Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/xP98172DK5gBnNP8KxYCMqebW6I.roa
File: xP98172DK5gBnNP8KxYCMqebW6I.roa (raw, json)
Hash identifier: pg24XRjABvxIhU44xUE7ooQ6ehnQdf7L/qFPBS3xYjY=
Subject key identifier: C4:FF:7C:D7:BD:83:2B:98:01:9C:D3:FC:2B:16:02:32:A7:9B:5B:A2
Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial: 09346E0E
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/xP98172DK5gBnNP8KxYCMqebW6I.roa
Signing time: Mon 07 Mar 2022 11:44:39 +0000
ROA not before: Mon 07 Mar 2022 11:44:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204890
IP address blocks: 92.119.45.0/24 maxlen: 24
92.119.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154430990 (0x9346e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Validity
Not Before: Mar 7 11:44:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4ff7cd7bd832b98019cd3fc2b160232a79b5ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:ff:70:b8:36:e1:20:db:ee:bb:05:18:4c:
7b:f2:08:a0:b9:f7:f4:2d:cb:1f:9a:d1:45:42:22:
58:77:32:bd:3d:58:1e:e8:ad:ce:d2:7f:df:d1:73:
af:0c:fa:9a:9f:16:81:cf:86:3d:5c:c9:50:1c:e9:
58:95:a0:c2:96:5e:91:2a:d4:16:a4:5b:34:f5:e2:
0f:bd:81:b1:20:c2:5e:9a:14:4f:65:8a:87:4d:d7:
51:09:8e:00:b9:3e:9e:23:3b:50:78:c1:6f:f6:f1:
5e:00:d6:1b:7d:9f:4d:c3:f1:c7:92:0b:47:98:79:
02:70:6e:1f:3c:d2:1c:18:ad:37:e3:42:c3:c0:97:
43:26:c5:e4:a6:26:bf:3d:1d:22:ce:31:ee:06:04:
7b:c2:35:ad:91:4e:79:c9:0c:33:e3:e7:5f:26:18:
3c:e2:e6:5f:63:93:91:06:03:93:f4:25:a6:24:6c:
35:54:b5:f7:42:19:99:7a:e1:4a:71:6f:b1:1b:9d:
33:7b:a1:b3:71:23:c8:1e:9b:86:20:60:42:0c:0c:
6a:e5:7f:60:ef:d3:78:7e:f3:a2:da:8e:f0:c8:85:
01:4b:b6:21:0d:b5:b9:04:06:d3:c6:fa:54:9f:67:
8e:8b:66:53:e6:cd:c2:11:5e:a6:14:c6:b6:67:a4:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:7C:D7:BD:83:2B:98:01:9C:D3:FC:2B:16:02:32:A7:9B:5B:A2
X509v3 Authority Key Identifier:
keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/xP98172DK5gBnNP8KxYCMqebW6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.45.0-92.119.46.255
Signature Algorithm: sha256WithRSAEncryption
9d:3d:2a:41:75:3b:58:c7:e5:14:f6:b2:eb:b6:83:93:e7:bf:
d2:3b:82:5b:1f:20:e0:22:08:9d:24:7e:72:f4:a6:33:a8:22:
d2:10:a2:2f:40:7e:61:5f:c0:d2:83:0f:3c:c1:a1:c2:d1:6b:
14:76:ed:5b:20:46:ad:d6:1a:19:ee:66:45:73:01:e6:21:f0:
3e:20:91:32:06:7f:29:ed:72:53:38:99:59:21:42:c6:3d:cc:
c1:c5:fe:d1:c3:07:11:a9:6a:11:99:c0:89:38:cf:19:66:44:
46:5e:57:ce:ad:0c:7b:ff:3e:fd:3f:55:ae:f0:ce:64:7e:97:
5b:fb:1d:fe:ee:0c:1c:ce:37:dc:6f:44:c1:2e:77:ee:c6:c8:
d2:d0:47:05:b2:9b:61:15:16:5a:91:33:d3:63:dc:80:47:c2:
d7:b4:27:3c:af:9a:7a:3b:e3:98:2d:3b:8f:ab:0d:15:91:2d:
1c:42:9c:03:e4:fe:82:31:ff:21:b8:8f:4c:3b:6f:dd:05:78:
c3:ec:c4:ff:cd:56:8b:de:2c:63:d4:48:c0:d2:75:e1:cc:16:
51:b9:a5:c9:56:7d:a8:79:55:56:b9:8b:b7:62:16:b5:b5:50:
1a:fa:74:5d:34:d7:d9:40:7e:66:cd:fd:d7:47:dc:4b:a0:d6:
1c:e4:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:43 2025 by rpki-client