Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/kEYY898-Y8IlEjPkFGTwfIz8Fnk.roa
File: kEYY898-Y8IlEjPkFGTwfIz8Fnk.roa (raw, json)
Hash identifier: kqyKEcMPS6GXW/zhYLu6Z2rD/T0o8MUzjv5DnpeCMoI=
Subject key identifier: 90:46:18:F3:DF:3E:63:C2:25:12:33:E4:14:64:F0:7C:8C:FC:16:79
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 1BDB7B47
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/kEYY898-Y8IlEjPkFGTwfIz8Fnk.roa
Signing time: Sat 01 Jan 2022 02:00:52 +0000
ROA not before: Sat 01 Jan 2022 02:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199231
IP address blocks: 185.4.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467368775 (0x1bdb7b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jan 1 02:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=904618f3df3e63c2251233e41464f07c8cfc1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:eb:e4:f1:64:84:3a:58:42:3a:75:3c:63:
5a:ae:e1:ab:d2:10:a4:dd:57:5a:dc:84:47:22:62:
d1:40:96:78:66:f0:e8:52:99:05:f7:16:55:64:7d:
e9:bf:7d:1f:b3:dd:ee:83:7b:ee:cb:03:01:7d:0d:
17:be:77:57:07:b2:69:4b:5f:3b:bd:44:b9:7e:3e:
e5:0c:eb:ca:5e:13:71:91:22:b1:f3:d0:3e:d7:2c:
fe:9f:80:dc:7e:51:46:33:bc:3e:1a:9a:87:09:1f:
04:5c:e2:b0:87:a5:1f:81:19:9a:0b:df:f9:9a:e7:
52:31:2b:c4:51:11:ec:a0:02:dd:c6:b1:26:80:f5:
0d:26:88:b7:58:18:fe:83:81:ec:5f:99:50:a8:f8:
a4:2f:b8:f2:cf:bf:7c:07:8e:64:01:24:55:f7:f6:
12:d0:0e:ee:ee:58:a7:ca:c9:36:4b:af:55:d0:07:
b8:2c:de:b5:bc:0c:2c:0f:7e:99:e2:a0:e3:06:08:
73:50:65:2f:5d:e6:af:9e:30:84:c3:c6:34:ac:ec:
f9:1c:da:98:c6:6e:89:5d:0e:3c:23:01:7b:cb:9e:
f5:45:92:23:12:76:d5:82:d7:06:e4:b4:da:69:9c:
79:42:34:c7:d6:17:21:d9:4f:22:97:f0:3d:bf:ba:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:18:F3:DF:3E:63:C2:25:12:33:E4:14:64:F0:7C:8C:FC:16:79
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/kEYY898-Y8IlEjPkFGTwfIz8Fnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:4b:91:42:a2:c0:01:7d:50:d7:de:b1:e7:97:72:21:bd:b7:
af:5e:55:7e:ed:7b:c8:a0:c0:d9:6a:87:0f:49:69:08:f1:49:
28:22:23:3c:9c:d7:1f:8d:a7:0a:b3:0e:a4:86:1b:bb:c2:41:
19:44:e1:71:4c:b4:0f:9f:26:f5:2c:aa:4f:30:4e:c8:df:67:
dd:62:07:c9:de:b7:06:8b:c5:fc:15:b1:48:4d:20:c1:69:b1:
82:c1:35:88:c5:19:bf:0d:99:c9:57:76:08:13:86:12:1f:a8:
1d:b6:8f:21:a3:f2:a2:fd:57:f6:92:d4:92:1f:63:14:34:a2:
48:8a:b2:25:ea:a2:0d:3b:0d:37:94:a5:30:47:1e:af:63:22:
e0:d4:f2:a3:a4:1e:ee:38:5f:f0:cd:c4:cd:77:47:63:78:68:
ca:65:0f:3a:fc:34:d0:bb:be:05:46:b0:e0:37:d7:f4:8a:0c:
36:79:af:ce:3d:97:92:82:dc:47:f1:7e:d1:44:d1:e7:fc:e1:
f5:6e:48:24:9e:f3:56:0d:e9:b0:7e:37:f3:1c:e4:ca:41:ec:
e3:bc:1a:81:78:3c:ca:08:3e:a7:88:1a:41:f1:e5:a0:77:85:
d1:c1:25:2c:d0:58:27:d5:59:0d:a8:6b:38:df:48:ef:64:4f:
ea:2a:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:04 2024 by rpki-client on console-ams.rpki-client.org