Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/NI2vURNg_8ET3Wlz8eWLnUEOOrI.roa
File: NI2vURNg_8ET3Wlz8eWLnUEOOrI.roa (raw, json)
Hash identifier: CIn1rjSOiGGpVepzcTvmshWdKJR1mfBxxAjQelutOos=
Subject key identifier: 34:8D:AF:51:13:60:FF:C1:13:DD:69:73:F1:E5:8B:9D:41:0E:3A:B2
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 0182F37F9B8E5F838019670375A4FA136099
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/NI2vURNg_8ET3Wlz8eWLnUEOOrI.roa
Signing time: Wed 31 Aug 2022 10:43:22 +0000
ROA not before: Wed 31 Aug 2022 10:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44465
IP address blocks: 92.43.170.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:7f:9b:8e:5f:83:80:19:67:03:75:a4:fa:13:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Aug 31 10:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=348daf511360ffc113dd6973f1e58b9d410e3ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:0a:ad:27:31:a4:21:45:8c:ef:e4:31:84:
f4:58:c3:bd:91:85:0c:2c:c6:7d:08:4b:1b:1d:cc:
73:a8:02:1c:16:99:8e:4c:1e:a8:bd:98:c9:67:57:
75:21:6e:c9:c0:42:1f:74:dc:a9:4d:c3:de:86:c4:
0c:c2:79:ce:d7:07:7d:1d:a2:ff:e9:1d:c2:9b:9b:
7f:fb:33:a3:86:45:bf:59:8f:e8:1d:b1:5e:ec:43:
18:d3:bb:84:ef:58:8e:53:44:dc:a6:40:ad:ac:1d:
8d:4d:aa:14:aa:95:a9:19:3b:7e:3a:57:1e:0f:19:
45:29:76:48:50:b9:c2:e6:42:62:1c:e7:83:a8:24:
13:11:14:ed:34:0b:35:b5:44:9a:5b:1f:55:be:1a:
53:79:b1:50:17:f8:db:fa:88:45:17:62:f1:df:f0:
16:7c:a1:86:4e:66:72:b4:82:85:9c:26:4d:1c:0b:
39:49:cf:f5:2e:ca:cd:dd:6b:f4:b6:6e:d0:88:ad:
17:9e:83:55:ce:c1:10:d2:28:41:bd:4f:32:6a:76:
49:33:d4:96:9b:c8:b1:7d:2a:69:2a:e0:99:8f:0f:
20:94:10:6a:f6:c9:a0:9a:82:53:54:b1:2f:1b:1a:
90:ab:34:59:e9:26:d9:e2:f7:97:2f:20:e7:16:05:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:AF:51:13:60:FF:C1:13:DD:69:73:F1:E5:8B:9D:41:0E:3A:B2
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/NI2vURNg_8ET3Wlz8eWLnUEOOrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.170.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
25:22:52:89:aa:43:35:6b:49:43:fb:06:8c:9e:ff:6f:a7:50:
7d:9e:06:10:d0:71:03:df:51:24:85:fa:8c:58:9f:ff:ad:94:
92:c2:c1:fd:74:8f:34:d1:6a:80:5f:a3:a9:d3:be:aa:ed:5a:
eb:56:0b:f5:13:5e:f2:6e:7c:20:8d:6b:a1:9e:8e:fd:4c:e8:
eb:4b:d1:15:12:ab:51:15:8b:d9:65:54:30:3d:1c:8a:3d:e4:
57:1f:48:82:7f:5d:7f:15:22:f6:9b:4b:5c:bc:93:b3:91:5e:
7c:c3:c5:5f:4e:eb:32:fe:b8:5c:05:5f:c4:b1:44:50:f2:a2:
1e:99:6c:7f:4c:e0:92:63:2c:03:f6:ab:87:6e:af:4e:18:58:
b7:48:cf:9e:ff:91:8f:5f:b3:7f:9d:31:c8:07:d2:e9:35:d9:
65:48:37:8f:80:ff:05:b1:ad:c2:2b:0e:58:ac:15:1e:cd:65:
9b:6b:d5:de:4f:1b:f7:2f:82:13:96:12:56:c8:23:e0:e1:a0:
c3:8e:26:30:78:10:6b:17:70:f7:f4:07:76:14:7f:e4:9b:17:
05:0f:31:ca:c4:4e:82:be:52:18:d6:1c:e8:35:be:2f:8a:e4:
64:0b:14:db:78:31:de:15:8f:54:48:cc:87:4c:39:cd:ab:af:
32:91:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:07 2024 by rpki-client on console-fra.rpki-client.org