Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/97O10EQL3rF-ABEimmKz4nlnK50.roa
File: 97O10EQL3rF-ABEimmKz4nlnK50.roa (raw, json)
Hash identifier: 7MPkkSMZgKI+10zc50zfHcgNaqnaCphZi4qUWyhmx8g=
Subject key identifier: F7:B3:B5:D0:44:0B:DE:B1:7E:00:11:22:9A:62:B3:E2:79:67:2B:9D
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 018369D5E52D2DD850CDB2FE9530DB9C695A
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/97O10EQL3rF-ABEimmKz4nlnK50.roa
Signing time: Fri 23 Sep 2022 10:12:49 +0000
ROA not before: Fri 23 Sep 2022 10:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201966
IP address blocks: 185.92.219.0/24 maxlen: 24
185.92.218.0/24 maxlen: 24
185.92.217.0/24 maxlen: 24
185.92.216.0/24 maxlen: 24
94.229.84.0/23 maxlen: 23
94.229.83.0/24 maxlen: 24
2a05:2c7:c000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:d5:e5:2d:2d:d8:50:cd:b2:fe:95:30:db:9c:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Sep 23 10:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7b3b5d0440bdeb17e0011229a62b3e279672b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:0b:f4:34:b8:cb:ba:32:17:12:2d:34:90:
69:b4:39:65:2e:7f:4c:51:1b:0c:82:65:81:c9:b3:
1d:8f:97:34:06:4d:c0:d6:82:dc:3e:73:6b:aa:46:
04:20:2d:1f:bc:f1:ad:26:8a:22:fc:9f:ec:a9:c1:
83:7c:41:53:81:73:24:81:d5:fa:4c:38:03:fe:fa:
75:67:6b:ae:a2:3e:23:08:0f:46:73:08:ad:35:42:
a3:98:11:7c:ea:98:7a:cd:37:6e:f1:77:05:e4:99:
69:0a:23:e5:5f:9e:f7:e8:e2:e4:48:71:ff:24:07:
44:ba:c7:96:fa:23:54:59:3b:0b:53:47:32:bc:f0:
73:c7:48:17:e8:fc:d7:cc:7c:ae:3a:2f:79:3d:57:
67:b1:f7:f6:3a:aa:27:b3:97:dd:74:bf:45:02:c0:
55:46:32:99:fa:d1:74:be:33:1d:ef:3f:94:dc:36:
30:ef:ce:03:99:8c:bd:b7:ed:c6:3a:e8:6b:79:32:
da:04:af:7d:5b:1b:62:f2:d2:76:95:83:a8:92:50:
cb:67:65:0d:b8:5a:e7:1c:69:c3:9b:45:0b:71:56:
b8:e2:53:cf:5b:8f:06:bc:9a:01:74:d5:96:09:88:
38:83:48:eb:7d:26:d2:88:19:0c:5f:8b:2c:fc:93:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:B5:D0:44:0B:DE:B1:7E:00:11:22:9A:62:B3:E2:79:67:2B:9D
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/97O10EQL3rF-ABEimmKz4nlnK50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.83.0-94.229.85.255
185.92.216.0/22
IPv6:
2a05:2c7:c000::/34
Signature Algorithm: sha256WithRSAEncryption
83:2f:31:49:b5:b5:41:86:a0:72:90:23:b8:42:a3:3d:eb:42:
cf:1d:c4:bf:f5:08:ee:24:3f:59:5b:aa:93:34:76:7c:78:68:
88:de:74:4f:3a:e2:41:28:bd:88:ab:7f:6f:92:65:38:d3:71:
e2:f7:00:1e:c1:e6:d4:81:4e:0e:0f:ec:96:6b:b0:02:73:71:
2a:3c:84:9d:65:e9:b0:f6:bd:62:21:dc:b1:72:c7:e5:f2:7c:
bb:c2:b8:bc:9f:37:a3:3d:9f:5f:32:de:41:1c:00:12:4f:d4:
a9:74:4b:a5:67:a2:84:72:00:7d:58:be:86:04:f4:a3:88:3d:
72:b7:f4:5e:01:9e:90:ef:1a:0c:15:5c:fc:dc:ff:f3:2c:fe:
85:01:0c:3c:b0:8b:03:bd:22:17:7b:60:64:ac:5b:5b:10:94:
31:cb:39:a6:ce:70:08:85:6c:7f:67:48:75:98:2b:9a:c6:a0:
16:b6:11:53:56:83:d4:62:44:e0:0f:e0:1c:89:ea:1a:0c:5b:
c7:27:04:e2:ef:a6:1d:cc:3e:a5:9f:69:76:1a:d4:5f:a6:7b:
89:44:df:a3:46:27:28:c0:50:ff:91:f1:ca:51:56:16:8f:87:
a1:5b:c4:c5:a2:93:75:a5:0b:fd:be:dc:7c:05:ac:78:0f:79:
84:42:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org