Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/b_cIxx86grzSybOK2M8_DfJXf1g.roa
File: b_cIxx86grzSybOK2M8_DfJXf1g.roa (raw, json)
Hash identifier: 6FVAYCtEYe6UqhQjC/Ie0M3+urwWYj2siMilR0araRA=
Subject key identifier: 6F:F7:08:C7:1F:3A:82:BC:D2:C9:B3:8A:D8:CF:3F:0D:F2:57:7F:58
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 15360E1A
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/b_cIxx86grzSybOK2M8_DfJXf1g.roa
Signing time: Sat 01 Jan 2022 10:02:56 +0000
ROA not before: Sat 01 Jan 2022 10:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29423
IP address blocks: 185.102.92.0/22 maxlen: 24
2a06:2380::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355864090 (0x15360e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Jan 1 10:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ff708c71f3a82bcd2c9b38ad8cf3f0df2577f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:4d:34:5b:f2:8d:0c:24:69:d1:49:9f:a3:
96:f6:7b:cf:02:fe:d3:c5:16:8e:7a:d6:09:7d:96:
ae:7f:d1:ea:7d:21:be:af:15:a3:80:d2:6e:f1:cf:
b3:ae:d7:43:06:a0:44:19:cc:f5:9a:f8:d5:7b:e6:
05:5e:2d:f7:71:64:f1:08:3a:ea:03:dd:44:78:b9:
21:83:48:3e:f0:e8:5d:21:e3:27:b0:d3:16:6b:b7:
f4:3a:8c:25:55:5a:9f:bc:4c:32:2c:a9:78:7d:fd:
aa:17:fc:80:d3:db:c1:b8:2e:d7:85:9a:4b:39:4d:
6d:79:09:25:ea:0c:17:10:d9:16:b3:11:a1:6b:b7:
00:23:7f:38:ba:b4:90:23:65:02:02:f8:b6:45:cf:
9d:51:59:16:ca:06:ef:c4:c9:38:4e:e9:43:49:c9:
79:b1:e9:8e:7c:22:cc:fc:2b:a1:92:60:49:d9:06:
a1:35:60:67:b6:3f:da:c6:26:4f:5b:5a:05:a3:a2:
94:1a:17:f8:6f:8c:e5:28:10:97:94:5f:76:45:f3:
9d:ea:e8:d5:cb:04:9b:54:62:f4:2f:4b:05:83:7b:
4e:ca:f9:e3:28:bf:a9:ff:e1:ed:1e:c0:06:5c:b2:
27:dc:aa:8b:b1:b0:24:b1:30:cf:5c:ed:b5:ba:b5:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:08:C7:1F:3A:82:BC:D2:C9:B3:8A:D8:CF:3F:0D:F2:57:7F:58
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/b_cIxx86grzSybOK2M8_DfJXf1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.92.0/22
IPv6:
2a06:2380::/29
Signature Algorithm: sha256WithRSAEncryption
41:ee:c9:0a:ce:a0:96:71:23:ff:fc:a4:ce:78:10:d3:64:d6:
b5:5a:15:d2:a1:46:c4:d1:ca:4a:88:80:dd:5b:2b:db:62:a9:
01:ec:bb:bd:33:cf:59:ab:86:83:54:a7:01:b5:e7:2c:5d:d2:
80:55:17:da:47:3f:96:da:f1:5e:7c:4b:f8:cc:04:ac:bb:13:
9e:54:c5:c5:72:f0:cd:3d:ae:83:4d:ff:ed:4e:69:f2:3d:0c:
ea:01:2b:ba:89:d5:ed:c0:f7:4b:e1:72:7f:39:95:cd:b5:33:
92:8a:49:de:27:1d:05:f8:e3:a4:82:4d:6f:ef:6a:7a:61:f3:
b9:34:e3:1c:91:3b:82:28:68:d6:72:c5:fd:cc:ec:50:cb:d5:
4c:17:1f:85:03:08:1e:af:12:75:99:cf:44:57:3d:de:e7:e0:
48:69:8d:a1:d9:5c:68:b5:c8:a0:d7:77:01:cc:f8:80:75:a9:
d8:8f:43:9d:36:04:6b:2d:1a:65:a6:41:f7:19:4e:28:8a:a5:
4f:8d:82:a4:52:da:85:ac:0f:0c:29:21:dc:c1:4a:f8:e9:34:
2f:4c:7b:71:ae:62:28:c8:ed:c4:51:65:e9:28:ef:23:9b:29:
99:f6:05:72:39:e1:4b:4e:cf:72:96:22:ec:f6:f0:be:b4:12:
7e:67:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org