Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/pkI4X70GIaxzp3iFFD2Cbf3nOOs.roa
File: pkI4X70GIaxzp3iFFD2Cbf3nOOs.roa (raw, json)
Hash identifier: FPGVc23b5c7LXQsPGAouUSzkRxpE/TWp4K+bmPNXTr4=
Subject key identifier: A6:42:38:5F:BD:06:21:AC:73:A7:78:85:14:3D:82:6D:FD:E7:38:EB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01844A160BED55FF79ACC6518E083DE09AF5
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/pkI4X70GIaxzp3iFFD2Cbf3nOOs.roa
Signing time: Sat 05 Nov 2022 23:17:49 +0000
ROA not before: Sat 05 Nov 2022 23:17:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398704
IP address blocks: 85.92.114.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4a:16:0b:ed:55:ff:79:ac:c6:51:8e:08:3d:e0:9a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Nov 5 23:17:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a642385fbd0621ac73a77885143d826dfde738eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a1:82:db:98:9c:d5:8e:dd:c0:bc:58:86:3f:
e0:f8:2e:bf:5a:5c:2c:4c:c6:f2:55:25:9d:6a:f5:
12:f6:b5:d2:02:86:21:2f:88:11:d6:71:69:e0:43:
df:a5:ed:9b:cc:d1:19:66:dc:36:06:e7:b1:1b:9c:
84:c6:bd:b3:73:b7:05:43:00:a7:72:f1:47:f0:ff:
77:ab:b4:e8:05:67:d3:d5:8e:41:18:70:b6:58:59:
8f:d9:78:74:5f:d2:bb:de:7f:da:9b:d5:c9:c1:74:
4f:2d:0a:95:cb:24:95:76:6c:94:8c:4d:40:53:80:
cd:85:dc:aa:60:3f:08:dd:2b:80:04:8c:dc:b3:cb:
01:9f:b3:29:62:0d:6f:67:fc:f6:b5:ff:d8:b1:be:
7a:7d:d0:c2:b5:da:68:0e:5f:0e:1f:53:ce:c6:51:
6f:c9:65:22:ec:e2:16:10:84:53:28:85:96:3d:17:
e7:0d:7a:50:f8:a1:c7:46:62:36:4b:f7:28:cb:5a:
c3:2e:3e:a9:19:10:11:31:f3:63:50:a3:72:5c:41:
7a:76:6e:c5:cb:fe:a0:bc:94:40:88:93:a3:58:52:
3a:4c:ab:c6:28:2c:bd:b1:3a:2d:b4:34:e4:cc:d0:
53:c0:70:ed:e5:b0:71:93:7d:ed:ac:ea:ef:2c:ac:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:38:5F:BD:06:21:AC:73:A7:78:85:14:3D:82:6D:FD:E7:38:EB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/pkI4X70GIaxzp3iFFD2Cbf3nOOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:88:46:56:9e:a1:92:a6:10:93:31:72:7a:03:ef:65:6c:76:
0c:19:94:db:1e:66:e6:09:a9:d6:0a:23:50:a3:48:a8:6d:d5:
c0:41:db:3b:c7:77:59:90:60:48:10:fa:6a:bf:66:72:58:50:
2d:fe:22:a1:0e:85:e6:09:61:6c:ab:ab:9d:98:2a:91:17:89:
4e:83:b8:b3:c9:2d:95:41:5d:82:49:db:7a:2e:04:19:4c:00:
2d:dd:dc:db:c6:35:4a:a9:3e:76:38:19:97:08:36:02:cc:99:
0e:4b:2e:cc:5f:a8:9b:d9:6e:68:8a:f8:1d:ae:2c:bf:b8:df:
06:90:7b:8a:4e:bb:9d:a0:25:b5:ec:46:ca:1b:bb:fc:d7:e3:
3e:c2:bf:7d:35:c5:42:b8:75:1d:8f:7f:48:fe:94:67:c3:55:
4b:85:06:24:13:e5:a7:03:f1:f9:8e:14:e4:72:05:6a:2f:52:
56:ab:ad:f8:7f:a6:c7:10:08:ec:c6:ef:d6:ce:d4:67:a8:66:
05:4f:98:a1:bf:6d:62:30:13:09:4b:8f:b8:fc:5e:7d:c8:68:
e5:58:86:1c:c1:8d:8d:d8:e8:50:ec:18:8c:22:e2:93:4c:13:
34:d1:59:42:53:8f:af:4a:12:9a:56:57:e2:93:ee:c7:51:5e:
e5:de:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:23 2025 by rpki-client