Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/1v2EKD-jgzTKwoJa_-MzoAzX2Zk.roa
File: 1v2EKD-jgzTKwoJa_-MzoAzX2Zk.roa (raw, json)
Hash identifier: 4WeX9/lM8xlW/kP2DPLXkbzcRVB4FeqCkn4QY0VUm4A=
Subject key identifier: D6:FD:84:28:3F:A3:83:34:CA:C2:82:5A:FF:E3:33:A0:0C:D7:D9:99
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 03B1EF68
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/1v2EKD-jgzTKwoJa_-MzoAzX2Zk.roa
Signing time: Thu 17 Mar 2022 11:06:48 +0000
ROA not before: Thu 17 Mar 2022 11:06:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211331
IP address blocks: 91.220.10.0/24 maxlen: 24
185.119.10.0/24 maxlen: 24
185.119.10.0/23 maxlen: 23
185.119.11.0/24 maxlen: 24
2a10:80c0::/29 maxlen: 29
2a10:80c0::/48 maxlen: 48
2a10:80c0:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61992808 (0x3b1ef68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Mar 17 11:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6fd84283fa38334cac2825affe333a00cd7d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:ca:00:3a:ea:42:ef:dd:e7:6c:b5:75:cc:
58:61:08:e8:f0:6e:9d:f2:28:6c:ff:50:37:a9:d8:
70:24:53:71:35:f8:29:4f:c9:44:20:8d:62:7b:da:
be:35:e2:4d:7c:9f:83:8d:c2:24:84:22:68:83:be:
4f:e7:f7:ce:d9:04:3a:5d:41:7d:20:68:a9:61:be:
b3:dd:f2:f9:e8:f6:e3:d1:7e:67:01:cf:02:a7:ae:
90:11:cd:5e:a8:34:82:70:7c:ae:98:b2:7a:1b:98:
17:ed:64:98:e4:b0:a7:c7:59:d3:ba:ef:d8:e9:1f:
f2:ca:25:82:72:9a:29:cc:cb:cc:3e:54:c4:2a:6d:
bb:76:7a:d0:f5:36:79:ff:9b:bb:bc:f9:83:c3:d9:
0d:d5:cd:ad:c1:6d:4c:96:8c:89:8c:92:5f:ba:c0:
99:21:cb:47:a3:d4:64:97:88:54:6b:f7:7e:81:8d:
60:9e:44:07:69:8a:47:be:8d:5d:6b:17:60:12:ec:
6d:07:52:30:33:00:a2:c0:44:c3:9c:ea:9f:d2:a7:
6d:00:d5:7f:84:22:e7:6f:a9:bb:56:79:59:a5:df:
3f:0f:60:4d:2d:5e:f8:dd:d8:d9:1b:f9:d3:5b:f1:
68:41:53:33:98:58:d1:e7:a4:85:38:1e:0e:c6:d2:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:84:28:3F:A3:83:34:CA:C2:82:5A:FF:E3:33:A0:0C:D7:D9:99
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/1v2EKD-jgzTKwoJa_-MzoAzX2Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.10.0/24
185.119.10.0/23
IPv6:
2a10:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:e5:5e:2b:12:3f:75:51:15:61:c9:0c:81:8e:04:b4:6d:ca:
6e:9b:7e:e3:d9:c9:db:64:44:82:f6:f4:7f:e1:e2:fb:78:ad:
ac:40:3a:5c:e7:03:b2:16:cd:6e:61:64:a1:6e:f1:74:48:9e:
36:29:9d:af:90:c3:de:70:5f:12:92:38:ee:96:06:30:76:83:
49:0a:4e:1d:16:a9:b2:54:d5:38:71:23:47:33:22:f0:c6:e3:
5d:b0:17:00:83:9e:e4:85:30:16:b5:c8:04:23:b4:2c:e7:e8:
a4:51:21:a2:fd:43:64:85:65:a3:33:e2:06:79:a1:68:e2:1c:
85:fe:ae:5a:29:5f:4d:bc:f7:85:a2:16:cb:74:89:f7:4e:4a:
1d:05:1a:5e:85:a3:33:9a:d4:f6:ae:06:2a:e7:43:d6:60:b9:
84:5d:a9:50:cb:97:d1:01:04:99:07:52:d9:2e:15:ad:d4:7e:
6b:c6:ae:d0:1e:b2:e9:58:53:c4:9f:67:9a:08:22:d4:b3:a2:
77:7a:9f:1e:db:89:6e:0b:2b:81:22:a0:9c:ff:54:95:14:99:
69:97:49:f3:68:a4:df:6d:e1:30:e0:f9:4d:8d:8f:fb:91:1a:
16:d4:fc:e0:de:1a:91:8d:07:d1:1c:01:84:8b:ac:25:f7:d9:
87:de:8c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:14 2024 by rpki-client on console-fra.rpki-client.org