Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/kG1Pe5vbMakCu9Ysp09t0xBaAls.roa
File: kG1Pe5vbMakCu9Ysp09t0xBaAls.roa (raw, json)
Hash identifier: WgpCEF3veTd1sYJy8khhpKVCSRJgBnHW2sZ7Ynu5YWM=
Subject key identifier: 90:6D:4F:7B:9B:DB:31:A9:02:BB:D6:2C:A7:4F:6D:D3:10:5A:02:5B
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 1096DE70
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/kG1Pe5vbMakCu9Ysp09t0xBaAls.roa
Signing time: Sat 01 Jan 2022 00:58:39 +0000
ROA not before: Sat 01 Jan 2022 00:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.68.224.0/24 maxlen: 24
192.92.148.0/24 maxlen: 24
192.92.147.0/24 maxlen: 24
192.190.174.0/24 maxlen: 24
192.132.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278322800 (0x1096de70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jan 1 00:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=906d4f7b9bdb31a902bbd62ca74f6dd3105a025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:b4:33:c4:db:f7:05:97:bf:c7:13:fb:9c:
bc:52:fc:9a:98:bc:ca:1a:11:e1:d8:3d:f8:d0:1a:
38:f5:69:e6:38:e2:28:08:0c:56:57:f6:d2:16:ea:
df:b5:a5:da:bc:5b:91:d4:99:50:10:a6:69:05:ee:
30:a2:9a:67:5f:bd:1e:99:b0:77:6c:c3:1a:18:b3:
4e:8d:eb:f5:21:e6:27:b7:5c:e1:9f:61:ab:71:1e:
c2:1c:60:95:1b:96:6d:71:fb:81:6e:c1:71:b6:e8:
11:41:95:44:04:02:7a:d0:d7:13:35:e5:68:56:cc:
43:46:e8:93:bb:92:be:c6:0e:2a:b8:8b:7e:95:03:
43:18:a8:48:6a:f0:47:d5:29:3f:22:22:a5:d1:12:
3b:4f:41:93:d4:fd:7e:ec:ea:0e:78:b6:26:0e:fa:
5f:cf:08:be:bd:2a:55:03:86:8d:dc:ff:41:0b:1b:
75:cb:c7:58:48:4d:d8:d3:b5:65:7d:e2:59:f6:f2:
02:5c:e9:15:18:74:a7:79:05:0a:29:cf:19:fa:ed:
95:e9:bc:74:23:42:f3:33:1c:7f:58:7d:30:30:15:
8b:f9:8a:86:9a:a2:1a:dc:78:40:21:68:f0:b2:97:
48:a0:1f:45:d6:a8:62:6d:a4:cb:b6:36:2c:63:d9:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:4F:7B:9B:DB:31:A9:02:BB:D6:2C:A7:4F:6D:D3:10:5A:02:5B
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/kG1Pe5vbMakCu9Ysp09t0xBaAls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.68.224.0/24
192.92.147.0-192.92.148.255
192.132.53.0/24
192.190.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ab:75:69:ac:b0:e1:dc:ec:71:d6:00:2f:f8:44:2a:6a:76:
f6:32:4a:cb:71:61:61:84:f2:2b:34:e3:09:ae:11:ac:6a:f1:
ab:c9:99:8d:de:3f:64:4d:9a:15:88:1d:d1:9c:d5:37:08:44:
99:e7:a5:28:4b:84:da:92:7a:87:bc:60:d2:84:1c:71:f7:9a:
21:4b:5d:e4:ea:f1:0d:25:a4:a3:23:a1:8d:4f:8b:b5:7c:75:
8e:6d:2f:8a:cd:87:ea:1e:2e:08:d3:07:3a:74:1b:01:e4:98:
96:68:eb:1d:6b:e5:79:b9:db:2a:33:b0:eb:46:2d:82:dc:83:
3a:cd:19:39:4a:d8:2f:3f:d4:f0:ff:06:aa:d0:0b:92:12:83:
3a:14:74:72:23:67:51:34:16:3e:87:3f:53:c5:a3:69:77:90:
c5:ee:54:18:bb:f5:70:39:9c:3c:18:af:f9:26:f2:e7:cd:2a:
36:1b:e0:db:ad:74:ab:4e:b9:08:c0:af:7d:13:fb:11:19:05:
41:a9:6a:65:6b:ba:fa:5f:16:c8:7f:92:51:c6:cc:33:16:6c:
ca:5e:5c:91:b8:ab:5b:f5:6a:b9:0f:22:78:bc:74:ae:c3:6d:
5f:ee:d7:a0:87:09:de:e9:65:43:b3:6d:34:e4:10:80:8e:8d:
3d:ad:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org