Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8RQ027iVP2eLu48EX7UdYYl6sFk.roa
File: 8RQ027iVP2eLu48EX7UdYYl6sFk.roa (raw, json)
Hash identifier: 6K+WOKgG9REThmG3bMbZXcxJJK2TCc9EpiySHJXTpwo=
Subject key identifier: F1:14:34:DB:B8:95:3F:67:8B:BB:8F:04:5F:B5:1D:61:89:7A:B0:59
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841DAC23208CD65E54D3026E779FC42B9E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8RQ027iVP2eLu48EX7UdYYl6sFk.roa
Signing time: Fri 28 Oct 2022 08:18:51 +0000
ROA not before: Fri 28 Oct 2022 08:18:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12714
IP address blocks: 109.106.213.0/24 maxlen: 24
109.106.214.0/24 maxlen: 24
178.211.1.0/24 maxlen: 24
93.91.224.0/24 maxlen: 24
95.129.92.0/23 maxlen: 23
93.91.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:ac:23:20:8c:d6:5e:54:d3:02:6e:77:9f:c4:2b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 08:18:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f11434dbb8953f678bbb8f045fb51d61897ab059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:7e:54:f7:01:3f:6c:aa:87:35:ea:64:b7:
49:e6:f5:d7:f4:fc:d6:29:8f:e0:2e:5a:aa:02:28:
d6:8a:29:fb:b5:74:8c:7a:fa:32:a9:e5:79:42:8a:
38:39:e3:ce:8c:c0:b5:cf:19:22:61:02:aa:64:04:
b4:06:c5:1e:1a:cc:be:03:ca:25:d7:40:2c:94:f6:
99:38:71:b7:b1:c6:a2:f3:84:ac:3e:a5:2f:79:3c:
e9:a2:a0:9e:e1:4a:9c:5a:50:f7:55:be:d7:98:b8:
2a:99:f8:f9:4f:b8:b1:4e:25:60:1d:e3:10:55:49:
37:ba:2c:91:32:b2:c8:91:37:87:96:26:aa:b0:94:
6d:71:f1:30:c3:f6:bb:92:a2:80:fe:10:27:27:b7:
ae:6e:66:b6:96:f0:f2:99:95:a6:df:16:63:42:04:
86:22:db:15:35:87:d6:3e:6f:d7:b5:fd:e7:c5:48:
e8:9f:6a:2b:4e:7d:d6:27:f6:67:05:6f:ec:29:46:
41:d4:ec:28:17:6e:dd:e2:5b:bc:05:a6:20:a2:d4:
1d:0a:e0:df:26:d5:45:7a:9a:7a:02:bd:da:37:d7:
bb:5b:b1:05:9a:15:06:13:d6:c8:e5:5b:65:95:69:
60:17:1a:7a:dc:40:16:6e:a7:42:07:e2:f8:64:1c:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:34:DB:B8:95:3F:67:8B:BB:8F:04:5F:B5:1D:61:89:7A:B0:59
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8RQ027iVP2eLu48EX7UdYYl6sFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.224.0/24
93.91.232.0/23
95.129.92.0/23
109.106.213.0-109.106.214.255
178.211.1.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c3:a4:d7:93:20:6b:aa:8a:e7:99:7c:08:ca:73:c9:c5:93:
cd:c7:f5:23:5f:ce:2c:5f:5e:30:d1:cd:50:58:74:ef:e8:52:
e0:4a:71:31:69:ca:4b:eb:ac:b8:70:d8:1a:c0:53:d7:39:6b:
18:3b:e3:bb:63:07:91:c6:4b:e8:c2:05:2d:e3:6a:82:ec:26:
37:27:26:5d:5a:06:d9:a7:f8:44:ee:bf:95:8e:8b:50:e1:51:
68:c7:71:b5:95:20:fa:5c:a2:84:fe:21:8b:eb:98:20:46:2c:
5b:93:db:9d:d9:b4:4d:ff:96:98:1c:07:37:d0:35:63:2b:2e:
42:b4:3a:33:8f:9b:58:65:c9:7f:07:e5:c9:f6:b4:6c:16:21:
f9:fd:06:28:cc:1b:b5:14:36:63:1e:24:fe:47:c7:4a:38:a8:
5c:5e:d5:e1:d3:31:5c:ee:c8:d7:11:ea:e2:3c:d4:cc:a9:35:
9c:5a:95:21:5d:72:39:92:5d:a3:89:24:9a:97:ff:ea:17:c5:
83:44:da:64:b3:a5:92:79:13:a9:37:1b:41:e7:ef:e2:77:08:
89:25:a5:29:24:ad:c3:fc:45:96:4e:b3:56:98:89:00:de:83:
30:00:d3:89:e2:39:66:e1:c1:cc:97:9a:4b:b4:d5:67:2b:91:
f3:c0:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:42 2025 by rpki-client