Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/22tZUu9JCYQDW__eXYA9LDuAPP4.roa
File: 22tZUu9JCYQDW__eXYA9LDuAPP4.roa (raw, json)
Hash identifier: AsSlBy6y/Cz3ByZVohFFGOxS1uFxn7RqaG4L8kWdLfU=
Subject key identifier: DB:6B:59:52:EF:49:09:84:03:5B:FF:DE:5D:80:3D:2C:3B:80:3C:FE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01824A70DA9E247E2F46D7B37F6381682171
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/22tZUu9JCYQDW__eXYA9LDuAPP4.roa
Signing time: Fri 29 Jul 2022 14:51:26 +0000
ROA not before: Fri 29 Jul 2022 14:51:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204168
IP address blocks: 92.52.204.0/22 maxlen: 22
185.38.124.0/22 maxlen: 22
185.93.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:70:da:9e:24:7e:2f:46:d7:b3:7f:63:81:68:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 14:51:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db6b5952ef490984035bffde5d803d2c3b803cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:43:02:c2:25:e0:d3:45:f4:9f:f2:69:ea:
92:47:e9:55:9f:5b:bd:6e:8b:9f:db:5e:c1:6b:1b:
bc:59:fa:a8:ca:9a:59:21:3f:ff:2e:b6:32:86:b1:
e5:59:c7:43:15:77:d2:1e:c6:cb:9e:da:4d:bf:07:
de:8c:84:86:10:0a:93:2e:46:a0:d7:4b:88:fe:82:
bb:be:b4:95:d0:79:45:ee:a4:be:29:24:94:be:5a:
18:17:9b:fc:2f:1c:4d:70:87:3d:c9:6c:4b:1a:2f:
2d:75:e1:92:6d:b6:35:4f:c4:a5:a9:b8:aa:27:fa:
bd:cc:99:df:53:22:17:a6:23:67:d3:5a:32:32:39:
68:d0:1a:24:7f:f7:07:7b:36:eb:e7:15:f2:dc:18:
a3:7b:10:41:ce:73:ae:e0:76:97:6c:98:9c:02:7d:
99:d2:bd:d7:f6:30:e2:4c:d1:e5:ac:84:4f:a3:df:
e7:48:04:e2:5c:67:98:cd:d5:fa:cc:b7:ac:84:d2:
35:84:ab:0d:55:2f:bb:69:87:58:bd:93:08:08:31:
cb:f5:6f:73:47:24:0a:cd:a9:a5:a1:ed:80:80:92:
f4:0a:f8:f9:cc:70:57:46:32:56:b4:3b:19:cd:32:
ea:bb:f0:84:86:cb:60:f8:8b:c9:fa:96:d1:6e:8d:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:59:52:EF:49:09:84:03:5B:FF:DE:5D:80:3D:2C:3B:80:3C:FE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/22tZUu9JCYQDW__eXYA9LDuAPP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.204.0/22
185.38.124.0/22
185.93.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:d9:59:32:62:2e:31:f2:20:23:5e:6a:a6:d0:45:6e:bd:3d:
13:6e:09:9a:1f:04:2f:61:b7:d6:b2:06:81:f0:e7:e1:0b:58:
72:9e:03:71:0a:66:65:0e:df:9c:f5:67:19:c6:3f:2d:08:c2:
5d:63:8e:2c:00:fb:f3:d2:63:03:25:55:48:c5:1e:f8:6c:f9:
2b:97:5d:8f:91:e5:c2:c0:9f:82:12:c8:e6:f1:6e:3b:d3:ba:
fa:6f:ad:bc:14:00:ef:f1:d6:fd:42:90:e2:56:9a:59:53:c2:
65:7b:c9:7d:71:43:b0:1c:e9:54:7a:8f:85:2d:ce:cb:9a:e6:
62:e5:9e:66:74:2c:e8:c9:8d:2a:da:6e:32:0c:cc:22:bc:90:
16:41:f4:5c:93:e7:95:ff:8d:0f:b6:9f:6c:99:9f:e1:14:18:
03:0c:38:e5:64:57:5b:7c:6c:77:c3:6d:e0:92:40:7f:4c:e4:
22:99:57:d7:e0:6a:e7:7d:bc:5a:c2:fb:13:ed:e3:6e:b0:1a:
77:1e:ff:ca:f3:8f:f6:50:96:25:a1:0d:1e:a1:13:11:73:75:
b3:46:ed:ff:78:bd:4c:b5:41:70:e5:97:2f:c7:a3:39:05:a6:
bd:55:88:e7:8e:b6:41:0a:47:34:6b:56:df:36:b1:6c:1e:a8:
16:f3:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-ams.rpki-client.org