Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/kqGGRS7Rg0cbY_nVYkZxZ3v6bK8.roa
File: kqGGRS7Rg0cbY_nVYkZxZ3v6bK8.roa (raw, json)
Hash identifier: okeoT/Jyvo3MSV64fKHH7Eg1CYsjLEu8uRZu2e70cLM=
Subject key identifier: 92:A1:86:45:2E:D1:83:47:1B:63:F9:D5:62:46:71:67:7B:FA:6C:AF
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 1397C969
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/kqGGRS7Rg0cbY_nVYkZxZ3v6bK8.roa
Signing time: Sat 01 Jan 2022 07:54:33 +0000
ROA not before: Sat 01 Jan 2022 07:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47302
IP address blocks: 194.126.200.0/24 maxlen: 24
149.126.0.0/21 maxlen: 21
185.174.216.0/22 maxlen: 22
91.206.24.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328714601 (0x1397c969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Jan 1 07:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92a186452ed183471b63f9d5624671677bfa6caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:88:8d:8e:05:13:82:43:5e:e3:c0:55:92:
34:38:3f:32:e9:67:ba:e3:4d:8f:ef:41:d1:b1:05:
0c:33:0b:de:7b:77:ad:25:44:1e:8a:fd:d6:dc:82:
b4:21:22:dd:24:ea:4b:1c:39:d8:31:e8:2d:03:d4:
ce:3b:89:d1:4d:11:1f:cb:fb:ed:23:d2:99:ee:15:
cb:bc:8d:dc:0c:f5:87:d8:42:9d:4b:0c:f0:1c:c0:
73:42:d4:7a:87:f6:5e:62:f2:29:d9:7c:9d:02:ba:
6b:04:8b:8d:64:83:1b:f7:26:70:5b:96:21:6b:67:
90:ca:4b:ae:63:a1:b3:6d:93:cc:6f:cb:45:b9:51:
b6:bb:3a:73:ff:da:7d:aa:13:52:63:28:22:6a:11:
16:30:fd:51:75:d3:41:81:33:25:ea:59:ce:de:01:
28:90:bd:e1:d6:e4:38:69:ab:0e:2a:33:49:cd:99:
cc:44:b9:72:61:35:d7:cb:5b:82:48:19:c1:5f:8a:
ec:de:26:ec:53:1d:ad:dd:fd:f0:e1:2e:73:54:ab:
f3:2b:54:a7:a8:bb:24:79:cf:a0:1f:c1:b7:e2:aa:
9a:8f:f1:09:76:f5:3c:eb:32:4c:76:4f:e1:a0:ea:
4b:50:9a:c7:67:45:d4:8a:a4:3c:8f:51:c3:dc:7e:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:86:45:2E:D1:83:47:1B:63:F9:D5:62:46:71:67:7B:FA:6C:AF
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/kqGGRS7Rg0cbY_nVYkZxZ3v6bK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.24.0/23
149.126.0.0/21
185.174.216.0/22
194.126.200.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7d:0d:ef:f7:68:ea:40:45:48:8d:8c:2b:6e:5a:34:4a:26:
fd:c1:f5:60:00:a2:15:97:a7:24:65:46:2f:ed:1f:66:73:a8:
a9:a0:c0:7c:d9:cb:a2:3b:2c:b0:b7:f9:ec:bb:89:c6:fa:db:
17:c8:9c:61:53:d6:23:06:8e:23:60:3e:2d:96:dc:b9:f6:9b:
91:bc:f6:95:38:0d:ca:df:21:ef:bf:4f:98:16:a4:9c:fe:a1:
e6:87:19:bc:b2:17:51:b9:03:92:9b:b5:1f:10:fb:e1:c5:86:
cf:bb:69:eb:34:25:b2:73:d3:46:93:e4:fb:79:6f:38:a9:2f:
44:2d:81:e8:ed:f8:1f:b1:d6:dc:1d:08:25:b5:10:ce:80:92:
45:8f:82:e0:6c:c9:11:fe:12:cc:ea:da:cc:35:61:c5:1f:f8:
13:fc:f3:29:b6:6b:30:62:60:71:eb:32:b5:9e:95:19:4b:84:
e7:8c:fc:25:71:a8:0b:0e:c2:f8:af:d0:a0:70:80:9e:58:2b:
1b:a4:dd:84:43:64:47:f0:47:95:04:f6:fd:a3:35:cf:21:2c:
e1:2c:92:2c:69:eb:81:b7:97:2c:54:6e:5e:40:4c:18:e1:0c:
42:5c:d9:dc:dd:e6:d3:b3:83:c0:3b:94:ea:3f:97:42:e2:43:
94:ac:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org