Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/aP0CB2dP6Qz5POT6Oj8xtsLXFe4.roa
File: aP0CB2dP6Qz5POT6Oj8xtsLXFe4.roa (raw, json)
Hash identifier: bj6rxJe8lGqW/q/YxF5fobxpN2zBsuSeMY5T/edByh8=
Subject key identifier: 68:FD:02:07:67:4F:E9:0C:F9:3C:E4:FA:3A:3F:31:B6:C2:D7:15:EE
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 08B8A29E
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/aP0CB2dP6Qz5POT6Oj8xtsLXFe4.roa
Signing time: Wed 19 Jan 2022 19:15:45 +0000
ROA not before: Wed 19 Jan 2022 19:15:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209720
IP address blocks: 92.118.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146317982 (0x8b8a29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 19 19:15:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68fd0207674fe90cf93ce4fa3a3f31b6c2d715ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:ba:2c:ed:0b:07:ee:a1:72:d9:28:23:8f:
51:ed:22:a2:5f:25:60:cb:56:60:4d:e6:bd:66:08:
e2:c8:66:ad:5d:58:28:f7:c7:a8:8c:ea:09:82:3e:
49:ee:7a:f8:d6:06:7d:99:09:77:96:69:44:5a:77:
b3:97:d3:53:31:57:79:43:de:04:48:04:2b:1e:eb:
1f:e8:33:50:d7:05:a2:50:cc:63:f6:b9:df:1c:8b:
23:0e:6e:e0:9e:82:55:59:5c:e2:9f:a0:a9:84:f8:
07:0d:ee:bf:2e:4a:02:56:f3:f7:9c:83:e6:8f:f6:
4d:ff:d6:91:c9:64:74:6a:c7:81:3b:1f:02:33:e0:
23:a8:77:c8:ce:ee:da:dd:f4:3a:7d:f9:ab:9f:dc:
41:79:6a:96:ab:fd:8b:45:a3:ea:de:f1:f9:ac:fb:
a4:92:0a:71:ef:c4:5d:bb:ed:1a:5c:b3:b4:14:7f:
ef:4d:39:25:24:66:78:d7:76:ad:10:a4:f7:83:84:
54:ae:b5:2f:7b:8b:9d:f1:af:be:8d:dc:d4:a4:f2:
19:2c:b8:6f:61:dd:2a:99:76:a9:7b:43:c7:e6:4a:
e5:25:04:db:75:92:c8:3a:e2:bc:a6:e0:35:53:bd:
d5:13:fb:ef:23:9c:9c:eb:1f:9f:0e:06:46:f3:2f:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:02:07:67:4F:E9:0C:F9:3C:E4:FA:3A:3F:31:B6:C2:D7:15:EE
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/aP0CB2dP6Qz5POT6Oj8xtsLXFe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2c:42:ed:dc:d3:9c:ad:8e:e1:c1:bf:ba:b9:c6:e4:3d:91:
a2:bb:9b:fe:86:ac:bb:a9:26:8c:34:1f:ed:3c:d8:8b:2e:c4:
6f:71:a6:9f:7e:97:66:2e:2c:80:cb:c0:96:7d:55:ba:27:83:
e2:19:2f:4d:d1:e5:ea:ba:f1:96:34:b0:d5:76:8b:7d:42:2a:
9d:d6:fb:23:b1:0a:97:cf:25:82:b1:1f:16:85:2c:13:22:c8:
47:8f:90:a7:d4:22:48:01:56:78:a8:9e:29:0b:59:64:15:09:
32:e8:66:1d:de:12:0f:4e:d0:72:4b:fe:5a:6f:75:7c:a6:19:
6e:67:5b:99:41:64:69:63:62:9f:0d:94:26:b0:8e:c8:79:1b:
3a:9e:4c:57:df:90:5a:03:2b:47:d7:44:5c:04:78:fe:e6:eb:
2e:3b:61:ee:2b:4c:31:cc:49:a7:84:9d:d9:44:d6:72:f0:c8:
74:09:d6:be:34:59:18:a5:b5:4b:09:c8:78:4c:e3:d5:5b:e1:
ca:a5:2e:95:b3:c8:19:e4:70:8a:14:20:b6:56:ac:11:5a:0c:
b6:40:ea:24:46:5e:dd:59:46:71:1b:10:91:ba:1f:ed:db:bf:
5d:ef:06:70:51:57:22:1c:65:fa:53:eb:bc:51:db:ec:db:91:
80:2a:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:35 2025 by rpki-client