Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rSBlPp8g5KAPn7M0SBwzIvvHOsg.roa
File: rSBlPp8g5KAPn7M0SBwzIvvHOsg.roa (raw, json)
Hash identifier: 6U/qRAGj2hhQzGavyKSLdwqPriU89/B1Qy+IQYk8Hwk=
Subject key identifier: AD:20:65:3E:9F:20:E4:A0:0F:9F:B3:34:48:1C:33:22:FB:C7:3A:C8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185054896F2681B7FEAF70059B9F5598CC8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rSBlPp8g5KAPn7M0SBwzIvvHOsg.roa
Signing time: Mon 12 Dec 2022 07:42:01 +0000
ROA not before: Mon 12 Dec 2022 07:42:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12396
IP address blocks: 212.109.175.0/24 maxlen: 24
195.191.18.0/23 maxlen: 24
195.49.192.0/21 maxlen: 21
194.247.168.0/23 maxlen: 23
91.219.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:48:96:f2:68:1b:7f:ea:f7:00:59:b9:f5:59:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:42:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad20653e9f20e4a00f9fb334481c3322fbc73ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:f8:99:da:a8:5b:dd:4e:1c:7b:cb:97:14:
a9:f1:f1:28:13:5c:fb:01:d3:e2:c7:44:d0:73:ea:
f7:72:58:5e:4c:4e:aa:b2:94:96:4c:80:65:4a:2e:
54:f0:59:3e:ae:94:cb:a4:65:b3:43:6d:90:04:cb:
c2:3a:48:89:83:f3:c4:c8:3a:f7:5e:77:6b:e4:a6:
6e:27:dd:22:b7:a2:6a:d1:04:24:9f:7c:9b:17:52:
ae:be:7d:9a:3d:95:a4:06:72:4e:c0:73:b3:9d:5e:
b2:a1:0c:8a:a2:4d:6b:70:b0:9f:39:72:3b:3a:32:
18:a0:05:e2:80:cb:72:8c:19:76:f0:cc:b5:e6:62:
fa:e0:a3:69:0b:c0:18:9b:1a:ed:64:90:78:88:ec:
1b:2c:4e:3e:5a:6d:86:8a:99:f4:b1:23:d0:db:ff:
12:5b:96:1e:e1:6e:ba:93:97:58:b0:5b:60:19:bf:
6a:8d:cd:3c:bc:4b:5a:8b:c2:0b:49:44:05:68:72:
aa:13:57:a4:a9:57:38:16:f2:a4:0a:75:7f:ee:ad:
2e:2d:31:5a:bc:95:e6:2a:1f:5c:84:d5:eb:68:35:
70:84:33:f7:d6:2b:b5:c0:52:12:cc:ae:bb:ff:f9:
34:0f:1d:5f:e4:f1:90:e4:1e:9d:9b:50:08:fb:79:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:65:3E:9F:20:E4:A0:0F:9F:B3:34:48:1C:33:22:FB:C7:3A:C8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rSBlPp8g5KAPn7M0SBwzIvvHOsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
75:60:5b:1d:46:9f:4b:db:63:04:0e:8b:24:11:1d:29:de:19:
59:2f:73:33:10:ae:84:4a:f3:d8:c8:89:1b:5b:ea:24:58:bf:
60:4a:0b:b5:9a:80:1a:a7:f4:7b:85:98:d1:8a:8f:82:41:35:
5d:cb:f7:0b:3e:8a:08:5a:ee:ec:b4:da:20:59:ec:80:a5:cb:
34:fb:a6:9b:78:8f:29:ed:64:83:e6:60:35:67:84:55:db:5c:
21:91:a8:5f:49:b8:0f:c6:20:b8:da:ad:d0:f6:60:70:0f:5b:
5e:55:63:4e:65:a0:57:a0:2d:e1:a5:60:37:b3:58:c0:2a:61:
d8:4c:9f:ea:8d:d2:a5:cb:6a:4f:92:c4:e6:62:fa:8c:7a:8c:
94:13:af:98:6e:4c:89:48:85:75:f5:31:a6:24:1d:6f:88:13:
db:33:88:10:60:50:3b:b7:33:bb:91:41:a4:03:ba:71:55:25:
5a:7e:aa:6d:47:06:70:ed:80:e3:f5:c6:15:c1:b6:e8:f6:e2:
e4:da:d8:85:d9:44:35:ae:94:7b:2a:20:3f:9b:4a:53:e7:fb:
30:2e:f0:e0:16:32:dc:0a:a1:12:a4:96:92:19:fa:21:69:16:
5b:12:27:a2:35:4e:84:b7:d1:2e:92:9d:12:67:16:f9:9f:f6:
b4:fe:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org