Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/0SJlSjqbSRW2_waZSWLTJkSNhkE.roa
File: 0SJlSjqbSRW2_waZSWLTJkSNhkE.roa (raw, json)
Hash identifier: WpA+ZpSf8p8vIg+aZRGghihIbgYWNje/fSOMilsqE88=
Subject key identifier: D1:22:65:4A:3A:9B:49:15:B6:FF:06:99:49:62:D3:26:44:8D:86:41
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 04546A
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/0SJlSjqbSRW2_waZSWLTJkSNhkE.roa
Signing time: Tue 15 Feb 2022 15:17:44 +0000
ROA not before: Tue 15 Feb 2022 15:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 92.43.168.0/24 maxlen: 24
92.43.168.0/23 maxlen: 23
92.43.170.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
92.43.169.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
92.43.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283754 (0x4546a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Feb 15 15:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d122654a3a9b4915b6ff06994962d326448d8641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:0e:1f:da:9d:44:49:f5:9c:80:40:3f:d9:
7a:6c:c8:60:df:54:f3:c2:be:16:bb:e9:ef:76:57:
d3:a1:2a:27:78:2f:14:2d:f3:d9:03:0c:a7:ca:8c:
34:f4:ee:d9:dd:db:68:0a:fd:2d:98:e9:c3:d0:aa:
99:f2:ea:e0:3c:83:9a:9c:de:4c:f9:62:07:a7:87:
e5:cb:45:22:de:98:d1:b5:63:e3:be:0b:54:2e:ef:
78:95:e0:e8:11:40:3f:c3:e6:4c:7b:04:7c:d5:ef:
39:53:dd:69:7c:3f:74:0c:b2:9b:85:81:c5:c8:58:
19:9a:ad:23:c7:be:9e:26:c4:d8:cf:1e:90:a1:78:
6b:26:6b:ee:d6:f0:89:c8:a8:2e:81:fc:fd:b8:55:
9f:87:c9:dd:27:8e:a4:6e:12:94:b3:4a:88:ee:f5:
81:5b:4f:e7:2e:af:60:a9:00:1b:fc:bd:fd:ba:b4:
cf:6f:4e:d9:5f:35:92:64:2d:b6:9c:3d:7b:fc:6f:
fe:33:3f:bf:a5:43:3a:8e:2a:c5:ea:bb:a9:4c:9a:
f9:f2:17:e6:0c:06:13:5f:5a:98:d9:49:68:ee:ac:
cd:24:59:cd:f9:dd:35:c3:76:cd:cd:f6:a3:25:23:
30:59:0d:19:2a:72:f8:ef:3e:0b:72:58:0b:d4:b9:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:65:4A:3A:9B:49:15:B6:FF:06:99:49:62:D3:26:44:8D:86:41
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/0SJlSjqbSRW2_waZSWLTJkSNhkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
4d:bb:2d:1c:1e:7b:1f:80:d6:f1:ea:2e:f2:0a:4d:fa:9f:62:
d8:65:5c:67:86:b5:af:29:55:48:8e:c9:62:6e:6f:af:cd:61:
07:3d:c2:d2:56:35:a8:ee:a1:5e:8b:e7:90:b9:d2:9a:10:fd:
53:1e:29:9b:4d:ae:30:f2:f6:c3:92:ce:f5:69:d9:33:98:19:
4d:d1:f2:fe:55:54:99:1a:08:21:4e:cd:f7:c6:11:61:97:08:
85:6e:de:64:e1:5b:ca:fc:00:9c:0d:b2:f3:ef:6f:15:53:27:
cb:7d:11:56:6d:f0:dd:c3:60:6f:51:9a:96:8e:14:07:76:d7:
ed:a5:81:c0:39:f7:3a:93:c6:2a:e8:6a:4b:f0:a3:76:74:d4:
a0:fd:c8:32:b2:42:df:07:eb:16:7e:7d:77:9b:f1:50:82:77:
c8:3c:fa:f9:82:fc:c0:b3:21:d2:f8:10:67:af:b8:72:ac:41:
b0:dc:51:75:1c:dd:87:2d:e7:c9:3e:43:0c:98:8e:de:92:32:
12:54:97:0b:56:e4:42:fa:63:5e:c4:63:cf:86:ea:b5:db:16:
0a:23:b6:9a:d7:dc:c8:2c:d8:7e:78:55:1f:19:d4:a0:ee:a6:
ec:da:47:e9:8b:41:54:ea:8f:f8:11:3d:76:ea:d1:4b:22:e4:
42:20:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:17 2025 by rpki-client