Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/qXU9gC3BSyeylsfeKzgZmwi2Tt8.roa
File: qXU9gC3BSyeylsfeKzgZmwi2Tt8.roa (raw, json)
Hash identifier: nmLzP2QmkGFlokdrifUJUERRA5D2DM+G1eDw68xQPGw=
Subject key identifier: A9:75:3D:80:2D:C1:4B:27:B2:96:C7:DE:2B:38:19:9B:08:B6:4E:DF
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 0223F4CA
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/qXU9gC3BSyeylsfeKzgZmwi2Tt8.roa
Signing time: Sat 01 Jan 2022 10:04:07 +0000
ROA not before: Sat 01 Jan 2022 10:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 92.246.85.0/24 maxlen: 24
92.246.84.0/24 maxlen: 24
92.246.86.0/24 maxlen: 24
2a10:ca80::/29 maxlen: 29
2a0d:c2c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35910858 (0x223f4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 10:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9753d802dc14b27b296c7de2b38199b08b64edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:28:29:70:32:5c:67:27:d3:e4:8c:d7:ce:
a9:89:f1:47:95:97:83:d2:0f:ef:6c:27:30:26:7b:
43:72:0d:82:20:52:9d:32:d6:ae:06:e5:e9:78:c5:
fe:fe:35:60:f1:e1:f1:d8:55:5b:67:65:3a:fb:26:
28:bb:7a:6e:54:c2:80:50:c6:f6:36:28:3c:3e:0c:
ca:bb:fd:dd:55:68:03:26:8f:6d:f0:37:1e:68:a6:
f9:88:18:ad:a0:cb:4b:c3:d2:c5:9e:e7:82:67:ec:
13:f1:4a:7c:95:68:ce:13:0f:e1:a3:33:56:8a:c6:
61:88:b1:30:a4:f4:46:cc:9e:df:b1:fa:5d:28:9b:
7f:b2:cb:f9:dd:86:05:4c:93:44:cc:d0:42:59:57:
e3:5e:d4:90:0b:6a:20:e8:b2:9b:53:1e:c6:55:1d:
08:a3:8d:c3:a0:00:1b:44:33:e2:c6:b1:83:70:b5:
5e:80:e9:9c:d2:d5:e3:2e:a5:da:01:80:a1:90:d2:
31:1e:22:81:48:eb:5f:35:88:fb:1a:3e:2e:b7:9e:
3f:6b:6e:47:8e:c7:61:d9:e6:01:8e:a9:8c:15:cc:
10:28:b9:85:9c:d0:c3:50:c4:7d:98:74:e2:b3:c6:
aa:41:fc:64:25:5a:39:58:0d:8f:04:72:5c:f4:eb:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:75:3D:80:2D:C1:4B:27:B2:96:C7:DE:2B:38:19:9B:08:B6:4E:DF
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/qXU9gC3BSyeylsfeKzgZmwi2Tt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.84.0-92.246.86.255
IPv6:
2a0d:c2c0::/29
2a10:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
ce:df:d1:7a:4b:d5:a1:48:3d:b8:6e:3d:c5:bf:fb:ad:a1:e8:
40:1d:67:9a:d4:6c:f5:38:11:40:b8:19:b6:15:cf:4d:86:b3:
b8:f1:4d:c2:86:5c:b5:3d:5d:03:e4:69:f3:7a:31:3e:a0:da:
cf:38:a3:4f:55:6a:83:ed:a3:20:5c:73:c7:9e:6e:5b:1d:73:
d2:b8:58:83:a6:03:6b:d4:ee:6c:db:c0:9e:19:97:7f:07:ce:
c3:21:2e:71:b6:20:ff:43:01:61:64:cb:1d:16:1e:4f:7f:76:
15:20:2c:12:b1:b4:6e:b9:61:ec:8d:84:f1:b6:1e:b6:a5:1d:
80:8a:a3:d4:22:0a:fb:30:13:f2:0d:4e:70:c0:5d:3b:51:52:
c2:c8:29:82:25:03:35:c3:39:7c:de:da:77:01:b5:03:c4:2f:
16:d6:20:3b:7d:a7:38:83:15:34:de:13:04:5c:8f:95:2b:bd:
b3:a0:9c:8c:c7:ae:3e:8f:37:d1:ac:f0:9f:a0:38:57:0e:a0:
d1:16:b4:f4:ac:b6:b3:47:70:18:a2:ad:74:45:b4:25:02:cf:
95:33:21:33:65:4e:00:ca:5b:94:83:8c:b3:04:67:17:3e:0e:
93:79:f1:1a:f0:d5:5a:07:94:92:a7:b4:1b:0f:4c:b7:de:8c:
80:82:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org