Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KMrMk7zMTPHmRj53AXPyVwqxfKA.roa
File: KMrMk7zMTPHmRj53AXPyVwqxfKA.roa (raw, json)
Hash identifier: Ym/P11GbBNbUJKBpf1Ifbt1ryBO4EqFNtY2DuK0WjxQ=
Subject key identifier: 28:CA:CC:93:BC:CC:4C:F1:E6:46:3E:77:01:73:F2:57:0A:B1:7C:A0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AED9C29
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KMrMk7zMTPHmRj53AXPyVwqxfKA.roa
Signing time: Sat 01 Jan 2022 13:57:51 +0000
ROA not before: Sat 01 Jan 2022 13:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31165
IP address blocks: 81.168.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720215081 (0x2aed9c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28cacc93bccc4cf1e6463e770173f2570ab17ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:ae:ca:b6:e6:b2:77:67:07:9e:e2:14:10:
ea:79:36:5b:23:45:93:58:63:75:67:0a:d9:b6:86:
78:e5:da:90:e8:55:ed:e4:58:50:24:88:42:7a:59:
84:c0:5f:58:6d:9b:99:79:aa:18:7b:b6:d2:60:61:
6e:bd:84:71:b4:b4:3d:f1:cc:a3:6e:54:19:d6:69:
4d:66:e6:51:8f:c8:33:a1:3a:81:b0:67:ff:b2:d1:
d9:ee:7a:ca:04:e6:3d:da:56:ed:98:09:b7:12:5a:
75:ef:7b:70:1a:a1:85:f0:89:ba:c8:37:5e:8e:bf:
30:e9:5f:90:75:61:6c:39:20:45:f3:86:02:bd:2b:
e1:12:ad:0d:d1:f8:1f:6b:6b:7d:c5:da:1a:3c:a6:
6c:f4:eb:f9:25:39:84:06:a7:a6:98:44:0d:d4:80:
2d:ad:2a:93:1e:6f:ae:b5:8b:97:6e:fa:e2:2b:5f:
e1:61:f8:76:33:b6:a0:da:c0:26:14:39:c5:8f:52:
1e:8c:14:b6:e8:17:f3:5f:a0:f0:3d:7a:08:14:6e:
c4:55:e8:0e:e9:e0:93:e8:73:16:db:c1:1a:c0:5a:
99:2e:09:91:6b:97:4d:02:9b:52:a2:fe:85:80:07:
b7:7b:3f:8c:01:e4:47:cf:53:3b:30:d8:46:2c:61:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:CC:93:BC:CC:4C:F1:E6:46:3E:77:01:73:F2:57:0A:B1:7C:A0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KMrMk7zMTPHmRj53AXPyVwqxfKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:93:83:39:54:45:c9:36:80:87:cc:75:8d:84:82:89:2c:18:
03:d7:81:fa:b9:76:d7:58:7e:21:6c:8b:c2:fe:70:14:24:73:
2b:6c:94:ac:99:a1:e6:b8:47:68:42:9d:e1:c5:bb:67:f5:04:
2f:18:6f:09:7b:76:c8:f3:66:26:81:a3:b1:b2:a7:df:5e:a2:
e3:1a:11:3c:e1:90:71:44:ad:95:53:c9:71:ad:36:a3:48:94:
41:b3:a1:42:05:fa:07:e2:c8:59:4e:7b:d1:8f:72:e0:a8:69:
11:31:55:9d:83:d6:0e:78:28:fb:44:66:80:1b:17:06:45:16:
8b:55:eb:96:22:6b:fd:ef:7b:95:bc:45:26:ca:8c:da:23:0b:
f5:c6:91:c9:dc:a6:4b:28:bd:a7:ec:be:28:77:27:fb:65:d6:
a1:d1:58:0b:41:88:8f:29:d7:c0:ae:3d:8a:73:18:d1:3b:60:
84:6e:b8:4e:e3:a8:29:21:75:05:41:b0:64:c8:27:9b:e7:23:
86:7c:6e:fb:b5:91:9c:e6:3c:53:ed:b8:24:ac:cb:81:fc:06:
94:e6:6d:51:d4:1d:50:d2:1b:67:b9:b7:5f:19:2e:5a:18:0e:
a8:11:1c:13:48:25:21:33:7c:ae:0a:91:b7:33:11:48:e9:1e:
64:7e:28:00
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKu2cKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTc1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjhjYWNjOTNiY2Nj
NGNmMWU2NDYzZTc3MDE3M2YyNTcwYWIxN2NhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALH2rsq25rJ3Zwee4hQQ6nk2WyNFk1hjdWcK2baGeOXakOhV
7eRYUCSIQnpZhMBfWG2bmXmqGHu20mBhbr2EcbS0PfHMo25UGdZpTWbmUY/IM6E6
gbBn/7LR2e56ygTmPdpW7ZgJtxJade97cBqhhfCJusg3Xo6/MOlfkHVhbDkgRfOG
Ar0r4RKtDdH4H2trfcXaGjymbPTr+SU5hAanpphEDdSALa0qkx5vrrWLl2764itf
4WH4djO2oNrAJhQ5xY9SHowUtugX81+g8D16CBRuxFXoDungk+hzFtvBGsBamS4J
kWuXTQKbUqL+hYAHt3s/jAHkR89TOzDYRixhROECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQoysyTvMxM8eZGPncBc/JXCrF8oDAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L0tNck1rN3pNVFBIbVJqNTNBWFB5VndxeGZLQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFGo/jANBgkqhkiG9w0BAQsFAAOC
AQEAKpODOVRFyTaAh8x1jYSCiSwYA9eB+rl211h+IWyLwv5wFCRzK2yUrJmh5rhH
aEKd4cW7Z/UELxhvCXt2yPNmJoGjsbKn316i4xoRPOGQcUStlVPJca02o0iUQbOh
QgX6B+LIWU570Y9y4KhpETFVnYPWDngo+0RmgBsXBkUWi1XrliJr/e97lbxFJsqM
2iML9caRydymSyi9p+y+KHcn+2XWodFYC0GIjynXwK49inMY0TtghG64TuOoKSF1
BUGwZMgnm+cjhnxu+7WRnOY8U+24JKzLgfwGlOZtUdQdUNIbZ7m3XxkuWhgOqBEc
E0glITN8rgqRtzMRSOkeZH4oAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org