Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/KehQZegHIxaIpcjcTsN8YBOIs3Y.roa
File: KehQZegHIxaIpcjcTsN8YBOIs3Y.roa (raw, json)
Hash identifier: nlFAG9awbNIVjNI41IenDoxLg/0VYtL1SFYAwUgxZWw=
Subject key identifier: 29:E8:50:65:E8:07:23:16:88:A5:C8:DC:4E:C3:7C:60:13:88:B3:76
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0B52B9F1
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/KehQZegHIxaIpcjcTsN8YBOIs3Y.roa
Signing time: Wed 27 Apr 2022 10:20:36 +0000
ROA not before: Wed 27 Apr 2022 10:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 85.239.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189970929 (0xb52b9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Apr 27 10:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29e85065e807231688a5c8dc4ec37c601388b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:f9:c4:3c:83:96:d2:0e:1d:34:73:62:29:
36:d9:aa:38:e4:50:1d:7f:9a:07:e7:3a:82:a7:32:
cc:f5:1e:59:a9:88:2d:83:49:9d:c2:79:57:a8:94:
59:ed:bc:35:79:a2:fe:81:a4:0c:17:bc:42:e5:24:
91:8c:fa:f0:7d:20:2e:5e:0a:22:fd:63:b8:fa:13:
c3:ac:29:57:1d:53:55:79:12:52:ab:95:61:2f:de:
e1:75:33:47:0c:ce:be:10:7b:57:b9:15:c3:e0:90:
b9:97:90:fc:e9:cf:b3:aa:19:25:fc:cd:b9:bd:f7:
1a:a0:41:5d:85:d7:d3:44:27:25:01:40:43:95:d0:
be:f0:2f:6e:51:d9:55:6f:08:2c:83:46:fb:66:23:
18:bd:ff:1b:25:40:83:43:30:55:54:14:a0:af:56:
3b:95:f9:7f:85:43:b3:01:9e:d9:ac:de:e1:ad:b7:
99:7e:a5:f7:39:1b:d0:63:b9:c0:7a:72:ec:5b:01:
98:a7:e2:6d:0e:44:33:6f:86:27:dc:aa:ca:1b:67:
f2:b7:b7:ef:e5:7f:33:b6:af:4c:71:f3:8b:e3:9a:
3c:e9:fc:1e:3a:b2:98:85:2d:fc:bc:b1:25:bd:48:
00:9d:9d:e2:dd:ae:9d:83:31:c5:f0:15:93:61:c8:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E8:50:65:E8:07:23:16:88:A5:C8:DC:4E:C3:7C:60:13:88:B3:76
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/KehQZegHIxaIpcjcTsN8YBOIs3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
91:11:41:86:cc:61:c4:c5:c4:0a:12:c6:6b:b5:90:bb:56:2f:
10:1d:fd:9e:d4:4d:4f:23:f8:2b:3e:48:55:4d:ee:2d:d6:49:
49:16:94:44:67:20:24:2c:83:85:77:e5:89:ef:50:a2:9a:28:
8b:bc:a7:fe:46:f2:a8:b8:1a:e0:b4:cd:47:b2:72:a4:65:6f:
8d:07:a9:a5:78:93:0c:7b:a9:95:ce:ef:20:1d:19:37:5c:57:
ae:90:bb:09:72:6a:f0:bc:32:15:f0:ff:a4:4a:32:53:13:c6:
ee:9a:08:2d:43:3c:11:f4:5b:77:66:04:e3:51:24:af:56:84:
85:e2:ae:f0:f4:b4:a9:a0:6f:b9:8b:82:5b:94:65:d4:d5:36:
36:c5:54:c1:06:1f:15:c7:4e:ec:18:97:f6:7f:dd:da:e9:b6:
b5:63:59:d8:99:46:dd:85:10:45:7d:48:f5:bd:14:10:7b:80:
4f:75:57:20:db:ab:e8:ac:72:f6:72:5f:83:33:ae:c3:91:a6:
bf:95:33:e0:5d:81:5b:69:d8:c1:49:81:13:0e:46:fb:97:e6:
c1:5c:85:13:31:6d:9c:13:43:15:ac:81:e1:c3:98:8f:fc:9f:
62:70:92:60:86:27:8c:ed:16:b7:d4:19:71:fc:8a:60:86:60:
8f:9f:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org