c:c4:b5:b5:43:b0:84:c9:a3:78:16:23:
c2:9c:cb:d0:89:7b:d3:89:2a:c4:74:78:a1:47:85:a8:2d:76:
0b:1f:c1:1f:4b:e7:06:42:53:dc:b2:38:b5:52:8d:6c:b6:a4:
90:48:37:92:62:1c:f8:5f:11:66:92:e0:7f:34:d6:40:ab:29:
1d:de:6e:af:1d:8d:06:e6:35:47:e9:b1:47:8a:02:f6:1a:8e:
ee:fb:a1:72:3a:68:0f:24:ac:69:79:07:29:11:33:59:35:f2:
86:84:14:8b:b3:18:94:c8:f9:cb:20:c7:e2:2e:e3:13:68:9f:
47:64:c7:9e:a1:ec:b3:bd:28:79:86:86:46:d1:e1:95:78:61:
8d:eb:2d:fd:ec:48:a7:74:5d:cc:53:4a:ee:48:ea:4b:97:fc:
4e:b8:9e:47:98:7e:56:09:db:a8:ea:35:53:d7:3f:32:7d:5f:
00:b1:4d:6c:82:e5:0b:89:53:db:59:7b:ea:d9:40:d3:6a:e4:
7d:fd:2b:00:93:31:07:3d:68:a0:df:e6:c9:f1:3c:04:8f:a8:
fa:8e:d3:86:a7:5b:98:f0:62:66:57:30:30:fe:4e:71:8d:5a:
84:3d:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org