Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/meP85pki1Sjcco_QRkRiOxHxpH4.roa
File: meP85pki1Sjcco_QRkRiOxHxpH4.roa (raw, json)
Hash identifier: srcqQNXIk3At5qsbOiZ73S6s9D2X5Im0GZxeS47ZveU=
Subject key identifier: 99:E3:FC:E6:99:22:D5:28:DC:72:8F:D0:46:44:62:3B:11:F1:A4:7E
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 018572A7F8D0DD0D9EB82456F8225FEF2CF8
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/meP85pki1Sjcco_QRkRiOxHxpH4.roa
Signing time: Mon 02 Jan 2023 13:24:48 +0000
ROA not before: Mon 02 Jan 2023 13:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6707
IP address blocks: 185.92.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:f8:d0:dd:0d:9e:b8:24:56:f8:22:5f:ef:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 2 13:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e3fce69922d528dc728fd04644623b11f1a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:a0:56:ed:0f:ec:0d:69:51:7c:3d:da:7d:
d8:32:a9:e7:ff:e2:79:07:1e:5a:19:fc:31:e7:bc:
d6:66:37:a1:ca:b6:eb:c7:14:7f:d8:ea:b6:a9:14:
cf:ce:f7:13:f2:9e:86:22:3e:df:38:8d:6c:1c:ca:
fb:18:c3:96:f6:e8:4e:d3:27:a2:84:42:3c:9d:ed:
94:e5:5d:04:be:82:65:17:d3:86:a9:81:7a:c4:b5:
f4:29:94:47:33:e9:71:cf:f4:47:72:76:7c:4b:b3:
4b:58:e6:e6:a6:d4:3d:e1:05:25:67:ba:49:8a:15:
ee:c9:e4:d4:8c:e8:51:0b:a8:97:05:24:20:4e:56:
05:13:99:62:1e:09:58:43:9e:1f:e9:05:9f:39:43:
c1:5f:ff:df:03:1b:ee:b0:23:1e:f6:f2:0b:91:ee:
a1:b9:61:1a:ee:ce:e6:94:e6:eb:17:73:31:4a:8a:
57:73:b2:5c:5a:d2:57:e2:8f:c1:e6:f3:9e:6d:a3:
6f:b8:cc:3b:8e:31:0a:07:ac:b8:a9:85:da:38:63:
86:5d:20:27:5e:5e:f2:18:56:9e:1b:6e:18:f3:31:
cb:86:75:96:e1:4f:7c:20:32:c6:00:65:1c:a8:45:
6a:d8:66:c4:0c:a9:f2:ae:35:8f:ae:ee:25:28:a7:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:FC:E6:99:22:D5:28:DC:72:8F:D0:46:44:62:3B:11:F1:A4:7E
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/meP85pki1Sjcco_QRkRiOxHxpH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.213.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fe:60:ac:28:56:cb:6a:8f:af:b7:7b:a1:ab:30:a0:6a:c2:
ef:f2:2a:47:44:4b:3f:91:b9:39:64:0e:41:69:db:98:24:7f:
6e:02:53:67:37:51:42:4a:63:88:de:26:9a:7b:07:be:63:8e:
12:4c:7b:ac:85:30:b9:07:53:ea:b3:ff:78:71:41:43:ca:23:
2c:11:35:d8:de:d2:3d:a3:ff:07:d1:3b:af:a5:19:8a:6c:78:
7d:c1:3a:66:82:9d:c0:a9:46:8d:ee:a1:5f:df:5b:2a:5e:e5:
27:ab:17:92:1f:cf:7d:18:1f:1c:67:0e:e0:09:29:5e:58:e2:
27:62:c0:0f:1a:03:7c:36:ee:e7:d0:1f:7e:67:a6:44:c7:a1:
12:e0:d0:d0:ec:13:8c:9c:80:e8:42:34:8d:0a:af:cb:bd:48:
a9:38:ca:29:a6:cc:38:91:36:a4:68:4e:e9:a5:59:ef:b3:33:
88:e3:78:a9:c8:44:43:fe:cb:8c:4d:fa:56:2a:88:8f:a7:60:
b3:3d:1c:2e:07:f6:3f:8c:f5:5b:e1:fe:c9:0e:be:a3:76:a4:
64:b4:69:b9:40:a9:08:88:25:54:00:58:9b:e6:69:d1:51:95:
3d:17:8d:e9:b6:20:07:02:d6:ea:a0:80:cb:db:72:f1:bf:5b:
a9:92:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:23 2025 by rpki-client