Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/cS7Fr2d5u6EWz09vuFzCmOCpesU.roa
File: cS7Fr2d5u6EWz09vuFzCmOCpesU.roa (raw, json)
Hash identifier: TJfbdnJZfMEKAlmdaKAYpKtNk51zqb6RsxD0w13dLZ0=
Subject key identifier: 71:2E:C5:AF:67:79:BB:A1:16:CF:4F:6F:B8:5C:C2:98:E0:A9:7A:C5
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 37E9E8BA
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/cS7Fr2d5u6EWz09vuFzCmOCpesU.roa
Signing time: Sat 01 Jan 2022 09:59:57 +0000
ROA not before: Sat 01 Jan 2022 09:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5488
IP address blocks: 185.2.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938076346 (0x37e9e8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Jan 1 09:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=712ec5af6779bba116cf4f6fb85cc298e0a97ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:0e:39:ff:e2:f3:53:dc:d8:ce:c6:7e:11:
7b:bf:e5:b5:11:7e:0b:11:c1:00:eb:c3:fb:00:3c:
ff:8c:01:e7:fe:54:2f:60:e4:f5:df:ec:7d:98:e1:
4f:8d:51:5a:de:a5:35:87:cc:a7:e1:ef:3a:19:41:
e0:38:da:f1:5f:e3:61:28:9d:a9:19:16:d5:78:99:
be:c8:ee:b8:96:d3:68:d9:27:12:af:ed:7b:79:55:
ec:1f:cf:ec:b8:ac:8b:02:ce:14:84:eb:94:f3:f2:
5a:6d:e7:76:9f:a0:b8:f3:9c:59:1f:b2:40:ad:fa:
23:60:5a:3b:35:c3:9b:2e:b0:10:be:b0:a4:dd:ef:
09:f0:40:5c:de:1d:33:40:02:3b:56:14:2f:34:56:
49:0b:ea:09:30:a5:2c:a2:1b:ec:7c:fe:f5:35:d2:
b2:28:d3:8e:f5:bf:d0:e7:ee:a1:92:e7:30:cb:00:
ae:0f:0f:b1:84:85:2c:05:64:fe:3d:07:63:ba:5d:
fe:5c:e5:bd:c2:49:6a:f8:94:96:50:70:4d:be:ea:
42:ff:ca:a8:48:aa:57:a7:8f:61:16:36:ca:dc:ec:
66:b8:fa:0b:91:c7:4f:f2:53:76:df:6c:f9:9f:e2:
a5:ca:e3:99:5c:ad:53:22:67:b2:3e:12:0a:bc:65:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:C5:AF:67:79:BB:A1:16:CF:4F:6F:B8:5C:C2:98:E0:A9:7A:C5
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/cS7Fr2d5u6EWz09vuFzCmOCpesU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a8:4b:65:8c:4a:cf:ad:56:1c:53:c1:20:71:bb:49:92:93:
a6:ff:49:de:30:98:61:9a:6a:16:e7:c3:0a:bc:54:a8:dc:48:
9a:e3:85:df:f8:c2:3d:c7:5a:b1:e2:20:2f:ce:91:f9:b0:02:
2b:b6:b5:31:77:84:42:cc:8f:89:94:b1:1b:5a:92:f2:5d:be:
db:6f:8c:4f:fa:d7:a0:bd:25:49:72:27:12:b3:fe:df:7e:9a:
8f:b6:65:ab:9f:35:1a:d3:96:7b:9a:22:ba:42:9e:00:d5:cc:
b5:bf:ee:cb:e1:5d:c0:c4:94:e6:af:cb:91:48:8e:c4:09:ae:
9e:1a:54:cf:20:d3:1e:65:fd:55:a5:09:21:16:8a:43:f2:a4:
6b:6c:14:d6:e6:67:95:9a:43:02:e8:2d:da:1d:46:6d:07:b7:
fd:ef:cf:a9:da:e2:f0:49:ae:ba:86:f1:77:f3:39:bc:6b:81:
40:b6:f0:01:24:9a:d1:35:42:a2:13:a8:ae:33:4b:cf:64:9a:
55:40:85:1e:fa:7a:a0:9b:9c:1e:60:09:4a:81:2b:62:a9:23:
7e:ce:1b:d8:a1:25:9e:12:7e:78:d0:e1:f2:1c:92:93:56:87:
84:e9:97:17:49:96:f4:b1:79:d5:58:0f:04:f6:4e:7b:8f:13:
f8:6f:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:09 2024 by rpki-client on console-ams.rpki-client.org