Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/EQnpg0Xb7F9Q8h-Sul57i-E9dIw.roa
File: EQnpg0Xb7F9Q8h-Sul57i-E9dIw.roa (raw, json)
Hash identifier: 2rLXgufuw4cShawUaqSJQJDJsq4n6iRclKg1HeLKezM=
Subject key identifier: 11:09:E9:83:45:DB:EC:5F:50:F2:1F:92:BA:5E:7B:8B:E1:3D:74:8C
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 034FC468
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/EQnpg0Xb7F9Q8h-Sul57i-E9dIw.roa
Signing time: Mon 31 Jan 2022 09:32:38 +0000
ROA not before: Mon 31 Jan 2022 09:32:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 185.119.10.0/24 maxlen: 24
185.119.11.0/24 maxlen: 24
2a10:80c0::/36 maxlen: 36
2a10:80c0:1000::/36 maxlen: 36
2a10:80c0:1000::/48 maxlen: 48
2a10:80c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55559272 (0x34fc468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jan 31 09:32:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1109e98345dbec5f50f21f92ba5e7b8be13d748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:d2:59:8e:1c:42:7b:b9:d8:46:87:fe:a0:
40:55:a2:91:b4:cf:ef:90:26:3a:87:e4:63:92:0b:
e8:cc:e2:43:96:38:b2:52:36:9e:7f:25:7e:32:8e:
c1:a8:fa:6c:9c:e0:69:6b:09:c8:c9:7c:6c:a9:b4:
4d:97:72:c5:0a:01:bf:ab:c2:79:3d:85:4a:7d:53:
e9:e3:41:34:37:c2:6c:df:b3:ce:fc:9a:e9:33:eb:
b2:94:33:e6:85:70:ec:5e:76:3f:d2:d1:f3:6f:71:
fd:bf:02:78:8f:5d:4b:67:6f:41:ea:2b:2d:ba:20:
4c:16:3d:f8:7f:d3:0d:e1:ae:ba:bf:1c:73:06:ae:
27:43:2b:84:70:b0:26:b2:ef:63:c4:72:b6:5d:68:
5f:a6:4e:68:f5:d8:b4:2f:43:e4:1b:6e:4b:75:79:
fc:37:e1:f6:02:18:d3:58:a5:e6:76:ed:39:2f:7c:
86:7e:ab:4c:50:53:13:79:1b:25:8e:42:1c:b3:a7:
64:68:52:35:b2:69:34:33:fe:90:8f:3a:14:f4:17:
e0:77:e0:c1:3e:bd:f9:b5:2a:19:57:a1:42:81:02:
14:c0:67:63:fc:6d:9a:ff:9d:bb:2a:ce:b2:7c:55:
8e:2a:36:38:06:56:84:76:b1:54:df:82:a9:7d:ca:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:E9:83:45:DB:EC:5F:50:F2:1F:92:BA:5E:7B:8B:E1:3D:74:8C
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/EQnpg0Xb7F9Q8h-Sul57i-E9dIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.10.0/23
IPv6:
2a10:80c0::/35
Signature Algorithm: sha256WithRSAEncryption
27:9a:c7:a5:0d:7a:34:00:e3:fd:ed:5e:99:6d:d2:f8:7b:88:
42:99:22:cb:33:c7:9d:bf:5c:9b:aa:9f:b5:c0:3e:6b:99:87:
e6:e8:fe:7a:4b:34:e5:23:69:28:57:07:e7:cc:25:44:33:7f:
55:bb:c7:6f:df:35:b6:db:76:61:42:a6:a3:bd:76:d4:c5:b5:
22:ad:86:b1:f8:0b:3c:87:a7:0b:85:f1:17:76:1c:9b:59:52:
06:94:53:b5:1b:12:b9:df:ed:55:3a:50:29:c9:da:74:9f:e9:
45:48:20:a7:50:25:cd:11:06:34:8b:7a:fc:8b:a7:be:9b:d0:
af:0b:2d:ba:29:08:62:f2:d2:10:b4:c4:d2:6f:50:f5:a8:d6:
5b:e2:1a:73:c3:39:f3:52:ba:cf:2a:90:6a:74:ae:13:0d:d2:
ad:f4:8a:54:27:fc:24:86:fe:b8:6b:e9:4d:2e:2b:d4:3d:e7:
36:22:04:c8:57:66:89:67:20:35:b2:2d:8f:c1:3c:03:74:c1:
60:f1:05:57:c0:bd:fb:56:ab:c5:55:ec:95:a3:23:f7:81:5b:
26:7a:a6:7d:05:fa:98:b9:0d:b2:85:15:01:d0:36:d3:90:9e:
ff:5c:f0:c9:5f:86:5c:d9:bc:2f:1c:12:a2:69:f2:94:7b:1e:
26:43:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:14 2024 by rpki-client on console-fra.rpki-client.org