Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/vyM63m4d7IbSy8RLTuhdeMm7hW0.roa
File: vyM63m4d7IbSy8RLTuhdeMm7hW0.roa (raw, json)
Hash identifier: 4yp6NXI1N1S09eLdo6YIf5RuPgiZs5dKql8K0AxSf3A=
Subject key identifier: BF:23:3A:DE:6E:1D:EC:86:D2:CB:C4:4B:4E:E8:5D:78:C9:BB:85:6D
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 01826877935A884916EFB637B25B3C35557B
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/vyM63m4d7IbSy8RLTuhdeMm7hW0.roa
Signing time: Thu 04 Aug 2022 10:47:23 +0000
ROA not before: Thu 04 Aug 2022 10:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44942
IP address blocks: 92.63.224.0/20 maxlen: 20
185.114.116.0/22 maxlen: 22
185.157.216.0/22 maxlen: 22
92.246.104.0/22 maxlen: 22
92.246.108.0/22 maxlen: 22
92.246.111.0/24 maxlen: 24
92.246.108.0/24 maxlen: 24
92.246.110.0/24 maxlen: 24
92.246.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:77:93:5a:88:49:16:ef:b6:37:b2:5b:3c:35:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Aug 4 10:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf233ade6e1dec86d2cbc44b4ee85d78c9bb856d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:8e:68:47:8d:04:65:10:5f:4a:f2:d5:69:
ae:6a:c1:69:68:38:39:82:38:99:ed:71:5a:7c:4b:
01:7f:34:6a:cf:48:c7:3d:c8:93:b2:be:c7:db:06:
ad:db:ed:64:ad:33:ae:ca:a8:c8:d8:44:e9:50:4a:
e4:eb:50:5c:16:1a:2d:62:92:56:1f:67:95:22:37:
47:38:87:aa:f8:5d:fe:27:64:c9:ed:e2:92:e1:08:
f9:1a:1e:08:d8:37:43:73:8d:d5:01:3b:67:f1:4f:
fc:ff:15:e5:4f:91:3b:11:1e:c7:86:1f:03:d1:b7:
72:e2:48:0c:01:68:ea:e3:31:c5:84:a4:da:5e:94:
36:85:a9:cd:23:eb:96:aa:49:16:b3:41:06:ad:1c:
03:83:75:88:43:2c:3b:4d:13:72:61:e6:12:a9:ca:
30:71:0e:95:7c:4b:d7:ea:b4:1f:ef:47:da:0b:c2:
73:63:a3:79:97:d9:f3:fc:aa:8a:5b:75:ad:ff:79:
c3:af:af:9c:8e:f2:c5:71:0f:bd:d2:fc:ef:ae:9d:
61:eb:98:69:fd:19:0f:3a:03:33:88:1a:ff:95:61:
c6:24:82:2f:ad:83:12:fa:46:65:a2:dd:a4:8d:d4:
5b:15:fc:cb:d2:9f:dd:0b:37:9f:a5:9c:65:a1:a5:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:3A:DE:6E:1D:EC:86:D2:CB:C4:4B:4E:E8:5D:78:C9:BB:85:6D
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/vyM63m4d7IbSy8RLTuhdeMm7hW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.224.0/20
92.246.104.0/21
185.114.116.0/22
185.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
42:50:77:db:31:50:7b:63:9c:82:ba:7b:59:3e:b5:50:b2:c5:
f5:db:ef:93:3d:8b:7e:e2:ff:8d:99:ff:1c:90:12:6b:db:1e:
5d:f4:26:d4:d2:9f:c0:c8:61:cd:a5:09:81:93:96:a5:30:89:
e2:c9:41:d4:29:2f:d3:3d:ee:76:0c:47:26:5d:39:a6:f7:ff:
87:80:44:8a:37:f8:0e:a1:1b:b0:57:f7:26:5c:28:10:e1:b7:
eb:39:93:25:9e:bb:42:11:41:b0:9e:65:e4:c2:8c:7a:08:bc:
2d:cb:0b:44:53:46:34:11:b9:10:83:b2:98:30:c9:96:99:75:
76:50:c8:0d:00:11:ef:e7:ae:d2:bc:44:66:fd:c5:c7:38:59:
d4:fa:c9:65:80:42:c5:87:97:92:61:6b:f2:77:b4:d5:0d:f0:
83:a6:f1:06:9c:84:83:a0:4b:a4:a0:54:14:54:9c:aa:34:fe:
b7:6c:c5:0d:39:55:b5:14:24:64:cf:87:e6:dd:2b:f4:0e:4d:
34:ee:86:6c:94:4d:ea:2e:fc:1c:d3:db:30:45:51:0b:9e:e6:
6b:f1:7c:be:d3:72:9b:3b:e8:c2:8a:af:46:32:e4:21:a2:aa:
8f:4b:03:43:dd:02:e3:ea:05:84:e7:4a:c7:0f:09:2d:b2:c0:
8b:db:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:53 2024 by rpki-client on console-ams.rpki-client.org