Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/3SCqKAK8uiqH5m2nUtKSB8_16f0.roa
File: 3SCqKAK8uiqH5m2nUtKSB8_16f0.roa (raw, json)
Hash identifier: aVoXN/vqpL2H23aCuRQzCn6wJ+E8VVfFtVnaSbni3sY=
Subject key identifier: DD:20:AA:28:02:BC:BA:2A:87:E6:6D:A7:52:D2:92:07:CF:F5:E9:FD
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 038894BD
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/3SCqKAK8uiqH5m2nUtKSB8_16f0.roa
Signing time: Fri 25 Feb 2022 07:56:34 +0000
ROA not before: Fri 25 Feb 2022 07:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.51.9.0/24 maxlen: 24
92.51.8.0/24 maxlen: 24
92.51.11.0/24 maxlen: 24
92.51.10.0/24 maxlen: 24
92.51.16.0/22 maxlen: 22
92.51.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59282621 (0x38894bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Feb 25 07:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd20aa2802bcba2a87e66da752d29207cff5e9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:c8:eb:e4:97:f3:30:a5:f1:12:43:2c:76:
6b:26:96:87:82:73:68:00:66:77:1a:27:f2:8e:52:
68:f0:1a:40:49:42:07:82:14:b5:91:0a:cb:db:c9:
a7:a9:d9:ad:ab:4a:f5:ef:09:ff:89:42:6d:27:6a:
ab:2e:24:10:a8:a5:86:e1:2a:a5:55:6d:81:53:ff:
95:f6:8d:be:26:64:1f:ea:d1:82:a2:35:0c:e4:30:
04:b7:6a:54:34:b8:63:28:c0:ee:8b:40:e3:23:59:
04:5b:84:47:6e:05:12:32:68:dd:fa:fb:3d:c3:f4:
8a:d7:31:dc:41:6d:1e:16:44:a6:ce:8f:8d:cf:2c:
f9:c8:b6:aa:d7:98:61:61:97:89:44:92:2f:56:3e:
84:8a:31:33:71:7d:a6:63:f4:cc:b9:c0:07:ff:d6:
37:b3:48:e2:8d:72:45:c3:c4:a0:89:d7:d2:b3:13:
67:45:d8:2b:58:53:d8:69:41:4d:fd:96:4c:59:b5:
38:fe:4c:99:b5:68:ea:8c:a0:f0:c0:e8:ca:92:03:
e8:7f:76:cd:e9:c5:f6:e3:0c:31:9d:87:a4:27:fc:
d4:eb:46:af:ce:11:90:d6:6d:84:8e:c7:24:83:c2:
3b:86:98:2e:ce:d6:b9:84:bb:06:91:36:a0:e4:7c:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:AA:28:02:BC:BA:2A:87:E6:6D:A7:52:D2:92:07:CF:F5:E9:FD
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/3SCqKAK8uiqH5m2nUtKSB8_16f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.8.0-92.51.19.255
Signature Algorithm: sha256WithRSAEncryption
b2:b8:1c:62:01:f9:9f:7f:b0:15:d8:d0:0c:22:32:0f:69:d0:
3f:b6:54:83:c3:be:9a:e3:ab:d6:cf:8c:74:a9:de:6a:07:51:
7f:41:91:5a:de:cb:ec:16:f9:54:79:c6:a4:7a:fc:27:1d:b0:
9f:78:11:f3:f9:f8:c9:c3:e7:9e:1a:93:7a:bc:03:63:01:51:
3e:53:26:a5:7d:9c:d1:0d:de:4f:5d:65:55:b5:89:65:b4:fa:
de:21:f5:c5:b1:99:c3:0e:00:a5:36:df:f6:6a:2b:4a:ae:46:
5f:6d:c6:51:83:77:45:ad:be:3f:a5:6f:2c:c1:fe:26:17:68:
89:cb:55:d3:83:9e:51:09:34:61:0f:a1:58:2a:e9:be:27:e0:
a3:cf:cc:2f:5a:8d:3a:52:1a:d4:ec:02:04:0c:11:55:42:2c:
0f:90:8d:d2:c8:bb:cd:2c:a1:85:a8:d0:86:5c:7d:04:ec:b4:
74:7a:ed:7d:2c:2c:18:19:43:48:20:3e:a4:82:36:44:f0:5a:
d9:1c:4a:49:56:10:c7:ae:d3:c9:17:75:90:4d:e3:b5:8f:c1:
a2:77:98:3e:a9:d8:50:81:12:7b:f9:6d:f3:18:fd:3b:5b:c7:
6a:6f:d6:52:b6:68:b0:0c:76:a6:af:52:73:56:e4:98:e9:10:
1d:9c:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:05 2023 by rpki-client on console-ams.rpki-client.org