Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/AmINYXHI3Z5o2_E1FtRQ5O1ViFQ.roa
File: AmINYXHI3Z5o2_E1FtRQ5O1ViFQ.roa (raw, json)
Hash identifier: rsr7lsa0v8p05WblrTs7d5ZZotMH0/kGadoU1iu2vGA=
Subject key identifier: 02:62:0D:61:71:C8:DD:9E:68:DB:F1:35:16:D4:50:E4:ED:55:88:54
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 01839E00AFA979EA1AB2A0C8A6AC10784809
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/AmINYXHI3Z5o2_E1FtRQ5O1ViFQ.roa
Signing time: Mon 03 Oct 2022 13:19:48 +0000
ROA not before: Mon 03 Oct 2022 13:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57935
IP address blocks: 92.119.56.0/24 maxlen: 24
92.119.59.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:00:af:a9:79:ea:1a:b2:a0:c8:a6:ac:10:78:48:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Oct 3 13:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02620d6171c8dd9e68dbf13516d450e4ed558854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:82:2d:d0:41:f0:17:39:84:78:e1:b9:6d:
55:3f:07:9e:f2:8b:ff:ce:2f:b9:62:46:de:60:0c:
66:c8:39:02:a2:d1:71:b5:d0:03:21:a8:2b:1e:b8:
47:39:d4:e2:f3:f5:06:8c:bb:a7:b3:83:48:61:79:
60:6b:66:58:40:3e:93:f4:00:5c:82:e5:02:c8:c9:
98:20:79:e9:bd:06:e5:86:cc:36:1b:3d:2a:87:25:
02:44:22:d3:90:04:22:c6:d9:88:d0:3a:d4:ab:f4:
6e:0c:ad:00:3d:ce:c8:40:b2:13:8e:25:dd:2f:da:
eb:93:42:12:43:14:ce:a2:d4:c7:11:d1:5d:a7:e8:
b1:84:aa:04:fe:e3:ae:10:f6:90:08:b7:60:bd:02:
5c:cb:96:af:8a:fc:ec:d4:c4:09:09:00:da:9a:82:
8f:27:0f:a5:a7:0d:e1:98:69:75:f2:7e:6e:72:d2:
89:41:f3:ac:aa:14:1c:57:89:89:53:02:75:12:9a:
12:35:73:06:bb:2a:30:df:4a:df:13:bc:e1:ac:45:
2e:f5:02:b6:53:67:f2:9e:c5:1c:b6:44:ec:c4:93:
7b:d7:98:c3:8d:ac:ab:11:5c:d7:3c:30:a2:8d:7e:
31:ab:27:7a:87:7a:42:1d:6f:fe:c6:46:13:93:fa:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:62:0D:61:71:C8:DD:9E:68:DB:F1:35:16:D4:50:E4:ED:55:88:54
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/AmINYXHI3Z5o2_E1FtRQ5O1ViFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.56.0/24
92.119.59.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fa:35:0f:fe:26:11:8e:8f:83:1a:1d:57:16:b5:50:92:11:
24:ee:f3:45:ca:26:e1:cd:f0:75:f6:93:56:a0:bf:05:38:90:
fd:44:80:f0:ad:86:ee:0c:c2:e2:76:4e:b1:58:ba:f4:eb:8b:
dd:d2:c5:2b:b1:1c:43:da:0f:5b:f3:2a:b0:58:2b:f4:5e:6b:
e6:e0:d0:7b:ff:f2:d3:6b:a1:47:e7:4a:b2:43:88:b2:2a:e1:
da:cd:ba:73:f3:fb:f7:2e:94:ff:50:9a:4e:7f:47:97:d1:65:
07:18:be:c9:f7:6e:1e:ce:2c:6c:ac:39:87:03:b3:7d:bf:a2:
9b:0a:94:33:9e:4e:32:09:aa:9b:e4:d2:37:c8:f5:f4:a1:ff:
52:fb:26:6d:00:70:3b:d9:e5:88:72:62:79:a2:66:01:ad:2b:
b3:ad:08:fa:2c:ea:91:31:de:69:93:ff:07:2a:53:0b:21:67:
da:66:98:a7:27:21:24:13:02:46:28:8a:f9:1d:0e:0b:40:1e:
45:be:5a:78:98:96:47:ee:84:bf:b8:e7:8b:8e:ec:b4:23:08:
f5:0a:f6:c9:a7:d9:e8:28:95:e7:f6:db:aa:12:de:76:d7:f2:
25:15:ec:58:2d:26:25:ba:56:bc:8b:4a:ed:dc:a2:69:34:5f:
e3:62:00:00
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYOeAK+peeoasqDIpqwQeEgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGFmNmZkYzE2ZDY4YWUyNmFhMGVhYjU2MjNlNmJlMjE3
MDM2YzEwHhcNMjIxMDAzMTMxOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjYyMGQ2MTcxYzhkZDllNjhkYmYxMzUxNmQ0NTBlNGVkNTU4ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzOCLdBB8Bc5hHjhuW1VPwee8ov/
zi+5YkbeYAxmyDkCotFxtdADIagrHrhHOdTi8/UGjLuns4NIYXlga2ZYQD6T9ABc
guUCyMmYIHnpvQblhsw2Gz0qhyUCRCLTkAQixtmI0DrUq/RuDK0APc7IQLITjiXd
L9rrk0ISQxTOotTHEdFdp+ixhKoE/uOuEPaQCLdgvQJcy5avivzs1MQJCQDamoKP
Jw+lpw3hmGl18n5uctKJQfOsqhQcV4mJUwJ1EpoSNXMGuyow30rfE7zhrEUu9QK2
U2fynsUctkTsxJN715jDjayrEVzXPDCijX4xqyd6h3pCHW/+xkYTk/r0PQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAJiDWFxyN2eaNvxNRbUUOTtVYhUMB8GA1UdIwQY
MBaAFOxK9v3BbWiuJqoOq1Yj5r4hcDbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0VyMl9jRnRhSzRtcWc2clZpUG12aUZ3TnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ZGM4NWMtYjBhMS00OGQ5LTk4NzAt
MzgyNWJmMzNlNGVjLzEvQW1JTllYSEkzWjVvMl9FMUZ0UlE1TzFWaUZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ZGM4NWMtYjBhMS00OGQ5LTk4NzAtMzgyNWJmMzNlNGVj
LzEvN0VyMl9jRnRhSzRtcWc2clZpUG12aUZ3TnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXHc4AwQA
XHc7AwQAuUlxAwQAuUlzMA0GCSqGSIb3DQEBCwUAA4IBAQBj+jUP/iYRjo+DGh1X
FrVQkhEk7vNFyibhzfB19pNWoL8FOJD9RIDwrYbuDMLidk6xWLr064vd0sUrsRxD
2g9b8yqwWCv0Xmvm4NB7//LTa6FH50qyQ4iyKuHazbpz8/v3LpT/UJpOf0eX0WUH
GL7J924ezixsrDmHA7N9v6KbCpQznk4yCaqb5NI3yPX0of9S+yZtAHA72eWIcmJ5
omYBrSuzrQj6LOqRMd5pk/8HKlMLIWfaZpinJyEkEwJGKIr5HQ4LQB5Fvlp4mJZH
7oS/uOeLjuy0Iwj1CvbJp9noKJXn9tuqEt521/IlFexYLSYlula8i0rt3KJpNF/j
YgAA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:08 2023 by rpki-client on console-fra.rpki-client.org