Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/kn1P2fg4PTSoqD6toVT2w-RHhHs.roa
File: kn1P2fg4PTSoqD6toVT2w-RHhHs.roa (raw, json)
Hash identifier: C6pynRr4KUSQlWkINIasDFyjCLMBDg+13FPfppS1/YU=
Subject key identifier: 92:7D:4F:D9:F8:38:3D:34:A8:A8:3E:AD:A1:54:F6:C3:E4:47:84:7B
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 042CC152
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/kn1P2fg4PTSoqD6toVT2w-RHhHs.roa
Signing time: Fri 29 Apr 2022 13:29:03 +0000
ROA not before: Fri 29 Apr 2022 13:29:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.51.40.0/23 maxlen: 24
92.51.42.0/23 maxlen: 24
92.51.44.0/22 maxlen: 22
92.51.9.0/24 maxlen: 24
92.51.8.0/24 maxlen: 24
92.51.11.0/24 maxlen: 24
92.51.10.0/24 maxlen: 24
92.51.12.0/22 maxlen: 22
92.51.16.0/22 maxlen: 22
92.51.34.0/23 maxlen: 24
92.51.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70041938 (0x42cc152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Apr 29 13:29:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=927d4fd9f8383d34a8a83eada154f6c3e447847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:bc:ab:41:90:fe:c1:ca:90:9b:11:d2:4d:
12:c5:e0:44:29:68:39:18:88:db:03:d2:22:cf:43:
7e:5d:69:71:70:df:f9:4c:0c:90:fe:41:4d:0c:eb:
c6:f9:27:26:29:ba:e5:c2:eb:3b:c5:31:b0:c5:b7:
db:1e:36:9f:1c:e1:73:e6:b3:bc:f4:07:70:e2:e5:
44:0a:f0:2e:ac:8f:46:fc:46:a7:a1:d2:c4:b8:cf:
e3:be:3e:e3:f0:55:22:f6:3e:1c:d3:d9:e8:f8:8e:
90:50:b0:78:28:47:ca:46:6f:62:67:06:1f:8f:7d:
5b:49:b1:d3:8a:4c:91:c9:96:c3:81:5b:d6:1a:3d:
3f:04:db:26:38:50:b4:fd:f3:c7:3b:8f:c0:8a:ce:
61:c4:4b:41:d8:9f:da:cf:67:c4:3d:2e:c1:3c:34:
28:7c:a3:75:c1:e1:4f:f2:cb:76:43:32:66:ca:12:
c9:b4:f2:c9:db:16:77:32:0e:ff:5f:be:6a:84:08:
e7:14:03:3f:96:70:1c:f7:14:d0:74:48:04:f9:73:
41:f8:70:5b:61:fc:e0:b5:74:19:ec:af:85:f3:d7:
97:6c:d0:96:f4:d5:3e:0c:92:73:eb:77:dd:50:bc:
bc:64:15:61:f5:e0:1b:ed:15:a3:36:06:ef:b1:55:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:4F:D9:F8:38:3D:34:A8:A8:3E:AD:A1:54:F6:C3:E4:47:84:7B
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/kn1P2fg4PTSoqD6toVT2w-RHhHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.8.0-92.51.19.255
92.51.32.0/22
92.51.40.0/21
Signature Algorithm: sha256WithRSAEncryption
10:ef:61:eb:04:2e:ab:0c:16:45:58:ff:89:8f:a8:f9:b5:83:
a9:88:9f:b1:25:dc:b3:71:59:96:40:a7:08:9b:bd:3f:9f:4a:
44:99:73:24:43:38:66:63:48:ca:fa:4a:0d:ec:9e:2c:6c:d4:
39:56:e3:7b:db:f1:ad:4d:42:13:a9:35:16:3f:18:5a:57:ad:
26:72:f7:4e:36:bf:08:90:d6:dc:e1:9b:0b:69:18:95:00:5a:
67:93:1b:6b:d6:b5:9f:da:b4:82:a2:a2:52:c0:2e:f9:de:a4:
8c:4c:4c:2d:54:bb:2f:8f:86:dc:30:e3:f0:59:18:65:3a:9a:
64:60:b9:64:45:54:82:46:89:7d:70:c2:57:60:6c:93:23:0f:
7e:19:71:ca:36:de:15:79:d0:4c:08:7f:02:f9:10:c1:b0:f5:
75:a0:59:fe:7b:f8:eb:8e:60:e6:8c:b4:06:6f:f3:8c:f1:a8:
28:71:d1:80:89:09:9d:38:02:97:27:00:45:b3:c2:9c:46:3b:
40:e1:42:64:1f:52:d1:ed:47:96:36:d3:65:33:22:9c:46:fb:
f4:6b:60:46:ea:ae:e7:77:18:b5:f8:e9:91:4b:3a:cc:e1:21:
e2:a0:a3:02:d8:86:4f:ff:21:40:a0:55:29:3c:38:ab:f2:99:
33:5d:d1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org