Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/qEfupJ4-jYcoHrCeA2J-0VObDt8.roa
File: qEfupJ4-jYcoHrCeA2J-0VObDt8.roa (raw, json)
Hash identifier: 0XRNwgQwLrAz6/O+yTwbSBQYhBFitwaE5IKzETbiMdw=
Subject key identifier: A8:47:EE:A4:9E:3E:8D:87:28:1E:B0:9E:03:62:7E:D1:53:9B:0E:DF
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 02E745C8
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/qEfupJ4-jYcoHrCeA2J-0VObDt8.roa
Signing time: Sat 01 Jan 2022 15:59:48 +0000
ROA not before: Sat 01 Jan 2022 15:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202984
IP address blocks: 92.63.203.0/24 maxlen: 24
185.176.25.0/24 maxlen: 24
92.63.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48711112 (0x2e745c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 15:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a847eea49e3e8d87281eb09e03627ed1539b0edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:9a:50:c6:f0:5b:61:d5:7d:54:7f:3c:e8:
45:fc:a4:f7:e5:9a:e9:04:0b:03:3d:c6:cf:60:43:
f0:1c:27:93:22:db:7a:40:ff:bd:93:12:52:01:20:
72:dc:ae:c5:7f:bc:1c:02:bd:1c:10:6f:33:08:be:
64:3f:91:e2:66:c0:19:4c:dc:4b:d4:69:20:cd:77:
fe:aa:e9:98:ee:f8:df:dd:84:6f:6a:de:e4:aa:5a:
46:0e:04:82:f4:ba:77:b3:df:b7:83:e1:78:69:b3:
a6:13:76:64:23:fb:ba:e5:f7:b9:74:46:c3:86:b1:
f7:03:80:02:3f:91:0d:28:0e:f1:8c:fc:a5:0e:60:
76:50:a1:94:c4:83:e8:97:33:ae:c6:bc:e0:94:69:
8c:8e:d0:9f:2d:b3:01:4a:d6:bd:4a:d0:b0:38:e7:
84:7a:d3:16:58:41:b2:6b:f5:93:c4:43:13:c4:60:
65:a2:17:1b:99:0c:0d:cc:63:66:df:f6:38:42:e1:
44:63:a9:a9:7b:2b:eb:53:0b:56:c8:2e:99:b3:da:
26:31:b7:64:0f:40:14:6a:19:ac:81:15:67:cf:da:
87:a7:3d:61:65:83:12:06:83:43:2d:33:89:8d:35:
26:c1:28:c6:69:27:ab:ae:6f:50:40:37:d3:76:99:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:EE:A4:9E:3E:8D:87:28:1E:B0:9E:03:62:7E:D1:53:9B:0E:DF
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/qEfupJ4-jYcoHrCeA2J-0VObDt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.199.0/24
92.63.203.0/24
185.176.25.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8a:98:33:ad:bf:ae:8e:d4:42:09:f2:b0:4a:71:b7:7c:7d:
f6:5d:65:10:d7:f3:53:2d:78:64:b2:65:c7:22:bc:59:26:5c:
8f:fa:4e:d8:79:3d:a8:88:f9:11:7e:b1:66:a1:70:1a:6a:7b:
75:67:89:62:1e:05:e0:06:e7:a8:9f:64:aa:c0:a4:66:6b:eb:
0a:9d:53:dd:84:b2:43:f4:7b:09:42:69:4f:39:33:a5:48:c2:
2b:e2:19:3f:49:a7:06:17:26:8d:8e:76:1f:15:c6:aa:28:49:
95:11:5e:45:10:a8:92:4b:30:72:62:60:b2:63:0f:8e:3f:18:
db:da:5e:65:c1:4f:24:2c:8b:63:55:28:97:fc:c5:f3:23:cc:
44:66:9e:cd:c7:1d:90:b4:53:38:b4:79:b7:42:76:60:2b:a2:
dc:f4:a4:e2:b2:56:6b:e0:17:69:ed:98:b8:4d:5e:60:58:2f:
20:40:ad:f2:a3:7d:25:9d:2b:42:47:0f:00:06:2b:fe:e2:f0:
b7:f8:d1:a7:df:71:9b:3d:fa:fe:85:b1:38:31:ec:98:e6:92:
dc:a2:18:36:e9:8b:e2:6a:d6:fa:b6:c9:57:6b:ab:bd:f6:9c:
4d:80:71:0e:5f:ce:1b:78:3c:9e:37:ec:19:b7:d2:f4:70:09:
0d:9c:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org