Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/m9cY8mTyoQjpVhM6NQyllxYGGZw.roa
File: m9cY8mTyoQjpVhM6NQyllxYGGZw.roa (raw, json)
Hash identifier: mTmA0OVtcT+HOtOUwV8fbQxoAxocj3ex0Zxrt+UaAEE=
Subject key identifier: 9B:D7:18:F2:64:F2:A1:08:E9:56:13:3A:35:0C:A5:97:16:06:19:9C
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: CFA3B5
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/m9cY8mTyoQjpVhM6NQyllxYGGZw.roa
Signing time: Sun 15 May 2022 00:43:40 +0000
ROA not before: Sun 15 May 2022 00:43:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 92.43.168.0/24 maxlen: 24
92.43.168.0/23 maxlen: 23
92.43.169.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
92.43.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13607861 (0xcfa3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: May 15 00:43:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bd718f264f2a108e956133a350ca5971606199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:50:17:c5:ae:ad:fa:de:ef:bd:df:30:26:
81:18:84:35:f7:a4:09:e6:ec:e1:38:9d:88:0a:2d:
b2:1c:47:46:8d:27:8b:b2:4d:90:70:25:e0:ac:8e:
9c:98:4f:e3:4a:af:e4:5e:a2:a7:2c:76:34:d6:13:
78:32:00:d2:65:00:76:a9:da:92:b9:aa:c3:62:a9:
39:af:c6:fc:4f:41:fa:68:c0:e0:e8:d5:0d:53:ae:
26:85:41:12:a8:31:76:4c:d6:d4:de:5c:ab:fe:f4:
67:95:0a:80:d9:0c:7d:9f:6e:4d:3b:6e:27:a4:e5:
cb:48:32:16:32:27:49:03:c5:20:bb:c9:e2:1d:fd:
cf:6d:8a:c9:ea:bb:07:6e:1d:e2:e4:88:a7:04:be:
41:b5:b5:b7:10:72:e6:87:1c:81:22:c2:52:d0:4c:
d2:0c:8e:23:e1:b3:fc:fa:7e:e8:c1:ed:d1:42:23:
83:e4:37:88:e9:36:bb:49:64:13:58:48:7e:09:f7:
47:25:ad:c2:92:c7:47:c4:c6:a4:ae:15:ea:07:33:
04:c3:92:1e:90:83:18:a2:c2:5d:49:66:95:f5:28:
b0:e8:ef:af:17:d9:c9:38:db:ad:85:f2:68:a5:bf:
39:1e:4b:ba:f6:30:57:c1:93:b7:3d:98:0f:40:aa:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:18:F2:64:F2:A1:08:E9:56:13:3A:35:0C:A5:97:16:06:19:9C
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/m9cY8mTyoQjpVhM6NQyllxYGGZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0/23
92.43.171.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
ab:b6:46:7e:b6:d7:1f:af:d3:3b:26:a4:ad:49:16:20:68:29:
7f:2e:dd:6d:f2:4d:ad:5a:bf:d9:e6:34:23:36:c9:44:2e:0b:
f6:00:85:62:f1:71:bc:7c:6c:89:7e:9e:38:02:71:f2:f7:d0:
00:d0:53:6e:d8:be:4e:2e:7b:d4:9b:e0:22:34:84:67:cc:72:
0c:b4:a2:a4:f1:a5:55:69:db:cc:c5:8a:58:af:8b:42:59:b4:
06:b4:4d:ca:cb:3c:87:a8:bb:66:2c:4d:d6:41:47:81:1b:51:
b3:69:31:89:18:c0:19:36:13:bc:de:ec:4c:90:0e:c2:25:7d:
31:05:3f:21:7e:52:e9:c1:f4:7a:c5:a2:6c:1f:71:85:d2:31:
7e:c1:41:a2:25:e3:4e:ed:d4:16:80:d2:38:61:db:d7:10:13:
f1:10:f4:01:75:14:40:ca:ae:7d:0c:6e:d7:a5:f5:c5:90:14:
87:9f:cf:40:04:fc:d7:81:53:e0:50:d1:7f:43:a0:dd:30:d8:
ec:7f:f0:79:5a:62:47:e2:20:59:9f:2a:ee:2d:dc:5c:73:ad:
0b:24:ea:fc:43:66:a8:04:c1:c5:67:f3:ed:6e:f5:37:93:e5:
df:52:34:27:8c:e0:1e:cb:45:5c:df:f1:99:14:44:5a:c7:27:
df:af:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:07 2024 by rpki-client on console-fra.rpki-client.org