Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/92VL3vfgdpr5rEJgpCNCKM0ZGBU.roa
File: 92VL3vfgdpr5rEJgpCNCKM0ZGBU.roa (raw, json)
Hash identifier: wfE+EW8G9A7PfLhtTtl5Ctu+pkI7Iwdi8anu3rocP+o=
Subject key identifier: F7:65:4B:DE:F7:E0:76:9A:F9:AC:42:60:A4:23:42:28:CD:19:18:15
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 19879F00
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/92VL3vfgdpr5rEJgpCNCKM0ZGBU.roa
Signing time: Sat 01 Jan 2022 09:56:58 +0000
ROA not before: Sat 01 Jan 2022 09:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61026
IP address blocks: 185.9.22.0/23 maxlen: 24
82.196.16.0/21 maxlen: 24
91.232.187.0/24 maxlen: 24
185.20.42.0/24 maxlen: 24
185.20.40.0/22 maxlen: 22
185.20.43.0/24 maxlen: 24
185.20.40.0/24 maxlen: 24
185.20.41.0/24 maxlen: 24
2a04:1500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428318464 (0x19879f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Jan 1 09:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7654bdef7e0769af9ac4260a4234228cd191815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:9a:30:00:01:10:45:3f:41:21:64:99:36:
1f:f2:6c:16:02:f0:a4:86:64:48:ea:eb:e8:37:d8:
fc:c8:ea:a0:fb:72:ef:35:06:9e:6b:5d:1e:32:06:
9b:f7:af:19:94:da:57:2a:8f:42:09:7b:c7:34:7b:
b3:3e:eb:12:4b:20:ae:09:86:66:05:05:56:fb:76:
b9:6e:6d:a1:5f:69:f5:47:c2:1c:8c:ec:9a:0a:3c:
16:f8:95:3e:16:a3:03:8d:c5:01:29:cb:3d:74:be:
c7:57:e8:27:b8:8d:30:8c:a8:61:39:ed:d8:f5:9f:
cf:06:83:56:9a:96:bd:49:8a:eb:87:f0:54:3d:9b:
7c:36:3f:9c:e2:c7:7c:c6:4a:b3:50:e0:41:e4:81:
08:23:ab:12:0c:4b:3f:7c:f5:b8:9e:e8:48:2a:9e:
94:3f:d9:23:86:5d:bc:de:15:50:88:12:3c:ca:99:
8e:48:a3:c2:f9:b9:fe:9b:f8:d1:a8:54:fb:32:40:
91:02:aa:2a:97:e0:a4:a5:00:f6:94:87:0e:b7:22:
1c:61:a4:c5:3d:97:7e:9e:68:ce:d0:05:25:f4:9c:
ae:07:04:08:e0:97:28:db:5b:b2:3f:a5:61:e6:99:
06:9f:33:b9:e7:75:07:12:63:74:21:46:bb:cd:76:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:4B:DE:F7:E0:76:9A:F9:AC:42:60:A4:23:42:28:CD:19:18:15
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/92VL3vfgdpr5rEJgpCNCKM0ZGBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.16.0/21
91.232.187.0/24
185.9.22.0/23
185.20.40.0/22
IPv6:
2a04:1500::/29
Signature Algorithm: sha256WithRSAEncryption
4c:7b:f8:ca:93:5b:f8:ac:66:c4:bc:d3:ec:c8:63:a1:25:76:
bb:2f:48:e3:ba:ac:1d:e6:d4:49:25:06:aa:5d:97:8c:44:4d:
ff:8e:60:0b:eb:27:5c:d1:47:bb:5e:9e:9e:8a:b4:c7:f4:3b:
31:29:33:66:e5:ba:82:58:4a:90:ca:76:18:dc:94:37:c1:0d:
ff:e5:43:8c:0c:c2:e7:57:3b:9a:8c:03:4a:6c:ee:a5:bd:90:
db:2e:07:29:ef:78:fc:62:fd:7c:74:40:24:2b:ac:d2:6b:42:
fe:8c:78:6c:b3:c0:e0:5f:2c:ba:6e:e4:24:d7:89:e2:00:38:
41:c6:7a:1a:1c:d4:a7:62:d0:1f:cb:6c:e0:38:24:2e:9f:c7:
dd:f1:d2:79:1a:18:6e:b7:9b:fa:f9:62:58:e3:28:7f:42:cd:
16:b3:af:cf:b7:f6:fe:48:61:4d:2a:e2:56:1a:26:2f:61:2e:
93:cb:4b:58:c6:46:ab:70:fe:a9:62:9b:b7:eb:1e:5c:78:4c:
64:45:6a:3d:ee:6a:d6:ad:d5:29:80:ac:1a:25:5c:58:6d:04:
be:e9:7f:6b:ea:c1:76:16:43:5e:bf:a6:0e:d0:4b:f0:89:6a:
37:9b:bd:f5:0c:61:8f:d9:36:80:4e:e6:2a:d1:74:ac:4a:40:
78:67:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:49 2023 by rpki-client on console-ams.rpki-client.org