Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/SKQaDrFxi6rfGHUycOqbmgumkrQ.roa
File: SKQaDrFxi6rfGHUycOqbmgumkrQ.roa (raw, json)
Hash identifier: 4mRJ77u3EKnY8ws9BzIC1zUhe4X/yh7YcKEqHXF1xwo=
Subject key identifier: 48:A4:1A:0E:B1:71:8B:AA:DF:18:75:32:70:EA:9B:9A:0B:A6:92:B4
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 09B3512F
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/SKQaDrFxi6rfGHUycOqbmgumkrQ.roa
Signing time: Fri 01 Jul 2022 07:24:02 +0000
ROA not before: Fri 01 Jul 2022 07:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209604
IP address blocks: 185.255.92.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
89.35.52.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162746671 (0x9b3512f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jul 1 07:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48a41a0eb1718baadf18753270ea9b9a0ba692b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:19:4e:e0:84:8c:31:fc:69:33:e7:20:93:
c8:dc:12:43:39:6d:3a:78:20:52:7d:36:9e:a6:66:
27:6b:53:cc:bf:6b:c4:6a:fa:68:cc:64:3d:f2:e1:
71:9a:aa:e4:f9:7b:85:74:8d:57:74:72:94:9e:7c:
b3:62:b4:fb:ca:40:8d:bd:65:b0:fe:f1:34:e5:85:
eb:bd:69:6b:db:6a:89:23:b1:f5:c6:20:3e:f0:b0:
e6:f9:7e:a1:90:cf:4f:3d:df:dc:5b:9e:be:5a:24:
95:44:b8:5d:9e:33:c4:c7:03:6e:50:a7:72:5d:0d:
a4:92:0b:87:f2:9e:5d:e3:84:4c:36:69:32:09:59:
a8:31:f2:c8:33:0a:3f:58:aa:41:05:cc:31:38:d3:
0f:00:08:46:f1:35:6e:17:36:2e:9e:b5:66:6d:2e:
56:7b:c1:05:72:e2:a3:ff:84:25:4e:31:5b:78:4c:
bc:a6:13:03:2e:7d:04:58:4a:75:19:72:99:fa:06:
19:49:64:3d:7b:52:9f:48:52:cd:25:b2:dd:85:22:
52:80:7f:1b:87:06:10:32:1d:1c:35:60:8d:e1:e7:
61:f2:91:3e:98:fe:65:a6:79:cd:cd:95:f4:92:f2:
8b:78:8c:b3:12:e0:5b:05:be:87:60:e3:b0:e0:e5:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:1A:0E:B1:71:8B:AA:DF:18:75:32:70:EA:9B:9A:0B:A6:92:B4
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/SKQaDrFxi6rfGHUycOqbmgumkrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
93.115.10.0/24
93.177.101.0/24
185.93.68.0/22
185.132.126.0/24
185.255.92.0/22
193.164.5.0/24
Signature Algorithm: sha256WithRSAEncryption
39:da:fe:84:92:e6:07:8c:8b:2f:8c:74:ae:d1:75:eb:44:19:
32:9b:28:99:fe:25:0e:26:82:ce:5e:28:05:67:ad:69:4e:9b:
bf:69:1d:55:bb:dd:2d:dd:57:29:b5:65:84:56:c2:b7:b1:53:
68:b5:b2:2f:4a:d7:87:d8:ad:62:eb:bf:e7:af:e1:0c:99:8b:
13:83:dc:91:86:bb:4b:da:b4:4f:fb:61:39:86:04:f5:e5:62:
ed:05:62:13:ec:4e:71:fc:3c:14:cb:fc:45:64:c2:fd:73:19:
a9:9c:f9:2f:38:10:27:33:95:20:97:a5:da:62:69:e6:ab:4e:
d6:fa:df:fa:04:21:7e:fd:ae:59:9e:9d:c2:75:be:64:2e:16:
99:75:41:ed:8a:b7:7d:c1:c8:05:93:30:59:be:c9:4b:a5:08:
5c:5d:c1:82:c7:90:33:ba:8e:43:0c:3d:ff:d0:aa:24:21:a3:
b7:66:bc:1c:6c:65:cd:99:f9:b6:8d:9a:96:06:ab:ac:2a:3c:
bf:9f:1e:09:2c:9f:ec:3d:69:e6:4b:82:c3:17:46:68:c5:f8:
08:6a:48:59:5b:bb:92:e8:1e:2d:c9:7f:88:cf:ea:b3:fb:96:
1b:fb:fb:95:a8:ff:30:a9:2f:69:34:e3:4d:57:aa:a2:10:d3:
77:a1:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org