Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JKks89b47vxEztxKxy7Pd-RlpM8.roa
File: JKks89b47vxEztxKxy7Pd-RlpM8.roa (raw, json)
Hash identifier: DlPhHKVvVSVxaHxCNc/DWKYY7LI7lSSPbytJbWxiYbs=
Subject key identifier: 24:A9:2C:F3:D6:F8:EE:FC:44:CE:DC:4A:C7:2E:CF:77:E4:65:A4:CF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0704ACCA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JKks89b47vxEztxKxy7Pd-RlpM8.roa
Signing time: Sat 01 Jan 2022 03:54:12 +0000
ROA not before: Sat 01 Jan 2022 03:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204875
IP address blocks: 185.200.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117746890 (0x704acca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24a92cf3d6f8eefc44cedc4ac72ecf77e465a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4c:c4:a7:79:e5:94:31:d3:eb:ef:7e:55:01:
82:06:fd:44:35:9f:de:ae:c8:34:52:c4:40:5d:75:
33:ab:8f:ef:b9:b3:7d:7a:7d:0e:b1:5c:2d:43:95:
55:bb:05:c7:9b:7c:62:a9:ec:f2:c0:82:dd:30:cd:
cf:2a:75:29:65:ab:b0:50:14:6a:a0:7d:b8:7b:f4:
6d:c9:53:44:df:ab:01:42:1f:69:b2:00:a3:2a:b6:
0b:ca:42:30:eb:b2:3c:ce:02:6f:37:5d:74:54:a1:
76:8a:8a:ee:b0:ab:8d:a7:dd:ea:8f:c6:6c:db:e2:
04:66:a2:66:aa:e2:c0:a8:5c:d1:13:ca:4e:a9:ef:
04:0c:3c:eb:42:fd:49:a1:ae:88:0c:ef:08:9e:ec:
67:90:3b:63:85:ab:19:0a:4f:42:47:90:ff:14:5d:
c9:22:59:d3:f3:13:fb:b3:7f:35:00:fc:ab:90:0b:
11:96:8e:30:c1:3f:30:65:86:79:e4:19:7b:15:d3:
0b:d7:50:7a:6c:a6:c7:d6:48:32:cb:95:21:09:5c:
2d:31:8c:f6:5a:cc:06:cc:3a:42:6b:81:b3:30:0e:
5c:79:39:bf:d2:52:2f:fa:8a:5a:b4:e0:db:6d:32:
88:28:26:82:51:08:89:9a:a5:d5:3e:4e:88:4c:13:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:2C:F3:D6:F8:EE:FC:44:CE:DC:4A:C7:2E:CF:77:E4:65:A4:CF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JKks89b47vxEztxKxy7Pd-RlpM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.60.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ba:71:25:e5:8f:70:fb:17:99:25:34:04:2c:d3:cd:dd:ad:
d7:4e:c5:f8:c1:98:14:6e:d9:ae:38:a6:84:65:83:dc:57:e6:
49:3a:95:63:13:19:28:93:f5:5a:52:ed:61:ce:7c:3b:7f:a7:
b2:b7:bb:a9:12:e5:74:c7:7c:df:c1:72:69:eb:5e:f5:26:11:
83:84:cf:be:e9:14:f3:d7:70:92:cf:c6:10:2c:43:ff:3a:a3:
c2:b8:16:71:0b:01:c0:58:07:90:3f:1b:52:89:9e:28:cd:b2:
32:8b:cb:0f:8f:b0:bd:85:4d:e2:af:5d:f1:20:05:03:d2:e4:
e1:6e:f0:49:d1:ac:68:21:16:cb:c1:75:55:90:38:11:2d:69:
26:00:7a:47:f9:26:37:89:69:52:e8:7e:ee:01:e3:3d:aa:9d:
ec:a5:89:b6:53:ce:0d:b5:00:56:1c:27:6b:06:0e:7f:1c:f0:
2f:21:e6:82:8b:e7:4a:b9:2a:1a:3c:34:c3:0f:a1:99:ba:01:
d3:7c:39:c7:e8:73:34:3a:d0:3c:9d:85:6e:d7:31:f9:f7:b3:
e8:92:06:7e:ae:a8:39:21:44:55:38:fa:8c:b5:74:21:ac:30:
f8:64:49:b7:26:a7:fc:32:20:2f:61:f2:01:76:29:fd:43:b5:
6f:dd:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org