Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/iR-3pUG1DA2NDOtNWo9_XzUxZBA.roa
File: iR-3pUG1DA2NDOtNWo9_XzUxZBA.roa (raw, json)
Hash identifier: YNw0OVMhzQtpr55Uv4wGRj48QfLX0Vt/W1MpMol1QBE=
Subject key identifier: 89:1F:B7:A5:41:B5:0C:0D:8D:0C:EB:4D:5A:8F:7F:5F:35:31:64:10
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01856DA64F8ED6D3BDF3CF2D4302836B244F
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/iR-3pUG1DA2NDOtNWo9_XzUxZBA.roa
Signing time: Sun 01 Jan 2023 14:04:53 +0000
ROA not before: Sun 01 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.92.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:4f:8e:d6:d3:bd:f3:cf:2d:43:02:83:6b:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Jan 1 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=891fb7a541b50c0d8d0ceb4d5a8f7f5f35316410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:27:9b:fe:d9:03:7a:e2:bb:e9:15:de:68:
a7:29:b6:ca:0d:27:eb:0d:32:44:81:a5:6d:b0:33:
d4:fe:d2:ce:8d:b8:82:47:45:22:67:50:47:c7:1e:
a6:9f:0f:81:64:53:9a:58:d5:15:08:3d:85:98:66:
a1:2f:42:5c:df:6f:0d:40:3a:87:aa:64:d6:3a:ba:
43:8a:0d:10:4c:aa:aa:c6:8a:18:ac:8a:eb:74:2e:
56:9b:87:0b:3b:d8:89:72:9d:3b:0e:e4:e8:79:6f:
96:27:54:30:b4:c5:41:b2:f7:be:95:93:48:92:58:
8a:e8:39:03:b8:40:75:c9:b5:9c:d5:8a:b6:23:67:
06:80:f6:30:ab:d1:64:ad:ce:4f:70:92:03:65:f6:
8e:cc:92:f9:d3:d9:ea:67:55:96:f4:e8:47:e5:65:
0c:d4:ca:95:38:be:7d:08:ec:15:2a:83:20:29:1c:
33:19:28:47:7a:c7:b1:f8:3e:44:80:ed:07:f3:ca:
aa:9b:9f:e8:14:21:02:05:62:19:e2:93:21:33:67:
59:18:39:3b:a1:d1:a0:1c:74:2a:a2:23:ca:3d:11:
cc:45:62:a0:b0:47:3c:c8:0c:fc:19:88:42:ba:51:
bd:5a:c7:48:00:5c:b6:f9:e1:67:93:fe:39:c9:a0:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:B7:A5:41:B5:0C:0D:8D:0C:EB:4D:5A:8F:7F:5F:35:31:64:10
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/iR-3pUG1DA2NDOtNWo9_XzUxZBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.13.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7f:97:af:2d:cd:fc:13:24:b5:05:6f:fd:d6:ed:ff:67:65:
5f:99:e2:96:1e:05:0d:c7:4d:9b:68:de:ef:c2:16:17:17:c5:
a3:74:c4:90:bf:ff:d8:3b:8c:a4:dc:08:13:d3:5a:91:a5:68:
5e:11:1f:b8:2c:37:b7:4e:d5:9d:f4:64:bf:69:7e:80:04:ec:
20:65:89:93:c2:ba:fa:f3:93:f4:db:39:f1:25:23:e8:7a:68:
95:fa:9e:1a:07:a3:1d:1f:4b:9d:4e:23:3b:87:58:65:f9:0b:
4d:0d:56:e6:92:88:7d:9c:e0:c6:fb:09:b3:15:2f:58:ad:1b:
0e:bd:4d:a6:5f:36:40:d2:16:f5:2d:02:52:ac:6f:d0:1e:e4:
61:c4:72:dd:b9:47:b4:22:5e:06:db:7a:72:69:ca:ac:25:33:
fa:5a:c8:b9:55:2a:9c:43:10:8a:0f:31:2b:47:f0:25:ad:fb:
a7:37:66:4a:ba:22:74:51:48:6b:72:68:0b:4a:9e:8d:7d:f9:
d1:72:20:ec:f1:55:4d:01:be:b5:b3:2b:23:35:b5:61:c6:6c:
2e:04:c6:dd:73:8d:df:93:2f:9f:57:e0:14:26:d6:ec:c4:c9:
88:df:09:9c:f5:97:31:1e:38:32:02:ea:b1:00:9c:b5:bd:d6:
1f:76:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:07 2025 by rpki-client