Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/b8FdnxGrVHyOrt1R5VxSRZ5IDw8.roa
File: b8FdnxGrVHyOrt1R5VxSRZ5IDw8.roa (raw, json)
Hash identifier: rqsdgfEeyD0HcucdwlStHN5qqJzyf8yMbGsZeNpt7No=
Subject key identifier: 6F:C1:5D:9F:11:AB:54:7C:8E:AE:DD:51:E5:5C:52:45:9E:48:0F:0F
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 07A6F083
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/b8FdnxGrVHyOrt1R5VxSRZ5IDw8.roa
Signing time: Sat 01 Jan 2022 07:01:33 +0000
ROA not before: Sat 01 Jan 2022 07:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60664
IP address blocks: 92.43.50.0/23 maxlen: 23
185.97.178.0/24 maxlen: 24
185.97.177.0/24 maxlen: 24
185.97.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128381059 (0x7a6f083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 07:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fc15d9f11ab547c8eaedd51e55c52459e480f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:ec:90:ae:d5:7d:37:d7:ff:5e:24:b1:c0:
ee:ee:67:f1:ba:16:3a:19:c1:37:84:73:92:07:fa:
e9:e7:6b:e3:8b:a1:78:51:c6:08:83:fb:50:dd:81:
56:6c:36:22:ff:5c:27:07:d0:2e:af:e1:dd:16:c2:
c7:6b:04:98:80:40:59:72:b8:4e:4c:ce:91:72:f2:
80:67:e2:c6:ae:a5:d3:e4:d9:2e:fd:6c:cd:8e:a3:
57:dc:47:79:8a:38:d2:17:37:b0:e4:8e:74:f5:3a:
32:db:3f:3b:67:d1:3e:c2:7f:ba:e9:81:dc:dc:50:
58:c2:8f:eb:d6:03:e4:ad:db:fe:af:5f:40:7c:04:
ae:97:ce:0f:86:8c:57:c5:45:17:73:11:35:c5:25:
c6:f3:ca:34:47:9b:10:46:38:77:01:dd:0e:fe:e9:
1e:d0:00:83:5e:1c:9b:46:6b:5b:5f:3c:28:ba:0d:
20:82:9b:3b:03:3e:e2:da:f5:0c:6d:d6:ef:59:f9:
fa:66:6e:59:ca:a1:92:4b:ff:1b:e7:a4:d3:ea:6a:
7d:52:2f:0d:16:cc:38:84:c3:21:a7:dc:d6:60:1c:
e5:fa:d3:2f:7b:47:74:82:89:40:10:bc:83:80:57:
11:74:81:99:de:f1:07:4b:ae:f2:92:d6:97:5a:78:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:5D:9F:11:AB:54:7C:8E:AE:DD:51:E5:5C:52:45:9E:48:0F:0F
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/b8FdnxGrVHyOrt1R5VxSRZ5IDw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.50.0/23
185.97.176.0-185.97.178.255
Signature Algorithm: sha256WithRSAEncryption
66:13:87:15:2f:46:1b:e8:3c:0b:a3:85:7f:82:6e:ae:5e:6a:
01:56:14:52:0a:92:43:27:4e:3f:ea:78:3f:71:88:c1:69:b7:
27:ce:bf:94:8f:e3:19:67:88:6e:8e:dc:68:f7:f9:ea:00:8c:
af:c7:0c:f7:c6:a0:1c:09:66:2a:09:ba:27:5d:51:bf:30:71:
47:93:8f:81:d4:b4:5b:28:1e:dd:ed:a0:54:45:2f:0b:1a:05:
61:b2:80:0f:97:91:39:e2:da:8b:a9:cc:5a:76:c7:fd:2f:cb:
23:22:3a:35:68:85:ef:b1:74:c5:dd:61:88:3a:d7:8c:ba:d5:
0e:04:d3:c4:35:6a:c3:e4:6f:8b:87:e9:d5:4a:a7:cc:ba:60:
98:7b:04:a4:1a:f4:2c:97:93:d6:91:22:70:af:cc:94:b7:31:
89:20:b6:b0:0a:a6:7d:c8:25:3a:f2:34:c7:8d:d2:6c:5d:f1:
0c:52:61:cd:64:cd:f4:9c:3b:f1:f8:31:3c:ab:cf:fb:74:46:
27:c2:40:79:43:30:ea:6b:99:5a:8a:24:b9:aa:a7:b3:8e:47:
74:5b:ea:fb:a0:f8:64:9e:6e:76:24:29:b6:1f:98:c3:84:94:
72:fd:d0:4e:7d:5b:0c:99:c1:ef:0f:b5:a9:b5:75:f0:d9:53:
02:72:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:33 2024 by rpki-client on console-fra.rpki-client.org