Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/DIampIQq1zTLg8RacPAnRK_TE_I.roa
File: DIampIQq1zTLg8RacPAnRK_TE_I.roa (raw, json)
Hash identifier: 6GHDEPuyF1led/o4w/1uyJHPA4jfPX1KbYhQtP+a/+A=
Subject key identifier: 0C:86:A6:A4:84:2A:D7:34:CB:83:C4:5A:70:F0:27:44:AF:D3:13:F2
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 0186356488F17BD33D2CECAA4ABC3C653927
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/DIampIQq1zTLg8RacPAnRK_TE_I.roa
Signing time: Thu 09 Feb 2023 08:57:06 +0000
ROA not before: Thu 09 Feb 2023 08:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.192.0/20 maxlen: 24
92.205.80.0/21 maxlen: 21
92.205.156.0/22 maxlen: 24
2a00:116a:200::/40 maxlen: 40
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:64:88:f1:7b:d3:3d:2c:ec:aa:4a:bc:3c:65:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Feb 9 08:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c86a6a4842ad734cb83c45a70f02744afd313f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:37:2a:e8:fd:47:cd:d3:b6:f8:76:b9:59:
ea:7a:b9:42:d3:08:d2:e1:01:eb:70:52:7a:48:c1:
6b:89:fa:0d:53:aa:55:27:48:99:c9:f4:9c:af:6e:
18:51:fb:84:71:08:ba:71:61:01:9a:3d:35:5c:c8:
14:9e:eb:57:fa:39:7b:b5:4e:ab:92:62:b6:40:72:
b0:eb:34:1c:09:da:ee:bd:a3:fc:f8:cc:5a:89:6a:
e1:45:cd:e4:33:5c:ae:46:f8:a9:66:58:59:4c:df:
dc:b6:76:81:39:46:8b:f8:fa:50:f6:22:5a:be:78:
61:9c:37:90:b1:0a:3a:e1:74:69:fc:95:be:6f:ad:
22:ce:0e:34:3a:f1:a5:3a:91:a4:44:08:49:05:ef:
64:3f:f1:b0:fc:85:89:8d:f3:1c:a4:cb:b8:43:4b:
6a:ce:73:21:e5:4f:58:a0:f4:29:13:09:46:2b:5c:
04:c4:53:7d:fd:e6:75:c4:11:31:a1:ba:3d:2c:db:
fb:4a:e2:a0:01:42:df:78:e0:14:67:0b:4b:8f:83:
66:3c:e6:8f:41:a7:6d:c4:0d:0f:2e:5b:4d:e3:08:
8e:0c:71:42:97:3d:3c:a2:a7:a2:17:83:e6:24:3b:
8a:17:fd:0d:02:3b:d8:fb:a2:86:4b:a9:47:e7:39:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:A6:A4:84:2A:D7:34:CB:83:C4:5A:70:F0:27:44:AF:D3:13:F2
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/DIampIQq1zTLg8RacPAnRK_TE_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.80.0/21
92.205.156.0/22
92.205.192.0/20
IPv6:
2a00:116a::-2a00:116a:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:51:08:c8:bb:6c:14:fc:e3:b1:bd:30:53:27:07:23:76:18:
9e:8e:ff:e4:d5:36:dc:2d:67:9d:8e:27:7e:71:13:64:6e:3b:
34:2a:d4:f1:52:cb:0a:3c:f2:9d:8e:15:12:5b:e0:6c:ef:fd:
80:e1:9f:66:55:db:1f:16:6f:3c:9e:2c:06:db:d2:99:38:1b:
60:33:ad:fb:4c:56:8d:7c:93:1d:34:9c:b2:a7:f4:62:89:ee:
a2:1b:72:85:fa:60:e9:be:6d:b2:cb:01:a9:25:74:01:67:58:
99:28:de:88:b9:df:a4:41:10:6e:7f:6c:56:77:88:8f:ba:41:
73:b5:52:f5:c1:2e:d3:0c:93:1b:05:c6:3d:85:76:b7:4a:26:
8d:b1:aa:78:05:1d:14:83:06:6f:6c:c9:9f:4f:bb:e9:fa:87:
b7:62:cc:cf:62:6a:fc:14:ac:db:25:ac:96:d9:55:7b:59:0e:
09:36:0b:06:d8:14:ee:6a:2d:34:01:0d:7e:eb:dd:3b:41:9c:
e3:ca:dd:1c:33:31:ba:a7:1b:d7:d9:bb:f8:79:73:a3:9e:d0:
16:74:58:84:29:90:86:a2:74:41:26:b5:de:f0:a0:37:9f:23:
d5:2a:83:f3:56:ea:df:5a:3a:49:a6:ba:4d:72:b0:85:72:3a:
a5:30:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:10 2025 by rpki-client