Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/92TanqR1kmjyTqKYQpUoQf8yjuQ.roa
File: 92TanqR1kmjyTqKYQpUoQf8yjuQ.roa (raw, json)
Hash identifier: lg1e4sioZiz86wUwFjuYRonF72+D/H7+lYW7+5lS8sk=
Subject key identifier: F7:64:DA:9E:A4:75:92:68:F2:4E:A2:98:42:95:28:41:FF:32:8E:E4
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38B36E84
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/92TanqR1kmjyTqKYQpUoQf8yjuQ.roa
Signing time: Tue 17 May 2022 05:30:22 +0000
ROA not before: Tue 17 May 2022 05:30:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60966
IP address blocks: 95.111.92.0/24 maxlen: 24
78.83.156.0/23 maxlen: 23
78.90.198.0/23 maxlen: 23
78.83.158.0/24 maxlen: 24
78.90.200.0/24 maxlen: 24
95.111.39.0/24 maxlen: 24
95.111.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951283332 (0x38b36e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f764da9ea4759268f24ea29842952841ff328ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:33:f8:47:3b:54:80:37:db:1d:a9:38:2e:
af:16:d1:d4:d5:d0:fa:b6:8d:7c:53:4b:a0:29:43:
92:cf:61:c3:50:cc:c2:10:36:ac:96:e9:29:d5:ba:
bd:6f:f8:3e:7e:fb:85:0d:21:1d:5f:4c:a0:66:02:
ca:b8:45:95:70:8a:f6:d6:70:d2:af:4c:63:45:7c:
15:dc:d1:e3:cb:63:f9:81:d6:d8:19:a4:c8:89:8c:
49:24:fc:bb:c2:be:a8:11:ab:0b:8b:05:f4:f6:0a:
48:70:29:7b:0f:8f:fb:9d:73:17:e6:bf:cc:d5:2f:
76:b6:2b:c0:5d:4c:f2:60:33:99:d2:c6:45:a0:41:
f7:bb:f7:df:dc:fc:cf:91:1b:60:26:12:1b:a8:79:
4f:7d:b2:dd:0b:43:a5:7d:e2:7f:5e:84:b9:30:5c:
1c:03:88:f7:08:b8:66:96:4a:f8:1c:fb:22:89:53:
cc:94:ff:fe:5b:4b:ec:bb:4e:aa:26:27:7c:89:b5:
bf:38:20:c2:fa:0d:da:81:12:e3:50:2b:7f:59:70:
ba:8b:57:30:5b:62:7f:b3:c8:db:1e:42:73:51:76:
d1:14:a3:05:27:2b:f8:f0:1b:99:2a:89:7b:70:1f:
12:90:5e:d2:d2:58:9d:32:82:b2:6a:7d:d8:07:77:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:DA:9E:A4:75:92:68:F2:4E:A2:98:42:95:28:41:FF:32:8E:E4
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/92TanqR1kmjyTqKYQpUoQf8yjuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.156.0-78.83.158.255
78.90.198.0-78.90.200.255
95.111.39.0-95.111.40.255
95.111.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:94:14:db:15:68:46:42:62:5e:81:b2:81:2e:9d:96:e6:98:
61:c8:b4:8a:1d:74:5a:ad:f6:8e:4f:bf:ac:12:36:5a:04:62:
da:de:d1:52:da:18:d8:93:67:67:ed:92:e9:84:f8:ab:18:f8:
02:e6:ec:a2:b6:d5:96:7d:b8:ed:1e:68:ac:f2:ff:85:af:88:
5c:30:06:69:85:7e:6e:a1:cd:9a:f7:01:da:74:b4:3a:40:ce:
c8:17:a7:70:10:22:d7:49:53:be:92:79:11:99:ad:1a:35:1d:
c7:e4:72:12:af:10:4e:9a:e0:0f:6f:40:63:24:08:2c:66:0c:
8a:a6:6d:0b:89:51:8c:49:cb:ac:21:22:fb:a0:8c:e6:4f:e9:
48:7e:a7:44:ee:bd:b6:08:f8:d3:0a:b6:b9:ab:23:26:ad:2e:
7c:03:97:c2:5f:4a:90:4d:e3:2a:9f:06:1a:12:50:13:28:9c:
8f:45:ea:d4:1c:4e:76:3d:ac:68:56:e8:01:63:b5:61:5a:2f:
0c:7d:f8:38:04:1c:63:8c:8e:67:e0:ad:5e:17:89:ab:10:29:
86:7b:15:90:d4:c5:0c:44:9c:a4:3a:da:1a:62:eb:6a:13:47:
33:4a:cf:79:ab:ad:0c:7d:d2:28:31:00:3b:14:bc:fa:12:c4:
b2:12:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-ams.rpki-client.org