Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/9iEc0R9hPr9ojYIOQEAZlm0wKyU.roa
File: 9iEc0R9hPr9ojYIOQEAZlm0wKyU.roa (raw, json)
Hash identifier: ArDyW55NKAjy1AUUseYjz5kx0HUcY4Ev7sq3qSQMzAE=
Subject key identifier: F6:21:1C:D1:1F:61:3E:BF:68:8D:82:0E:40:40:19:96:6D:30:2B:25
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 3511DFDA
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/9iEc0R9hPr9ojYIOQEAZlm0wKyU.roa
Signing time: Sat 01 Jan 2022 07:55:01 +0000
ROA not before: Sat 01 Jan 2022 07:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57771
IP address blocks: 185.54.92.0/22 maxlen: 24
2a00:8640::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890363866 (0x3511dfda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 1 07:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6211cd11f613ebf688d820e404019966d302b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:7b:39:2d:c8:3e:85:95:91:6a:10:cf:1e:
0e:1c:d4:00:02:14:52:ce:d3:bd:b7:18:36:12:ec:
11:2e:89:70:de:28:f2:7a:6a:31:fd:27:10:46:f2:
92:e2:d8:9d:47:cf:f6:b2:37:b8:37:e4:49:dc:7a:
23:6d:11:78:00:43:f7:b6:c8:05:e9:6e:e8:9f:6f:
a0:cb:d7:1d:8f:c2:7d:6d:ba:f0:3e:3f:a6:bd:62:
71:62:09:ce:89:a3:7b:68:46:ce:d2:12:30:d5:72:
ea:b4:ee:20:ee:b4:4a:cc:6d:21:a4:f7:d5:8b:2a:
51:06:17:6f:bb:ae:19:51:f1:a5:b3:dc:5d:e8:87:
fb:0e:4e:4c:5f:6e:59:16:85:3b:04:b2:8a:bc:9a:
ae:02:94:4d:00:9a:70:f9:82:0f:2b:e1:c7:8c:69:
01:53:34:b9:bb:11:78:e1:16:0f:6f:d6:07:c2:da:
3a:e7:53:2f:65:de:18:e1:79:8d:70:f6:e1:4c:33:
9c:79:67:62:44:85:99:20:01:7e:c1:e0:38:90:dd:
41:f5:92:bd:9e:4c:e6:40:ae:7d:58:98:8d:1e:fd:
0c:9c:df:ea:a0:e4:81:35:2f:74:26:7a:6d:ee:cb:
7c:78:11:67:44:9f:cf:9f:a4:3d:47:1f:bc:83:0b:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:1C:D1:1F:61:3E:BF:68:8D:82:0E:40:40:19:96:6D:30:2B:25
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/9iEc0R9hPr9ojYIOQEAZlm0wKyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
a9:ff:2b:d4:84:85:fc:c1:8e:d1:9a:2f:5c:b1:86:84:fd:ca:
bf:d1:ed:35:e2:0c:46:c0:76:56:19:9c:c8:f2:3c:6e:d8:b4:
cf:d7:a6:86:f3:81:40:26:9b:66:15:5a:97:86:83:87:0e:21:
01:85:8d:35:06:0e:ef:c3:55:40:00:b9:f6:10:e2:46:44:be:
6a:a2:d7:cf:0d:b2:5b:55:d3:32:11:73:26:56:e0:9f:2e:f9:
95:d5:98:7b:84:58:73:64:cc:c0:89:16:6e:a0:a1:a0:c1:5a:
bc:4d:e9:89:92:a6:d4:c9:f8:59:b0:91:ac:1b:13:b0:8a:58:
dc:f6:c9:23:df:6b:c2:9a:12:3c:05:a9:02:4b:59:9c:2b:8f:
25:d7:99:3b:63:73:77:3e:b9:0f:21:c9:71:54:76:64:22:51:
81:b4:e0:38:3a:eb:98:53:8a:73:aa:95:d5:2f:66:90:ee:cd:
f5:72:ca:8b:7e:18:a7:da:d8:42:8e:9c:66:48:4e:a3:ee:60:
3e:4d:32:18:73:ec:b2:5e:b6:20:d6:63:e5:37:7f:f2:e8:06:
ec:c5:97:ce:42:fd:cb:e7:e9:2b:ea:e4:66:81:ba:22:07:d0:
f0:a2:c0:e7:22:a7:00:44:b9:14:da:19:6c:fd:39:7a:a7:3b:
c9:1f:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:49 2024 by rpki-client on console-fra.rpki-client.org