Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zD1pbagGqsMKSWdP8RvG9RG-NyE.roa
File: zD1pbagGqsMKSWdP8RvG9RG-NyE.roa (raw, json)
Hash identifier: sR+LHhFTushG2+2ObF+oFt0aRCdLrM8yP3Vf0nN9epM=
Subject key identifier: CC:3D:69:6D:A8:06:AA:C3:0A:49:67:4F:F1:1B:C6:F5:11:BE:37:21
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A320A90
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zD1pbagGqsMKSWdP8RvG9RG-NyE.roa
Signing time: Fri 25 Mar 2022 12:03:17 +0000
ROA not before: Fri 25 Mar 2022 12:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41944
IP address blocks: 92.118.206.0/24 maxlen: 24
92.118.205.0/24 maxlen: 24
92.118.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171051664 (0xa320a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 25 12:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3d696da806aac30a49674ff11bc6f511be3721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:63:72:3b:00:6b:fd:e8:eb:2d:ad:dc:2b:
7d:31:d1:29:f1:bb:12:fb:90:4c:79:d3:78:8a:95:
60:36:c1:d9:29:7f:51:72:70:27:81:05:9a:66:ba:
30:a9:19:99:3c:67:1e:1b:c9:e1:74:45:27:9f:30:
b9:41:91:0c:76:98:93:f6:32:60:82:35:97:de:dc:
bc:cf:2f:55:6d:b0:10:3a:10:aa:e6:1f:be:c7:a3:
40:79:e4:ef:c2:79:29:6c:7d:c4:97:0d:ec:e2:58:
4a:5b:f1:ed:03:d5:c6:62:e1:2a:ee:ff:9a:dc:8e:
a4:27:80:2f:d4:95:cb:62:8f:21:e7:fb:d2:37:8b:
1c:2c:2f:c2:72:df:ca:ca:a7:33:99:aa:0e:e6:e7:
9f:20:67:b6:14:0a:82:1b:6f:1e:de:89:6b:1c:25:
10:d2:b2:77:47:43:a8:63:c4:ab:c2:3c:a8:69:99:
c7:8e:0a:9c:40:86:f7:b5:67:3f:59:cd:18:21:41:
73:3d:0e:35:24:90:fe:2a:52:86:60:cc:f4:28:64:
8e:b9:15:e2:8c:0a:73:cc:56:78:90:7f:34:1a:59:
de:a0:fd:6e:bc:39:96:15:80:5c:19:63:45:0a:52:
00:7e:31:39:6e:25:87:83:2d:41:89:37:fa:72:b3:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:69:6D:A8:06:AA:C3:0A:49:67:4F:F1:1B:C6:F5:11:BE:37:21
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zD1pbagGqsMKSWdP8RvG9RG-NyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.204.0-92.118.206.255
Signature Algorithm: sha256WithRSAEncryption
62:e1:36:71:23:16:26:0b:b9:5a:a1:a4:f1:e2:7b:41:d8:7a:
2b:07:2e:42:c9:8f:2e:22:d0:b7:a7:99:9b:6c:de:62:b2:1d:
22:44:21:c3:b2:15:9a:93:7e:2f:14:47:fa:a5:aa:83:c1:57:
e4:66:ee:e2:71:88:73:bd:91:03:37:0b:bc:74:a6:64:ea:c3:
f3:13:6a:da:dd:d4:f0:6a:d2:4a:5b:52:9d:7c:dc:5a:47:5d:
a2:a2:04:22:82:8c:d8:3c:fa:aa:dc:ff:3e:f1:ef:ed:41:97:
c4:0f:98:9b:61:50:43:cf:85:0a:5a:89:73:cc:b8:60:82:23:
3a:70:15:56:c1:a0:43:5f:69:c1:8d:a6:60:fd:a0:8f:44:71:
4f:5c:4f:e3:6f:c7:ce:c9:0b:2b:94:40:2e:94:08:bd:7b:6e:
a2:74:5b:04:c9:91:b1:b9:e4:de:2d:9a:54:7a:70:8a:f7:7e:
cb:c2:05:4c:85:98:e2:ed:c3:70:05:ec:28:35:b7:6d:4d:a0:
9a:fb:e7:47:ea:85:ff:23:54:b5:e1:f2:8f:8b:6c:58:dd:93:
fd:c3:ec:ed:51:c6:b6:f6:07:19:34:24:32:41:c6:27:ef:95:
eb:33:df:c7:f1:f7:91:d5:0f:c3:3a:ae:8c:0c:ed:99:10:89:
87:85:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org