Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/P2Gi3IH-yHpPKuUi0RZbkQgAezE.roa
File: P2Gi3IH-yHpPKuUi0RZbkQgAezE.roa (raw, json)
Hash identifier: pnin4/783hGTdQF05YItmHhzFuEVqLUr5vM+xJwW3LY=
Subject key identifier: 3F:61:A2:DC:81:FE:C8:7A:4F:2A:E5:22:D1:16:5B:91:08:00:7B:31
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01882140B75E7F54CB7DD910C7C30E142C61
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/P2Gi3IH-yHpPKuUi0RZbkQgAezE.roa
Signing time: Mon 15 May 2023 21:11:09 +0000
ROA not before: Mon 15 May 2023 21:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64433
IP address blocks: 92.119.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:21:40:b7:5e:7f:54:cb:7d:d9:10:c7:c3:0e:14:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 15 21:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f61a2dc81fec87a4f2ae522d1165b9108007b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:29:20:fa:a0:0d:3b:27:b4:2a:15:fa:54:
d1:fd:27:4c:6e:34:47:f3:a2:b8:b2:5f:3e:2e:17:
d1:77:b8:35:e2:03:aa:19:3e:43:c7:62:e7:89:3e:
53:2c:8c:7b:b6:ef:4c:c6:f4:15:e1:f7:b1:c2:32:
bb:34:88:85:3b:28:27:6e:5d:a6:fc:48:37:a1:f8:
b3:e2:27:db:ff:0b:82:e7:c6:0d:4c:39:39:b3:bd:
2f:68:98:f1:73:da:54:75:f9:9c:4b:bd:02:ca:6a:
93:a2:8c:cf:d0:f5:b7:09:53:15:a4:56:fc:9b:02:
d4:1b:25:37:b1:81:28:32:b5:6f:3f:c5:f4:76:33:
0e:30:60:ec:2b:60:3c:68:e8:0d:8d:df:27:2b:ec:
b7:6d:72:d2:29:e2:35:8c:ce:0e:97:42:ee:49:23:
d1:77:6c:97:c6:72:e5:bb:3b:6e:2d:44:11:f0:20:
c6:a6:3d:d5:a6:2c:13:8d:69:75:db:b3:f6:8e:7b:
d0:16:16:ed:ee:b1:92:25:8e:b7:4a:b4:64:08:d4:
95:25:ec:5d:f4:1e:8e:a3:d4:c2:c6:91:2f:ba:78:
57:2f:c3:5d:70:f7:98:f4:72:bb:cb:48:64:db:3f:
0d:42:87:66:44:36:53:a2:4d:9a:3c:d6:b7:3e:f0:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:61:A2:DC:81:FE:C8:7A:4F:2A:E5:22:D1:16:5B:91:08:00:7B:31
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/P2Gi3IH-yHpPKuUi0RZbkQgAezE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d8:b3:db:28:03:0c:cf:66:f4:8e:b0:f4:1d:fd:ac:b7:d7:
01:c0:37:38:d1:f4:7b:f4:99:4e:88:51:0c:08:5a:ab:19:0d:
96:30:6b:1c:3a:36:95:8c:d2:3d:71:b1:ee:6f:02:77:fb:f6:
0c:6b:1a:a3:7e:35:29:4f:57:00:98:ca:41:0d:07:ed:1f:12:
53:82:df:41:c0:17:0f:54:ea:70:24:42:5a:96:bc:aa:ed:7a:
16:6b:a6:b5:cb:08:8d:eb:10:9e:7e:b2:21:f1:da:29:47:cb:
66:cd:6b:51:b3:70:a3:3e:22:84:fd:29:e7:a9:7a:fe:cf:18:
3d:6c:de:e1:e0:aa:37:56:c6:ab:56:29:23:3e:f2:7b:b0:46:
f6:7d:05:0a:85:12:b1:f6:3d:83:81:2c:f6:29:59:64:bf:c2:
09:2e:6b:62:d2:5c:6d:73:01:89:38:ae:8f:ea:03:5e:76:6c:
8e:ad:3f:be:84:ae:03:cb:c5:10:68:90:2c:d5:3a:33:91:62:
96:b4:68:fb:21:3b:9f:ae:d5:38:6d:f3:25:08:42:46:15:55:
95:4e:ba:a6:c2:8c:c5:a0:f6:0c:56:b6:f4:62:fd:ea:cf:f2:
a7:0a:0d:9f:ed:0b:a5:3d:30:c7:d8:a1:92:e8:92:dc:00:87:
d1:15:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:37 2025 by rpki-client