Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uCXLz4J-PlPRr6rBOjbX44b6yoM.roa
File: uCXLz4J-PlPRr6rBOjbX44b6yoM.roa (raw, json)
Hash identifier: DisVxLOw1SQEnvaI9fTaInMC814uo6DyVt+JPmhKYX0=
Subject key identifier: B8:25:CB:CF:82:7E:3E:53:D1:AF:AA:C1:3A:36:D7:E3:86:FA:CA:83
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 03808268
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uCXLz4J-PlPRr6rBOjbX44b6yoM.roa
Signing time: Tue 22 Feb 2022 13:58:06 +0000
ROA not before: Tue 22 Feb 2022 13:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 92.51.11.0/24 maxlen: 24
92.51.10.0/24 maxlen: 24
92.51.9.0/24 maxlen: 24
92.51.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58753640 (0x3808268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Feb 22 13:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b825cbcf827e3e53d1afaac13a36d7e386faca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:64:f5:0b:9e:28:d7:c7:23:29:fe:22:e2:
c6:58:09:9a:be:8b:4c:7b:45:a3:38:33:f3:31:b2:
59:ca:88:f7:78:36:cd:a2:df:b1:a2:6f:e7:6a:a7:
0a:c7:c5:a3:4b:a9:3b:70:41:99:09:df:a8:7f:ae:
11:20:9f:cf:e6:18:6d:90:ac:37:9c:aa:67:c0:e4:
66:4c:dc:f8:bd:c1:6b:4d:ab:7f:fd:5a:c7:97:1f:
49:c9:2e:82:9e:c4:fd:c6:02:96:59:46:7d:82:66:
36:6c:17:03:71:4a:11:cc:b2:ab:ef:2c:6a:fe:7f:
01:b7:f5:1b:60:3d:25:1e:3f:c0:ce:c3:a1:67:cf:
11:9b:6b:7f:4e:c1:ec:cb:a1:af:d7:8b:4b:44:a3:
bc:b4:11:2a:a6:23:29:f5:09:52:a0:12:4d:54:6f:
0a:50:56:9c:97:22:7f:71:3c:7a:58:e4:b8:61:5b:
4d:63:79:0a:9f:e4:1e:8b:bd:03:3b:7e:4c:d4:12:
b1:31:84:87:5b:ca:d8:fd:74:98:00:cf:68:47:53:
ca:1b:41:8d:d8:b9:bd:1d:53:b9:55:e5:99:75:d0:
d3:14:7f:37:28:6f:a0:d4:3b:d1:ea:f4:f9:5c:1d:
6a:90:bf:23:71:41:c8:f2:bf:35:08:3b:c9:5b:58:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:CB:CF:82:7E:3E:53:D1:AF:AA:C1:3A:36:D7:E3:86:FA:CA:83
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uCXLz4J-PlPRr6rBOjbX44b6yoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:fb:55:6e:de:73:5b:27:32:57:24:8a:70:da:b2:a7:7d:f3:
74:b9:d9:62:23:f8:bc:f0:bb:3e:54:e9:60:b1:b1:7a:3c:61:
de:5a:43:ab:80:5d:1f:f5:91:42:b5:ae:20:95:2e:7b:3a:96:
0b:e7:b5:20:57:af:3c:e4:6a:bb:58:ac:39:55:cf:2b:67:45:
d4:2e:d8:89:99:be:89:40:a1:45:d0:b8:5f:99:d0:59:c0:18:
db:19:ff:41:91:4d:d7:ca:71:52:6b:73:fa:9d:dc:9b:c1:0b:
26:4a:9a:07:00:14:db:f0:76:0b:15:08:5e:8e:52:8c:9b:22:
97:4c:af:13:a4:f7:c6:f1:03:4c:46:42:7e:1f:e9:c4:57:3e:
f5:8f:54:1a:4b:23:f1:a2:b7:3e:12:f9:78:03:a8:ba:ac:21:
3d:8a:e6:a9:86:57:09:d4:6d:c6:48:a4:02:03:a1:f7:d6:e4:
cf:c6:a7:07:b8:15:3b:97:f6:b0:ee:a5:d8:61:f3:d0:89:c3:
02:88:f4:69:b2:b2:e9:ae:66:4f:bb:d8:35:c6:1c:3b:b1:c3:
16:df:bc:6d:74:c9:37:22:83:87:8e:6a:17:96:08:b2:30:ef:
64:8e:78:47:15:18:f5:10:66:0e:b2:61:a2:06:f8:45:8e:b1:
73:c8:ca:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:06 2023 by rpki-client on console-ams.rpki-client.org