Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2S8t2fL8bq_hL1Wy7RJISurAKkw.roa
File: 2S8t2fL8bq_hL1Wy7RJISurAKkw.roa (raw, json)
Hash identifier: 06TNCW3I4bdtMK76+yWkqnzjsqN6fj/NwZ7335ulC8c=
Subject key identifier: D9:2F:2D:D9:F2:FC:6E:AF:E1:2F:55:B2:ED:12:48:4A:EA:C0:2A:4C
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 039B4AFD
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2S8t2fL8bq_hL1Wy7RJISurAKkw.roa
Signing time: Sat 01 Jan 2022 06:06:50 +0000
ROA not before: Sat 01 Jan 2022 06:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212313
IP address blocks: 92.119.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60508925 (0x39b4afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 06:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d92f2dd9f2fc6eafe12f55b2ed12484aeac02a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:b3:6f:f6:4f:dd:30:9f:83:75:02:2c:e0:
ae:34:12:90:5a:ca:68:88:d6:56:7c:1b:fa:25:9b:
f6:ca:b1:b9:e3:56:66:60:1d:1e:8c:8c:57:1c:d1:
a8:22:20:21:d2:8f:73:0a:b7:4c:24:8f:c4:ad:11:
12:85:2f:69:57:a5:35:18:a9:ea:72:a4:a9:48:28:
b9:56:7f:57:42:fb:a1:9e:45:66:cd:e3:0b:34:29:
e4:fa:32:aa:ec:2b:76:5c:b3:c3:89:c6:28:dd:90:
1b:63:77:16:8d:bb:ec:b7:df:89:52:93:37:de:f3:
68:01:a1:dd:a1:b3:e3:78:8a:bd:83:ef:a6:41:0c:
97:2a:25:1c:73:a5:c7:49:33:b4:9f:c3:a7:0f:f3:
15:a5:28:34:14:fd:6b:ad:41:4d:79:e1:c6:c8:9e:
ae:16:50:c7:83:d9:24:96:16:c6:5b:fb:d2:fd:ca:
a9:3f:f8:38:a8:5f:e0:eb:9b:c0:c6:bc:e3:09:6c:
62:97:93:e8:88:43:4d:9b:50:1a:a4:1d:cd:c7:87:
6f:54:cf:5e:7b:3c:de:b9:34:f2:b4:8f:75:6a:a2:
56:03:a9:89:11:03:3f:85:9f:2a:a6:f3:44:e7:c7:
27:09:3c:d3:27:39:e6:bb:2c:ea:b9:6d:a8:b3:05:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:2D:D9:F2:FC:6E:AF:E1:2F:55:B2:ED:12:48:4A:EA:C0:2A:4C
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2S8t2fL8bq_hL1Wy7RJISurAKkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c0:0d:df:66:f9:3c:3f:60:56:05:6e:4a:9c:01:ba:b2:82:
7b:51:a0:b0:d5:d0:6d:53:f7:d5:c7:73:24:63:a7:f0:a2:ef:
a7:a8:a4:3f:91:51:bc:9d:73:9e:d5:13:53:09:a1:79:50:e9:
56:1e:45:ae:7b:70:07:ce:0c:7b:2c:7e:1b:a3:fb:69:fe:00:
18:8d:3f:61:7f:d5:87:dc:79:26:5b:12:48:93:c6:ab:40:55:
c1:14:01:eb:d7:19:e9:d5:63:e1:88:c8:2c:86:2a:c1:5b:48:
16:e2:fe:a0:fe:25:d5:e4:ac:64:da:f9:4a:41:88:e0:19:11:
53:25:51:50:ef:86:e2:17:8d:f9:cf:b4:41:5b:b6:f8:03:60:
d3:58:64:5f:ea:6a:77:77:df:f0:12:c2:ad:d5:e1:26:db:dc:
cf:e8:34:da:85:49:21:f3:4e:0a:63:ca:31:75:bd:ea:8e:c0:
39:3f:b7:b7:68:0c:e1:b2:56:73:a5:72:2d:b8:3a:60:7a:b0:
e2:be:8f:82:52:6c:cc:9a:e9:f3:49:17:fe:1d:68:1b:ad:d9:
90:90:d6:34:6e:8b:8e:32:94:a1:aa:ac:6f:3e:9c:98:52:69:
48:cd:f1:3d:06:46:42:06:60:97:5c:96:e9:d5:9b:01:70:13:
41:8e:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org