Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/k3HhCNUrslCxBfqyWDYaFQ3Ttq0.roa
File: k3HhCNUrslCxBfqyWDYaFQ3Ttq0.roa (raw, json)
Hash identifier: 9KwNCLCHKFmDPMSNNgnMbCFqRxq3IlrwH0tN0FWzVC4=
Subject key identifier: 93:71:E1:08:D5:2B:B2:50:B1:05:FA:B2:58:36:1A:15:0D:D3:B6:AD
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 0431EDB7
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/k3HhCNUrslCxBfqyWDYaFQ3Ttq0.roa
Signing time: Sat 01 Jan 2022 16:06:07 +0000
ROA not before: Sat 01 Jan 2022 16:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210819
IP address blocks: 92.246.89.0/24 maxlen: 24
92.246.90.0/24 maxlen: 24
92.246.88.0/24 maxlen: 24
92.246.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70380983 (0x431edb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 1 16:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9371e108d52bb250b105fab258361a150dd3b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:40:e9:39:d4:87:12:aa:93:d9:00:1f:c0:
15:db:e7:a4:31:e7:15:e8:af:53:19:40:ac:2d:68:
92:78:85:10:d3:54:f8:b5:40:92:64:49:ee:49:4f:
1c:2b:33:5d:1e:46:5b:44:5f:d4:e4:f3:fb:17:ad:
51:a6:2b:39:e4:a0:db:b1:9f:9f:51:72:51:ec:c2:
04:df:ff:8a:e0:65:d5:4d:1a:c2:61:3f:2d:3b:06:
4e:d8:a0:dd:bd:77:89:a9:1e:10:0c:59:8e:05:e3:
b6:30:32:54:f1:eb:dd:3e:2c:13:9b:02:72:1d:bf:
f0:51:e6:65:5f:71:2b:fa:33:82:87:3e:cc:ee:a0:
cc:4a:57:96:be:d8:e9:04:b1:fa:94:e0:66:13:25:
87:7d:1b:41:88:fa:16:f6:b0:b5:ff:2f:10:fc:48:
73:66:b2:1c:e4:92:63:cc:50:2e:54:02:c2:38:df:
d6:c7:53:14:9a:fa:fb:9b:b5:e7:eb:f8:2d:70:39:
3b:b7:d4:d4:03:4c:0b:86:40:74:32:22:f5:72:fe:
2a:0f:39:34:b6:c3:60:8e:4f:ea:59:94:34:65:86:
65:a3:5f:5c:1e:09:bb:25:3e:1b:79:1b:37:e7:ea:
c4:b2:c3:4c:ff:49:ae:67:eb:a9:06:38:0f:24:e9:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:E1:08:D5:2B:B2:50:B1:05:FA:B2:58:36:1A:15:0D:D3:B6:AD
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/k3HhCNUrslCxBfqyWDYaFQ3Ttq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.88.0/22
Signature Algorithm: sha256WithRSAEncryption
66:77:b1:d2:9f:e3:36:bf:64:3f:26:8d:1c:4f:e0:48:5a:21:
21:28:f3:46:5a:b4:1b:95:4f:8f:1b:2c:bb:15:01:b0:0b:39:
11:4e:88:2a:98:fd:96:a1:9b:84:08:bf:02:6b:62:d0:f0:9a:
64:61:ec:05:ce:4f:7d:30:7f:78:35:10:9b:af:23:b5:1e:af:
5b:1d:14:56:96:a8:41:90:ab:d0:3a:d4:d8:5e:69:79:01:65:
ab:fb:10:80:29:db:ec:78:ad:42:11:88:d6:45:a1:be:95:b6:
f1:8d:19:04:ff:2b:71:07:76:ba:2e:fe:f3:f2:15:0b:10:1b:
64:a9:96:65:e0:4c:da:aa:23:f8:c9:e7:34:ce:1e:c8:25:db:
3a:d0:20:bf:d7:2f:39:24:f9:4f:49:68:a7:36:e5:9f:54:fc:
32:65:e9:85:41:ee:67:1b:00:39:62:eb:62:29:f9:ae:c7:e0:
a3:c7:74:99:7e:43:97:e2:03:dd:25:79:f9:6d:23:1f:5d:3f:
69:b2:b0:93:61:44:0b:44:e6:36:98:aa:48:e4:f6:61:55:83:
85:aa:04:29:30:3c:9d:ee:3f:cf:5d:ba:a2:1e:d8:ad:29:35:
2b:ed:78:9b:20:c5:4c:ff:ca:72:89:4e:c1:ba:00:2b:41:58:
2e:ff:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:18 2024 by rpki-client on console-ams.rpki-client.org