Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i76vCRXoSL_smk8xsboZmWDQBj8.roa
File: i76vCRXoSL_smk8xsboZmWDQBj8.roa (raw, json)
Hash identifier: toQGSBzAB6AyqXgH1J/MMvlxKbgfEIYSJUwLF2FTvGQ=
Subject key identifier: 8B:BE:AF:09:15:E8:48:BF:EC:9A:4F:31:B1:BA:19:99:60:D0:06:3F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018363408CAB0C7BE9574F96A7DE667352BB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i76vCRXoSL_smk8xsboZmWDQBj8.roa
Signing time: Thu 22 Sep 2022 03:31:58 +0000
ROA not before: Thu 22 Sep 2022 03:31:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 85.92.113.0/24 maxlen: 24
193.107.219.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:63:40:8c:ab:0c:7b:e9:57:4f:96:a7:de:66:73:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 22 03:31:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bbeaf0915e848bfec9a4f31b1ba199960d0063f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:00:08:18:bd:51:c8:16:3c:a9:ba:1b:d6:
55:3c:f6:8a:39:37:a7:e3:15:60:a8:0b:a6:25:89:
6f:24:d2:d3:f0:df:1c:3c:c3:30:ee:8c:c3:c4:c6:
bb:80:7d:ff:f1:3c:77:63:91:cb:7b:45:54:a8:7c:
14:0b:49:9a:cd:c7:8c:c5:e2:7d:1b:ac:68:9a:0b:
9d:79:72:03:30:1d:e7:09:e5:6c:aa:26:dc:a9:90:
36:83:02:c1:78:6b:71:a8:1e:5c:39:80:37:12:c0:
9f:15:2e:fc:fd:30:44:a0:a6:7e:a3:9e:b6:88:da:
7b:83:6a:bc:c1:59:af:12:86:8a:9d:3e:79:9c:3c:
a4:23:87:a9:b7:87:99:45:c8:0b:7d:60:02:d7:25:
f6:91:ee:76:c9:e2:06:7d:d5:11:d9:d5:24:bd:ff:
72:98:2a:9b:78:b4:a8:57:5c:e4:84:05:5d:01:38:
4f:f6:98:b8:39:ad:b3:89:10:22:f4:22:dd:37:1c:
39:2a:13:02:2a:51:0b:93:6c:bf:38:ff:d5:f3:6b:
ca:06:d4:f6:aa:bc:b6:4d:fc:2e:0c:cc:ab:e0:3f:
c2:a5:d1:61:4d:26:70:6e:47:64:51:47:22:1f:6d:
c7:78:16:13:87:73:98:fd:84:f7:ca:66:a0:fd:d1:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BE:AF:09:15:E8:48:BF:EC:9A:4F:31:B1:BA:19:99:60:D0:06:3F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i76vCRXoSL_smk8xsboZmWDQBj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.113.0/24
193.107.217.0/24
193.107.219.0/24
Signature Algorithm: sha256WithRSAEncryption
17:92:d6:15:ed:b2:25:c9:97:1e:1a:23:7f:06:81:bb:64:7d:
c7:bf:06:b4:1f:cd:91:8f:e6:be:11:6f:5e:3a:67:79:b3:33:
2d:23:1a:f3:0b:38:7e:86:93:99:dd:e5:b1:f1:84:8a:c3:4f:
9d:68:0e:1c:42:f4:16:31:3b:3d:d6:45:bf:c2:35:02:c5:7f:
c8:a8:3b:97:3c:a5:10:13:00:cb:6f:a8:2d:3c:4f:63:c4:ab:
02:c2:18:1e:db:92:f2:9b:f2:81:80:9d:aa:70:2a:ba:3f:26:
e2:c6:bf:79:a4:07:cf:e7:4c:af:6e:0a:43:ad:0e:d9:5f:a4:
99:2d:74:4c:f5:86:e4:35:9d:fa:fa:69:d5:5a:5f:41:62:46:
f2:2c:28:a8:72:1f:69:f3:be:0c:fd:d5:16:fd:49:b2:f8:d0:
8e:60:ac:27:3a:10:78:38:19:b5:ab:df:b7:8c:ca:12:9d:fa:
50:51:46:0a:d1:97:b9:92:96:90:04:b1:4b:6e:86:51:73:01:
ec:3d:27:40:b4:29:a5:65:a8:2e:c4:42:16:d8:a1:84:96:39:
dd:8e:58:74:ed:97:54:44:46:19:c5:85:3f:43:c1:e6:8f:c6:
a0:16:8f:7d:4a:92:6c:14:a2:74:9c:04:aa:5f:f2:ec:88:63:
ad:67:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org