Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/c4-ip6OOy7CmblbsSx46T7XUCqM.roa
File: c4-ip6OOy7CmblbsSx46T7XUCqM.roa (raw, json)
Hash identifier: 1CDMM6TYkqiuXUt0RwwGdty8of30t6RHXtR4S6fnpug=
Subject key identifier: 73:8F:A2:A7:A3:8E:CB:B0:A6:6E:56:EC:4B:1E:3A:4F:B5:D4:0A:A3
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 011D3D
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/c4-ip6OOy7CmblbsSx46T7XUCqM.roa
Signing time: Fri 08 Apr 2022 08:18:50 +0000
ROA not before: Fri 08 Apr 2022 08:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209284
IP address blocks: 92.118.116.0/22 maxlen: 22
92.118.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73021 (0x11d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Apr 8 08:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738fa2a7a38ecbb0a66e56ec4b1e3a4fb5d40aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:3f:2f:f7:9c:ea:ec:19:7b:3b:31:e9:a6:
ac:f4:07:92:0c:91:40:09:1d:cd:04:4e:e9:f3:9c:
9f:57:9e:aa:1a:9d:3a:6c:30:82:ca:b1:9d:27:fe:
29:2f:46:7a:ea:ba:bb:62:84:2d:27:d9:7c:d6:f6:
b0:89:6c:87:ce:ec:23:e4:8f:19:44:03:9e:4d:dc:
91:5c:55:50:3d:4c:fb:7c:76:20:22:d3:18:e6:8c:
f8:9c:7e:ab:0e:44:cb:4a:c5:13:fe:40:7c:ac:53:
2a:27:c6:f6:4b:ee:ee:0d:6a:86:f9:eb:fc:d3:76:
8f:ac:9f:5f:98:98:de:9d:73:b1:f0:53:a0:ed:75:
2f:21:d1:f2:aa:b6:18:db:45:1f:0b:25:7a:08:1b:
a8:fb:0b:2b:62:9a:77:b6:b0:c3:62:0f:eb:3b:28:
1b:54:e2:20:a4:f3:e5:05:91:c4:6c:3c:5d:1e:bc:
6f:85:41:e4:25:0e:e9:74:fa:57:f0:8e:25:da:e0:
f6:2f:20:7c:a4:2a:5a:0e:87:dc:9b:58:e5:25:01:
a2:4e:f7:c2:68:2c:32:22:19:e4:11:8f:e6:d1:8f:
35:67:ea:c1:d5:ee:5a:71:b6:c0:de:6d:82:78:e2:
c1:dd:43:21:28:9d:2e:f1:94:a7:fc:b0:cd:ad:61:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:A2:A7:A3:8E:CB:B0:A6:6E:56:EC:4B:1E:3A:4F:B5:D4:0A:A3
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/c4-ip6OOy7CmblbsSx46T7XUCqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.116.0/22
Signature Algorithm: sha256WithRSAEncryption
67:03:1a:eb:cf:66:82:18:da:e1:64:36:41:1c:aa:0c:df:fb:
89:93:e2:e4:32:5a:06:ee:f5:10:72:a7:3d:da:4a:bd:46:6c:
2e:f1:e3:08:9f:fe:7d:42:b1:c7:88:34:4c:8c:fd:5d:db:f7:
bd:c5:9a:fa:05:1a:49:b5:ca:dc:7c:03:78:a8:6d:5b:b7:fe:
c4:26:55:13:01:7c:19:16:c1:1b:93:66:fc:c3:50:07:da:42:
33:b9:df:a6:c5:7d:fd:e8:0c:e5:51:09:b1:4d:aa:b6:07:f1:
7c:04:e1:bd:12:a2:d7:ce:4c:b2:f4:f2:b1:56:67:f9:d2:47:
c5:3d:ca:a6:5d:80:e5:76:6d:db:5c:20:ea:27:86:99:f8:cc:
10:c8:da:e5:5d:a8:b4:6f:e5:bb:77:66:f2:6c:c5:e9:75:9b:
4e:40:40:2b:76:c0:66:8e:28:78:bd:8f:84:c0:3d:aa:7d:96:
6e:60:4c:ce:b9:82:14:28:28:b7:64:50:d8:a4:c5:16:3b:ae:
18:7c:47:ff:d0:da:04:25:19:fd:5b:ef:7e:a6:b4:03:2f:fa:
69:0d:c3:45:2f:c9:f7:78:ff:f9:b2:76:a8:ea:5c:d0:36:84:
2c:ac:b4:80:32:bd:2a:84:68:85:d6:41:25:e4:60:e5:7f:f6:
71:48:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:08 2025 by rpki-client