Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/elabQCdZIfROmAlDkvgQT8rk6CI.roa
File: elabQCdZIfROmAlDkvgQT8rk6CI.roa (raw, json)
Hash identifier: BK4Ytg9WteAvvPKMtoIuOTMY2ZIWhKNCdEOnvKQ2CbI=
Subject key identifier: 7A:56:9B:40:27:59:21:F4:4E:98:09:43:92:F8:10:4F:CA:E4:E8:22
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 018554A3D638A2F869AEA8A807535BB627D6
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/elabQCdZIfROmAlDkvgQT8rk6CI.roa
Signing time: Tue 27 Dec 2022 17:31:41 +0000
ROA not before: Tue 27 Dec 2022 17:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197579
IP address blocks: 185.92.232.0/22 maxlen: 22
91.223.113.0/24 maxlen: 24
2a13:6b40::/32 maxlen: 32
2a13:6b40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:a3:d6:38:a2:f8:69:ae:a8:a8:07:53:5b:b6:27:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Dec 27 17:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a569b40275921f44e98094392f8104fcae4e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:7b:f8:18:c3:79:d1:0a:df:e1:f6:6d:eb:
57:01:d9:99:79:49:82:02:86:bb:28:c7:83:97:44:
48:20:b2:15:c2:d9:6a:60:3e:62:b3:10:dc:fa:51:
16:ed:26:e3:e3:2a:21:e6:d6:2b:89:94:bc:2f:29:
29:b6:5f:0a:4c:fb:bb:d9:3d:93:af:aa:ed:99:0c:
82:15:c2:70:c6:c3:48:fe:51:a5:92:5e:77:bb:8e:
8f:ee:f7:3c:4e:fc:46:39:da:66:23:65:80:15:23:
ab:52:a9:a0:d6:84:ed:f7:bc:b4:54:3e:73:1d:a4:
dd:58:0a:ee:32:64:74:16:de:fe:cd:b1:46:80:d9:
d5:df:15:f0:25:78:49:da:52:4c:a1:41:d7:2b:1d:
0c:97:69:b7:cb:d0:fb:5a:98:d8:0f:9d:12:bd:53:
05:79:a3:94:fc:9e:cf:de:58:14:75:bd:75:fb:63:
04:e4:ed:ef:4c:78:de:5a:a0:d9:a5:f8:00:9a:f0:
9d:2c:1c:10:9b:89:63:c4:44:b3:f5:a5:ed:63:4b:
a7:bb:d8:87:43:5b:e8:4d:32:09:81:4a:2f:dc:4f:
1f:ea:96:f2:e9:26:d4:15:44:bb:9a:18:e4:c9:2a:
11:de:8a:0e:ea:44:95:6d:4b:db:1d:4c:4f:95:87:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:9B:40:27:59:21:F4:4E:98:09:43:92:F8:10:4F:CA:E4:E8:22
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/elabQCdZIfROmAlDkvgQT8rk6CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.113.0/24
185.92.232.0/22
IPv6:
2a13:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
51:50:01:fc:1e:95:b5:cd:e6:48:1e:30:3c:f8:3f:4b:78:1d:
07:61:0a:ad:32:4b:45:81:4e:78:79:5b:2e:b1:97:fb:87:70:
40:64:0d:50:8e:58:a3:38:92:80:34:9a:ad:77:a9:98:ed:4c:
cf:32:52:76:f6:2f:25:fb:8f:be:f7:5c:b8:e8:46:b4:9f:b1:
1d:62:15:ba:1c:2a:15:2f:83:4a:e4:a4:ee:85:d3:cc:a7:8e:
bc:1c:bd:e1:6d:7f:5d:81:ab:56:7d:4f:9d:ef:21:e9:2a:e4:
e0:08:47:9a:a3:63:35:56:d7:16:c9:20:ae:13:ed:e3:20:49:
26:f1:91:a1:49:eb:97:5d:8b:0f:3e:f2:38:3f:eb:f0:c7:52:
72:41:97:7b:9a:c9:e0:32:67:76:19:ac:6f:54:20:72:a8:f7:
ac:90:93:72:da:93:78:16:7d:89:42:3a:b0:cc:e7:3e:e8:4b:
1c:56:4f:4a:b0:3b:4d:35:76:9f:35:41:fe:be:bc:b8:a8:15:
c9:db:1f:54:ba:af:3a:9f:8c:5d:d7:7e:e6:7f:68:dc:47:4b:
d4:ec:8d:db:fe:a2:10:de:e4:6f:ae:88:82:1b:f9:af:49:16:
f8:86:ab:d7:29:e2:fb:a4:97:9f:c7:68:27:65:06:42:3a:1e:
47:50:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:34 2024 by rpki-client on console-fra.rpki-client.org