Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/kX4a5i_vNNU2wZih1CKK0T6wtrc.roa
File: kX4a5i_vNNU2wZih1CKK0T6wtrc.roa (raw, json)
Hash identifier: NI7TPl6rX9TwSuk1AVMQwzBoieA9/IEOeuzPIBUlyZw=
Subject key identifier: 91:7E:1A:E6:2F:EF:34:D5:36:C1:98:A1:D4:22:8A:D1:3E:B0:B6:B7
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 0182B337CFFD2505BF35ED4AC98CC7D43941
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/kX4a5i_vNNU2wZih1CKK0T6wtrc.roa
Signing time: Thu 18 Aug 2022 23:09:15 +0000
ROA not before: Thu 18 Aug 2022 23:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56642
IP address blocks: 92.118.152.0/23 maxlen: 23
92.118.154.0/23 maxlen: 23
185.155.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b3:37:cf:fd:25:05:bf:35:ed:4a:c9:8c:c7:d4:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Aug 18 23:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917e1ae62fef34d536c198a1d4228ad13eb0b6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:85:32:56:9d:c1:cb:91:50:00:9a:13:a1:
70:43:76:06:d4:65:d8:e9:e3:5c:aa:14:38:1a:4b:
7e:56:92:77:01:d0:c1:13:e2:55:48:c8:35:41:cf:
1a:c7:d7:7f:bc:75:75:2b:0f:fc:7d:11:3e:58:ff:
40:8f:fa:c8:61:c7:78:9a:87:86:97:a9:32:0c:d1:
c9:52:ad:9e:c1:7c:19:44:58:35:fb:cf:b5:2a:ad:
cf:c9:76:f1:1d:07:88:3c:38:74:36:d0:44:eb:41:
07:bf:8e:3b:93:4e:bd:e4:ce:09:c8:d9:22:7b:5b:
0a:a8:43:a0:61:6d:82:56:1e:8a:5b:00:9f:ff:3b:
ec:66:39:c3:05:bc:06:4c:2c:9b:f0:17:4f:3a:0d:
d1:4c:10:f0:d3:24:e8:73:ce:7e:46:3f:18:27:e6:
b5:e7:2a:31:0b:64:ae:99:56:8d:c1:f3:ef:47:ef:
d2:1b:dc:e3:ac:22:a1:f4:8e:3c:c0:0a:a9:09:37:
01:d7:cb:04:06:83:48:bb:64:ee:4f:05:b0:e8:5d:
c8:12:39:6b:6b:71:1d:69:cd:94:a3:e2:3f:e7:ec:
05:b8:a6:17:48:ff:1e:65:62:44:e0:e5:21:46:0b:
15:c8:58:46:54:70:f3:0b:d0:b2:0c:c6:da:48:9c:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:1A:E6:2F:EF:34:D5:36:C1:98:A1:D4:22:8A:D1:3E:B0:B6:B7
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/kX4a5i_vNNU2wZih1CKK0T6wtrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.152.0/22
185.155.248.0/22
Signature Algorithm: sha256WithRSAEncryption
16:66:a9:29:54:4d:41:93:ad:d5:90:c3:37:e6:9c:2a:c2:99:
28:10:ba:86:36:29:c9:95:8b:d5:fe:b2:73:e2:b4:a9:76:a7:
3d:59:49:5e:d7:c8:bb:da:cd:f1:3d:77:21:6b:c8:67:d3:2f:
f8:27:ab:1e:a3:1e:ee:08:1a:81:fb:37:9e:d7:d6:be:59:5c:
65:41:ec:74:db:6c:ab:f1:8b:2a:d8:c2:74:51:56:1c:f3:b5:
f8:c3:f3:9c:24:03:17:77:6e:f5:7e:c2:e0:f3:c3:9f:22:42:
ef:0a:f7:a4:de:12:08:20:4f:b6:b9:4f:c8:9c:84:57:35:e0:
db:e0:38:ac:b6:60:cc:92:92:ce:2f:5a:f3:31:0d:2f:8a:6f:
88:e5:71:99:64:ba:12:4f:9d:74:1e:b7:31:07:28:69:14:45:
0a:b8:13:16:c8:93:bf:76:87:34:3c:c2:0b:83:de:17:87:ab:
d9:d8:00:51:d8:b4:1f:bd:5e:51:04:7a:a0:04:ad:42:58:9d:
0d:16:1a:cf:bb:1f:db:86:9c:1d:d6:e6:d3:80:a7:6a:fc:f9:
de:13:5b:a9:65:6c:ba:5d:2e:4d:a8:18:b4:56:f1:e6:df:a9:
18:3e:15:15:8f:09:63:99:c8:0b:e1:62:e8:ac:80:c6:02:b5:
06:2b:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:58 2023 by rpki-client on console-ams.rpki-client.org