Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/eOVL8UHQQO6zc4GKayKIrn7pDmY.roa
File: eOVL8UHQQO6zc4GKayKIrn7pDmY.roa (raw, json)
Hash identifier: w7ZWPgBd7BVV8tP95Y0AKInyXTh89e+6+DyrOdiJzvc=
Subject key identifier: 78:E5:4B:F1:41:D0:40:EE:B3:73:81:8A:6B:22:88:AE:7E:E9:0E:66
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 1587E1DC
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/eOVL8UHQQO6zc4GKayKIrn7pDmY.roa
Signing time: Sat 01 Jan 2022 13:02:06 +0000
ROA not before: Sat 01 Jan 2022 13:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202536
IP address blocks: 185.92.2.0/24 maxlen: 24
185.92.1.0/24 maxlen: 24
185.92.0.0/24 maxlen: 24
185.92.3.0/24 maxlen: 24
2a05:ef00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361226716 (0x1587e1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jan 1 13:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78e54bf141d040eeb373818a6b2288ae7ee90e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:7b:b9:2b:22:f2:ce:7a:7f:f9:22:57:d2:
57:ab:1e:cc:c3:b1:b9:9e:82:54:ad:d4:7a:d7:be:
bc:ec:33:02:3a:97:58:84:ed:df:d3:c3:79:f6:ec:
85:57:cb:2a:c5:92:5f:a1:48:6a:07:46:c4:cb:fd:
fa:c1:e3:eb:33:78:d6:3a:11:e4:fe:36:af:aa:04:
f0:a7:4d:dc:d9:d6:8b:13:f8:e9:a4:e7:67:e3:28:
ff:c9:a3:d2:f3:c6:de:06:bc:68:0c:72:41:bd:f2:
8c:d7:4a:af:a8:cc:ce:01:b9:e7:8c:50:3d:7e:4c:
d6:0e:a8:d0:50:95:08:0e:3c:3d:66:77:1a:73:ba:
a6:3a:53:7a:6e:5b:2a:1b:e5:ab:3a:e6:ad:b8:0b:
15:d9:5b:c5:f8:b9:60:a9:e5:f5:31:87:b9:be:d4:
28:30:62:a8:84:fb:2c:8c:be:0b:ae:ba:f2:74:56:
ce:37:ff:59:85:81:10:2e:e6:a8:6b:a5:4c:bd:73:
50:32:12:5a:a1:9f:90:ee:32:87:35:10:8a:35:79:
c6:6f:61:50:1b:3a:81:9c:0d:d1:4d:47:cb:6c:8c:
1b:00:7f:39:5b:7f:e8:4a:14:b4:04:ee:86:65:c8:
a6:77:1a:d3:c4:c2:2b:0c:63:d1:55:5a:70:68:33:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:4B:F1:41:D0:40:EE:B3:73:81:8A:6B:22:88:AE:7E:E9:0E:66
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/eOVL8UHQQO6zc4GKayKIrn7pDmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.0.0/22
IPv6:
2a05:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
63:fa:b8:7d:bc:48:1a:aa:53:1f:b0:c0:f9:a3:5a:aa:bf:61:
74:2f:03:51:8d:ad:8c:66:8d:fa:24:a2:94:58:77:22:51:c9:
c5:11:ab:f8:25:a9:92:95:40:3a:09:bd:47:91:6a:ec:a7:20:
f2:88:3d:4b:f4:cc:86:e0:11:a1:45:11:92:5c:f3:34:0d:a6:
2d:b6:50:bd:82:18:2a:da:6a:aa:c2:b4:2f:48:05:2f:c8:b1:
51:bc:5b:fb:52:09:54:01:85:1a:37:41:19:8e:f3:19:16:7a:
36:6b:16:1c:14:a1:4a:44:55:91:bd:b4:39:05:82:97:47:71:
aa:47:63:ac:aa:be:14:f9:ed:a9:83:79:6c:20:0a:13:97:aa:
21:e9:24:a0:ee:0e:0a:3c:72:3c:b6:0e:84:c2:f4:b9:92:8d:
2b:48:fe:2b:ae:9f:f2:8f:50:cb:a6:2a:43:e7:ab:93:d6:28:
5b:13:fb:4b:a6:70:f3:83:e2:f1:2d:3a:80:a7:71:ee:18:58:
bc:db:43:03:8a:0b:bb:23:77:8e:b2:50:dd:2b:95:e4:b8:1a:
d9:3d:b5:8f:b8:79:74:0a:1e:1a:70:63:5b:4e:05:9e:18:08:
76:24:37:01:34:2a:22:3c:7c:30:e1:2e:ad:e3:90:1e:d2:f8:
ef:03:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:58 2023 by rpki-client on console-fra.rpki-client.org