Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/AKPtgZu3FrXzEXBEHNElGJAkjc4.roa
File: AKPtgZu3FrXzEXBEHNElGJAkjc4.roa (raw, json)
Hash identifier: JmZiaBDZnby6R1cPV8aeZwQLDqDNTpEw0oK85Y/hKQE=
Subject key identifier: 00:A3:ED:81:9B:B7:16:B5:F3:11:70:44:1C:D1:25:18:90:24:8D:CE
Certificate issuer: /CN=317067e81a61a21fdc148598ef6ba59757fa0380
Certificate serial: 018810230464954E0AE78425617569F61B64
Authority key identifier: 31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/AKPtgZu3FrXzEXBEHNElGJAkjc4.roa
Signing time: Fri 12 May 2023 13:25:10 +0000
ROA not before: Fri 12 May 2023 13:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209440
IP address blocks: 92.118.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:23:04:64:95:4e:0a:e7:84:25:61:75:69:f6:1b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317067e81a61a21fdc148598ef6ba59757fa0380
Validity
Not Before: May 12 13:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00a3ed819bb716b5f31170441cd1251890248dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:52:4c:a2:96:cd:40:a8:13:81:36:58:b2:
51:6c:7c:57:e9:0b:b3:8e:be:5d:59:d4:6f:9f:18:
99:d4:23:db:70:d6:30:16:79:dc:db:60:bc:ee:f0:
4f:1f:9b:32:e8:56:01:6f:07:44:26:73:66:f5:9e:
55:4a:84:5e:e5:30:6f:d8:19:2d:a6:6d:10:bb:98:
4a:5a:48:a8:58:27:e8:58:ee:0d:a9:86:12:e7:77:
04:32:0d:11:f5:33:95:c9:73:49:51:be:e8:ad:cf:
4f:e5:54:31:d5:b9:40:88:4f:cc:b7:0e:ec:a6:d2:
de:2c:62:56:a5:db:9c:6b:bd:a5:69:b7:3a:53:94:
f6:28:74:7a:88:3e:f1:81:ed:95:72:fa:65:e4:f4:
46:c2:8d:33:0c:b6:49:06:9d:03:6e:1f:a9:85:c2:
96:40:9c:81:4b:19:67:e1:4d:2e:0c:9a:8c:00:13:
2c:60:1e:22:6a:b5:81:8a:16:dc:8a:5f:b7:ed:e9:
b1:93:6b:b9:d6:b2:62:25:b8:6b:ed:c7:3b:ef:6e:
8c:03:e9:d8:60:29:72:0f:f6:80:21:55:da:38:39:
32:90:9c:8b:5b:2a:1f:cb:e1:d2:5c:7f:93:86:81:
63:ca:7c:7d:dd:3c:9c:80:69:ad:45:93:99:78:60:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:ED:81:9B:B7:16:B5:F3:11:70:44:1C:D1:25:18:90:24:8D:CE
X509v3 Authority Key Identifier:
keyid:31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/AKPtgZu3FrXzEXBEHNElGJAkjc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:31:ea:1d:3f:3f:57:d4:42:ec:da:8b:ec:53:ed:37:77:d7:
4a:1c:6f:cd:cc:4b:68:e1:17:1d:4c:78:3f:c4:c2:14:41:cd:
da:3e:3e:6f:93:b8:b2:c5:52:10:0d:75:5c:1c:54:2a:a7:3d:
2e:67:f3:6c:4a:91:c4:da:df:51:74:51:dc:0a:36:b2:be:77:
12:1d:18:5b:13:9c:e2:cb:f6:c2:37:07:c7:dd:14:49:9f:2e:
8c:9b:11:23:b1:ef:50:5a:62:3f:08:98:66:42:22:13:bd:2d:
8d:85:20:1a:cf:8e:69:8b:ae:8b:15:8a:2f:9e:08:f0:50:80:
04:1f:d8:76:f2:9b:fd:37:21:d0:eb:9e:2b:09:a8:cf:eb:ea:
35:7c:84:3f:97:04:2a:5a:d7:83:0b:1d:7e:20:48:02:4c:9c:
be:f2:0c:5a:25:b9:a2:3d:1e:55:8b:f7:e0:42:40:05:b5:3b:
b9:72:cd:40:0c:72:d7:7a:e5:73:e4:f7:cd:47:c5:7f:79:16:
3f:12:1c:d1:1c:4f:8d:f8:5c:04:96:58:a6:bb:e9:f7:b6:80:
b1:1a:75:70:6d:7e:07:85:89:47:53:d3:6c:eb:07:b7:c1:a2:
72:c2:6a:4d:08:71:c3:46:90:86:b9:b0:77:b1:3c:c0:5e:24:
54:39:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:42:45 2025 by rpki-client