Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/OSGLQOi0agdhpJLoLT-aOoYfwzg.roa
File: OSGLQOi0agdhpJLoLT-aOoYfwzg.roa (raw, json)
Hash identifier: d9k9u5H5R70rYVyVw/Kuf1SHbwa+sVKfT7YPMgH9H0k=
Subject key identifier: 39:21:8B:40:E8:B4:6A:07:61:A4:92:E8:2D:3F:9A:3A:86:1F:C3:38
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 04861442
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/OSGLQOi0agdhpJLoLT-aOoYfwzg.roa
Signing time: Fri 03 Jun 2022 06:32:20 +0000
ROA not before: Fri 03 Jun 2022 06:32:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 92.51.40.0/22 maxlen: 24
92.51.8.0/22 maxlen: 24
92.51.12.0/22 maxlen: 24
92.51.16.0/22 maxlen: 24
92.51.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75895874 (0x4861442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 3 06:32:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39218b40e8b46a0761a492e82d3f9a3a861fc338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:d6:d4:ea:34:51:2c:54:25:2d:21:94:f7:
0f:19:b5:30:d8:18:c8:43:23:ec:e0:7b:2a:eb:fc:
fd:ac:c1:10:85:be:65:53:1f:6f:28:31:80:ed:7d:
10:9b:d4:73:ad:c3:c7:39:af:6b:00:78:f6:42:4a:
01:db:4f:21:7b:e5:fb:24:52:2f:21:b4:a0:99:69:
1f:88:34:8e:4a:95:04:2d:3c:bf:35:fe:5b:1c:9b:
df:ed:21:5e:e1:d2:fb:47:0f:38:22:dc:c5:77:d2:
83:93:b5:32:dc:e7:9c:48:de:e0:d5:db:46:8d:8b:
82:64:80:ce:4f:40:f1:77:c7:20:ba:74:00:93:ac:
e6:f9:02:7e:69:99:f1:c6:b5:d2:4c:25:0a:6d:46:
6a:7b:df:e4:0a:bc:72:03:6d:32:b8:89:1f:70:a1:
58:bb:1b:f3:50:22:9a:1a:51:d5:d9:e9:52:1f:36:
b7:cc:53:a3:2f:9b:e1:dd:e3:e9:f4:27:40:9f:b1:
17:09:2b:33:6d:09:b6:84:77:4d:aa:2f:de:49:8a:
92:ed:2a:fe:b1:ea:03:25:e2:da:54:fe:ea:db:47:
9c:7d:11:d0:e0:ae:b3:2f:7e:3f:9b:1c:7e:2d:eb:
bc:48:fc:53:bf:6d:76:a1:56:2d:6d:76:49:9a:d7:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:8B:40:E8:B4:6A:07:61:A4:92:E8:2D:3F:9A:3A:86:1F:C3:38
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/OSGLQOi0agdhpJLoLT-aOoYfwzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.8.0-92.51.19.255
92.51.32.0/22
92.51.40.0/22
Signature Algorithm: sha256WithRSAEncryption
80:df:9e:7f:cc:10:37:ee:33:47:0a:ec:d3:c7:3d:0e:b3:51:
25:5e:01:84:a8:0c:db:a7:9f:cd:8b:12:a0:de:a8:5e:08:03:
14:13:01:c8:75:ca:98:1d:86:fd:52:84:b6:e3:62:47:ac:42:
79:74:6d:8c:90:b0:a2:b8:36:54:b3:e7:64:6f:5d:73:b3:75:
a5:c3:bf:0a:16:bf:9b:95:3a:2e:70:9d:c6:ef:5c:29:fe:14:
90:c9:d8:b1:01:ed:0d:1d:42:cf:81:67:00:eb:73:72:8b:75:
55:26:aa:54:d6:26:52:5c:90:63:2e:f3:4f:eb:fc:cc:8b:63:
50:49:f0:22:c5:59:dc:aa:a5:ba:36:b4:5c:98:55:52:be:25:
ac:c9:04:95:fd:bc:a5:cd:1f:28:47:f4:33:9c:fe:b4:3b:1b:
ad:4e:2e:58:18:9e:c7:2f:ee:c6:e4:66:80:b8:2d:90:4f:6d:
e8:08:1b:74:24:be:d2:a1:8c:eb:d0:85:7c:18:44:94:8c:90:
3f:13:2e:c0:d9:12:1c:ed:e8:30:c4:a9:e3:a5:9d:57:ad:40:
43:48:01:de:d0:30:67:f1:8b:99:dd:59:e2:fc:73:96:f3:e5:
f7:90:61:2c:a1:01:9e:fb:6d:53:ac:8e:5c:b2:17:9f:21:b6:
33:ce:99:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEBIYUQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjU3YzJkOWQ5M2FjN2NmOWIyZjE3Y2FhNzg1OWI2OTg1YjM5YjlkMB4XDTIyMDYw
MzA2MzIyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzkyMThiNDBlOGI0
NmEwNzYxYTQ5MmU4MmQzZjlhM2E4NjFmYzMzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQB1tTqNFEsVCUtIZT3Dxm1MNgYyEMj7OB7Kuv8/azBEIW+
ZVMfbygxgO19EJvUc63DxzmvawB49kJKAdtPIXvl+yRSLyG0oJlpH4g0jkqVBC08
vzX+Wxyb3+0hXuHS+0cPOCLcxXfSg5O1MtznnEje4NXbRo2LgmSAzk9A8XfHILp0
AJOs5vkCfmmZ8ca10kwlCm1Ganvf5Aq8cgNtMriJH3ChWLsb81AimhpR1dnpUh82
t8xToy+b4d3j6fQnQJ+xFwkrM20JtoR3Taov3kmKku0q/rHqAyXi2lT+6ttHnH0R
0OCusy9+P5scfi3rvEj8U79tdqFWLW12SZrXuv8CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQ5IYtA6LRqB2GkkugtP5o6hh/DODAfBgNVHSMEGDAWgBTvV8LZ2TrHz5sv
F8qnhZtphbObnTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzcxZkMyZGs2eDgtYkx4ZktwNFdiYVlXem01MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMWUwNGI4LTEwMzEtNDNmOS05NjY3LThlNmY4NzhkYjVmNC8x
L09TR0xRT2kwYWdkaHBKTG9MVC1hT29ZZnd6Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MWUwNGI4LTEwMzEtNDNmOS05NjY3LThlNmY4NzhkYjVmNC8xLzcxZkMyZGs2eDgt
Ykx4ZktwNFdiYVlXem01MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQDXDMIAwQCXDMQAwQCXDMgAwQC
XDMoMA0GCSqGSIb3DQEBCwUAA4IBAQCA355/zBA37jNHCuzTxz0Os1ElXgGEqAzb
p5/NixKg3qheCAMUEwHIdcqYHYb9UoS242JHrEJ5dG2MkLCiuDZUs+dkb11zs3Wl
w78KFr+blToucJ3G71wp/hSQydixAe0NHULPgWcA63Nyi3VVJqpU1iZSXJBjLvNP
6/zMi2NQSfAixVncqqW6NrRcmFVSviWsyQSV/bylzR8oR/QznP60OxutTi5YGJ7H
L+7G5GaAuC2QT23oCBt0JL7SoYzr0IV8GESUjJA/Ey7A2RIc7egwxKnjpZ1XrUBD
SAHe0DBn8YuZ3Vni/HOW8+X3kGEsoQGe+21TrI5cshefIbYzzpke
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org