Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/l2nr20D_8q1xWig5uCwrVbzLToc.roa
File: l2nr20D_8q1xWig5uCwrVbzLToc.roa (raw, json)
Hash identifier: D3icVz36rzbNhKt5D2Rdc8IQqG4xRIYznZT/1XLdlUE=
Subject key identifier: 97:69:EB:DB:40:FF:F2:AD:71:5A:28:39:B8:2C:2B:55:BC:CB:4E:87
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 418A4BAA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/l2nr20D_8q1xWig5uCwrVbzLToc.roa
Signing time: Sat 01 Jan 2022 10:05:58 +0000
ROA not before: Sat 01 Jan 2022 10:05:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34601
IP address blocks: 92.114.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099582378 (0x418a4baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 10:05:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9769ebdb40fff2ad715a2839b82c2b55bccb4e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:90:b2:d4:e1:73:56:28:9f:86:12:79:c4:
57:b3:e2:34:e6:de:1f:a9:ab:a4:e8:ef:68:b2:57:
80:bb:fd:a9:f7:f6:6b:d4:a1:49:7a:ca:21:39:ed:
a5:d7:6e:b4:00:67:f1:a4:df:78:af:67:3a:b5:72:
8a:66:bf:16:14:43:27:63:1c:57:cd:50:4d:19:49:
ad:9c:84:49:fb:d2:68:1d:84:72:b7:40:d1:19:2e:
cd:9c:6d:52:6f:3c:3e:91:5c:dd:67:38:28:7e:d0:
c4:48:99:8b:b3:4d:91:57:ff:f4:f3:88:18:47:f6:
4a:af:d4:a2:bc:13:86:c2:94:e7:b5:9e:1a:ed:13:
89:d6:c0:8a:35:89:9d:db:4a:0a:86:f5:c8:fa:80:
12:98:f2:36:c9:0e:b9:de:fd:22:c9:da:e4:a5:7b:
98:02:92:31:25:fd:eb:4e:8c:e3:67:88:66:c5:9b:
ec:fc:a0:05:17:cf:4b:fa:3c:59:99:33:32:7a:94:
ba:05:d4:72:3c:3b:2a:17:e0:d7:76:de:78:08:80:
43:87:50:2b:3e:3e:6f:57:86:cf:ed:b0:6f:d9:62:
a5:1e:d9:c7:c0:f1:7a:d5:d5:1f:fb:e8:45:79:d3:
a8:fc:75:a6:cd:13:96:a1:37:92:d5:ec:16:67:dd:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:EB:DB:40:FF:F2:AD:71:5A:28:39:B8:2C:2B:55:BC:CB:4E:87
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/l2nr20D_8q1xWig5uCwrVbzLToc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.37.0/24
Signature Algorithm: sha256WithRSAEncryption
05:08:62:fb:35:34:d2:25:74:7e:c3:a3:44:42:02:0c:8b:53:
0e:c9:06:75:27:bb:39:93:ae:54:00:c8:32:de:b8:22:0b:9a:
01:59:0c:b8:77:38:29:28:0b:39:67:c6:78:6f:5f:fd:c4:70:
99:b1:9c:da:2b:a3:18:2d:2f:c7:ee:62:f8:fa:39:72:37:9d:
35:ba:f5:35:af:18:c4:75:47:29:b2:cb:a6:88:7c:6b:36:91:
8d:b2:f5:b4:25:ec:dd:2c:e3:e4:63:31:b0:ad:0d:c6:7e:fa:
45:f3:ca:13:de:35:a9:df:6f:a0:a6:08:ee:3a:44:88:e3:f0:
7a:fe:2b:09:aa:03:41:44:b9:44:bb:02:cf:b7:55:12:0f:31:
5d:8e:0a:87:a7:dd:5b:46:6a:df:a6:eb:6e:f3:42:dc:24:ac:
c6:fb:8b:a4:81:a8:7c:ad:b2:96:ac:0a:41:b2:0d:39:bc:19:
c2:8d:50:a2:87:c7:d4:e2:96:97:df:e1:8c:20:25:b4:8a:f1:
2b:6d:5c:bf:06:87:66:ac:4c:d4:ae:8b:fb:9c:b7:8c:b4:69:
5c:f8:ac:74:62:8b:df:c2:78:6b:64:b6:ca:fc:51:fc:64:6c:
5d:ff:e8:64:06:06:4b:a7:a4:b7:6a:14:46:70:b4:f0:1a:e2:
64:0e:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:10 2025 by rpki-client