Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/eFrQ35d70TORdZWoIWAsT1uQxKE.roa
File: eFrQ35d70TORdZWoIWAsT1uQxKE.roa (raw, json)
Hash identifier: q0RIri6Qlml5tAMHQ4pPQ6BuaCG2Akd1gjGNn+4xBKo=
Subject key identifier: 78:5A:D0:DF:97:7B:D1:33:91:75:95:A8:21:60:2C:4F:5B:90:C4:A1
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 07846355
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/eFrQ35d70TORdZWoIWAsT1uQxKE.roa
Signing time: Sat 01 Jan 2022 03:51:09 +0000
ROA not before: Sat 01 Jan 2022 03:51:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198024
IP address blocks: 185.124.92.0/22 maxlen: 22
2a06:b100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126116693 (0x7846355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Jan 1 03:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=785ad0df977bd133917595a821602c4f5b90c4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:09:5c:be:c3:16:85:fc:7c:e6:47:f7:37:
64:1e:cc:bd:06:ad:21:c4:f9:d4:dc:d7:1a:b1:0c:
c5:e1:03:0b:2e:97:d0:a4:e7:83:87:62:d8:57:fa:
45:e0:95:02:33:a0:79:34:3c:34:09:c2:db:f2:01:
e9:a6:9f:82:8c:5a:7d:08:5f:8b:d9:f4:f4:d4:5e:
ac:88:50:fe:22:f2:db:98:e2:d2:34:c1:a3:7c:61:
21:5f:68:a4:6c:48:9a:4f:b7:e9:98:a3:02:cd:4f:
10:fe:ab:9a:4c:21:79:fd:0c:8a:2d:99:a1:68:2d:
fd:45:e7:55:c0:1e:dd:3c:32:1c:e8:e2:45:01:19:
07:12:90:fe:ce:4f:7d:6e:ca:37:00:de:9e:53:14:
6b:a0:22:55:c4:56:6c:99:53:87:46:3a:26:c9:33:
cf:c7:a3:4d:d6:83:f0:66:04:0c:5a:16:9f:65:94:
a8:2e:99:6c:5c:63:c8:f6:14:5f:1c:f6:5a:cf:5e:
e1:92:ba:2f:9b:bb:dd:0a:02:b1:9e:e1:0b:2e:e4:
12:12:a9:85:1a:d0:03:c2:dc:df:a5:50:b9:b4:cc:
ab:e0:75:e7:53:e7:90:52:7d:36:c5:e7:1a:87:e4:
7e:af:d9:45:76:cc:d4:d2:10:f3:fd:35:a8:23:44:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:D0:DF:97:7B:D1:33:91:75:95:A8:21:60:2C:4F:5B:90:C4:A1
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/eFrQ35d70TORdZWoIWAsT1uQxKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.92.0/22
IPv6:
2a06:b100::/29
Signature Algorithm: sha256WithRSAEncryption
18:f5:28:e3:13:78:ce:4c:fe:e9:d3:c6:aa:4a:93:a0:e4:d1:
e2:f8:35:6e:e7:21:43:a0:fe:20:3a:fc:a8:68:42:5c:cd:3d:
21:be:32:51:ce:66:12:4b:0f:cd:7e:ac:97:32:13:41:36:9c:
d5:f4:9b:33:57:ab:75:69:48:1a:48:b9:e7:ca:3c:9e:04:bf:
01:36:fd:1b:5a:df:62:9a:1a:d8:1f:10:7c:f0:95:93:b7:cd:
b9:6a:fc:c6:ce:87:16:ff:7e:55:ab:7f:ef:07:0d:61:eb:1b:
60:3b:f6:7f:f3:86:86:d5:70:c8:f6:42:5a:8f:29:40:5b:30:
b3:42:d5:cd:47:5c:a0:14:58:65:79:36:59:40:15:1d:f5:97:
73:e2:cc:17:c6:2b:92:03:a5:98:6e:c7:0e:ca:f4:8e:c9:9c:
05:cb:f3:78:47:7f:cb:3a:86:fd:f9:33:c0:49:f2:fc:98:78:
d3:13:e1:1c:f2:8f:09:db:97:06:54:e7:46:10:a7:58:3a:70:
ef:c3:cc:d4:9d:1d:90:a4:90:57:2e:30:ad:ea:e6:2a:66:65:
88:fb:fe:da:9c:34:2e:4a:c7:a1:9b:fa:17:e8:eb:24:a8:dd:
ef:52:25:18:3d:51:14:d1:ba:2b:c8:27:0e:1e:e1:94:18:d0:
7f:f1:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org