Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/2Y6COcoT4LYfkQ7kiDBMG1Q_Xl4.roa
File: 2Y6COcoT4LYfkQ7kiDBMG1Q_Xl4.roa (raw, json)
Hash identifier: nHRetPceSITpBrqLZRcTdwqztLVDDoozhWfijdACC3A=
Subject key identifier: D9:8E:82:39:CA:13:E0:B6:1F:91:0E:E4:88:30:4C:1B:54:3F:5E:5E
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 28CF4758
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/2Y6COcoT4LYfkQ7kiDBMG1Q_Xl4.roa
Signing time: Sat 01 Jan 2022 09:06:29 +0000
ROA not before: Sat 01 Jan 2022 09:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44460
IP address blocks: 92.43.200.0/21 maxlen: 21
185.68.72.0/24 maxlen: 24
185.68.72.0/22 maxlen: 22
185.68.75.0/24 maxlen: 24
185.68.73.0/24 maxlen: 24
185.68.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684672856 (0x28cf4758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Jan 1 09:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d98e8239ca13e0b61f910ee488304c1b543f5e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:6a:1a:5e:af:99:d8:77:6a:a1:88:75:b7:
5a:0e:a4:47:56:14:c3:8c:47:9a:be:12:7a:e5:71:
68:0d:de:1e:52:46:82:a0:cf:64:c2:b5:7c:49:4c:
96:c4:67:7f:68:06:5a:6f:2d:6a:09:5a:a2:41:41:
4a:bf:33:60:81:08:35:8b:8c:33:f1:a5:d9:5f:25:
19:1b:7c:aa:f4:46:38:29:5f:b2:53:73:88:83:f4:
1f:d8:be:5e:0a:56:d9:a2:a5:8c:b3:e8:50:f4:84:
5e:c4:22:88:a9:5c:d7:61:71:31:4f:0d:14:e2:d1:
6d:bb:26:85:17:e0:20:3a:a2:1d:47:21:11:ba:77:
8a:87:a5:78:92:94:bb:d8:39:04:da:fb:89:a4:d8:
ec:a5:5d:98:05:00:aa:a1:77:a8:f7:26:7c:42:48:
5e:98:65:aa:7d:52:af:b7:ee:35:40:ef:1f:63:61:
b2:2f:3f:98:38:4e:2f:d8:e0:e8:f0:3b:e7:9a:6e:
22:b0:fa:36:60:99:51:c2:b6:53:8f:08:63:60:8b:
18:ae:ab:a3:55:00:d2:e4:bb:e6:c1:b6:2e:28:aa:
1c:fb:f3:1a:95:5c:c8:e4:81:eb:6c:27:90:ec:12:
52:54:43:8e:e7:1c:ad:8c:af:5b:e4:cf:a2:57:c3:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8E:82:39:CA:13:E0:B6:1F:91:0E:E4:88:30:4C:1B:54:3F:5E:5E
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/2Y6COcoT4LYfkQ7kiDBMG1Q_Xl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.200.0/21
185.68.72.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ca:e5:e9:ba:0f:d4:b9:5c:5b:ad:23:dd:12:f5:e2:6d:2d:
de:1b:e0:ce:e3:c6:6c:b8:c3:32:c0:a3:61:97:40:62:0f:a0:
d8:0b:17:6f:df:02:12:d4:18:2d:60:56:bb:bc:d0:f3:82:db:
ec:ea:ec:a8:1e:d0:86:8c:40:36:45:5d:b3:27:73:8c:69:6f:
d9:e3:15:70:63:1b:44:61:15:16:dd:07:ec:25:93:03:ac:bb:
7a:7f:15:80:73:4b:68:5c:e5:e5:c0:8d:74:5e:07:91:eb:ca:
35:02:91:2a:44:a5:d1:e5:f3:7f:e2:49:ac:27:7b:f0:c5:a1:
49:e3:e2:4f:5a:19:dd:6b:09:5b:39:7b:2c:eb:71:42:8f:a2:
6e:b4:c7:23:bf:a3:b4:c6:fc:25:33:d4:c9:e2:27:ad:de:5a:
09:41:10:6e:a1:16:06:6a:fb:34:9e:6d:0a:4e:9f:9b:3e:26:
ce:96:54:5b:75:ee:43:50:02:a3:72:0a:8e:08:1c:73:a6:24:
a3:aa:4a:f5:ca:fa:87:9d:f1:96:99:9a:1f:a5:ef:ff:bf:5f:
97:9d:c9:43:b1:81:da:d5:11:ff:6d:82:0d:0d:cc:e5:9d:3f:
e0:a2:9d:2a:9f:fb:40:a3:b1:15:a6:4f:49:8d:32:2f:66:99:
78:1a:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org