Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/P-38QWKkVPSrAHJLCL6NM9ZM5Z4.roa
File: P-38QWKkVPSrAHJLCL6NM9ZM5Z4.roa (raw, json)
Hash identifier: 4CzkzQaNYseA4NyxvcJI+h8hHx1Pl0QYxxh5I2bG5gQ=
Subject key identifier: 3F:ED:FC:41:62:A4:54:F4:AB:00:72:4B:08:BE:8D:33:D6:4C:E5:9E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 05FC7DA8
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/P-38QWKkVPSrAHJLCL6NM9ZM5Z4.roa
Signing time: Sat 01 Jan 2022 14:55:23 +0000
ROA not before: Sat 01 Jan 2022 14:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51616
IP address blocks: 92.119.50.0/24 maxlen: 24
92.119.48.0/23 maxlen: 23
92.119.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100433320 (0x5fc7da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Jan 1 14:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fedfc4162a454f4ab00724b08be8d33d64ce59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:6a:0f:ec:1f:35:cc:85:58:da:c2:cb:dd:
c9:94:36:bd:56:82:c8:e2:2a:d1:52:9c:4e:8f:09:
7f:03:89:ef:18:37:d8:fe:3c:a2:d2:ad:c8:a7:cc:
25:7c:10:c7:dd:db:74:bb:10:42:13:b8:ab:6a:2a:
0e:e2:74:e1:4b:f1:b1:c9:7b:e6:0b:af:16:37:b3:
ba:48:8d:f7:4f:07:74:00:26:e1:1c:78:ea:cf:34:
f4:6d:92:2c:d9:2f:62:e5:2f:8f:0f:fc:82:63:b8:
03:44:b8:07:ee:ec:f9:d9:27:b3:0a:e6:bc:22:6c:
82:70:52:b2:30:83:34:e3:2d:83:ee:a4:ea:6d:20:
91:18:e2:a0:30:f4:28:ee:47:c6:d6:2e:3d:d8:0d:
d5:ad:d6:3d:31:b4:e9:55:62:41:38:49:50:ee:87:
cc:8b:c4:a3:d6:82:48:7d:20:4c:f7:31:db:de:91:
45:29:d6:02:88:93:63:b3:f9:84:ba:9f:27:d1:d7:
85:d4:69:b6:5a:76:66:b5:dc:dc:8f:6c:32:af:29:
40:82:46:74:30:02:fd:cc:a7:cc:6e:1f:e8:63:f9:
04:22:70:a8:f2:cb:6f:ff:b0:31:c2:78:a1:1d:8c:
1e:71:27:38:29:20:a2:de:43:82:c9:7b:73:97:07:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:FC:41:62:A4:54:F4:AB:00:72:4B:08:BE:8D:33:D6:4C:E5:9E
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/P-38QWKkVPSrAHJLCL6NM9ZM5Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:4b:5a:17:9c:63:e4:56:99:9c:ce:cb:50:64:6f:1a:8f:06:
da:9b:4e:8d:1d:7d:d0:ba:3c:0d:93:40:9b:76:8f:2d:e5:10:
f6:2d:d6:e2:ac:bd:62:fa:16:09:4c:34:c0:2c:59:aa:32:f9:
af:2e:d1:29:3a:5a:73:fc:81:22:ff:1d:95:02:84:b1:2e:b2:
3a:07:f7:69:ba:0a:b3:53:9b:31:8a:9d:72:f8:3e:cc:91:3e:
1d:6e:65:c4:32:16:05:08:15:13:be:a3:f2:43:39:48:c7:87:
de:59:a8:0e:72:5c:bd:b9:78:d9:14:c6:29:2f:f7:0b:20:7b:
88:5f:30:f5:1c:07:e4:b8:87:67:29:07:9d:c7:4c:ed:ef:59:
8f:1b:c7:37:2b:fe:5b:e3:27:94:0b:c8:f8:f2:f4:9e:9e:86:
01:9f:bd:67:af:aa:52:f4:f9:a2:b3:25:aa:60:0c:7d:e7:c0:
8e:0f:e7:f6:26:a4:f0:46:15:5b:f4:52:eb:40:82:5a:92:69:
0d:aa:26:1d:23:da:fd:2b:42:48:39:33:75:51:fe:fb:85:23:
28:6d:56:c0:b3:d8:c2:60:82:31:40:74:fb:4f:6c:06:27:3d:
d6:2b:10:5c:0b:9b:c7:b2:f5:dc:a8:dc:f6:0a:89:37:aa:31:
21:65:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:11 2025 by rpki-client