Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KB_DBWy-RAiFgi23Evym_dFeR88.roa
File: KB_DBWy-RAiFgi23Evym_dFeR88.roa (raw, json)
Hash identifier: MuYQtyrOZV+ZIP0GiZch6IViSDeBJHOfLsX6nI2I1q0=
Subject key identifier: 28:1F:C3:05:6C:BE:44:08:85:82:2D:B7:12:FC:A6:FD:D1:5E:47:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C937CA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KB_DBWy-RAiFgi23Evym_dFeR88.roa
Signing time: Sat 01 Jan 2022 01:02:55 +0000
ROA not before: Sat 01 Jan 2022 01:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 193.8.186.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
193.8.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479427751 (0x1c937ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=281fc3056cbe440885822db712fca6fdd15e47cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:dd:9d:98:2a:db:2e:0d:a2:89:29:37:eb:f1:
ce:ff:5b:6e:43:6b:e2:00:f9:16:7b:7b:42:2e:4e:
9b:f0:91:98:bf:3e:76:06:9a:9f:7b:b7:63:9c:d0:
2f:b9:03:67:46:e6:75:bb:87:ec:25:b4:9d:0b:6f:
6f:d1:bf:33:b7:ff:af:77:68:d6:3b:30:d6:dc:9c:
d5:91:96:ae:f3:73:b7:01:d2:04:4f:33:00:36:c1:
c7:d9:67:9c:3e:36:b7:66:3d:21:be:1b:bc:75:27:
c2:5f:6f:c1:cd:1f:67:e5:12:0d:25:2d:ff:61:e4:
af:66:fe:13:ce:ba:8f:29:35:14:23:c5:b1:b3:e5:
86:8c:1c:54:3e:98:1f:b3:28:61:8c:f7:11:49:27:
3a:c0:6a:3a:cd:49:8c:bd:c9:49:70:7e:52:8d:65:
c7:a2:40:d7:84:65:13:b4:cb:d2:c1:1a:27:db:3b:
de:5d:50:52:b7:e4:55:ef:ac:bc:4b:df:32:9d:c4:
a2:fa:1f:06:8f:1a:52:30:3f:da:00:a9:22:b3:9f:
03:0e:e3:80:50:7d:b5:16:a4:cb:45:3b:80:d6:e0:
99:78:51:8f:07:19:1a:8d:e8:93:9d:be:5f:23:8d:
c1:9c:72:b6:62:fb:b7:08:91:8a:c7:00:c0:3f:a4:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1F:C3:05:6C:BE:44:08:85:82:2D:B7:12:FC:A6:FD:D1:5E:47:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KB_DBWy-RAiFgi23Evym_dFeR88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.14.0/23
193.8.184.0/22
Signature Algorithm: sha256WithRSAEncryption
78:8f:fa:0b:40:b7:4d:e8:5b:59:1a:7b:27:82:b3:c2:06:21:
8b:19:a6:0b:2e:35:02:17:05:2b:8d:ef:28:bb:fe:ce:2e:63:
47:3c:50:e9:33:97:ac:65:89:b6:d1:0a:d0:ec:94:f3:41:c6:
ca:a3:03:e2:22:e2:04:14:de:ed:0f:b9:7d:83:39:1b:70:36:
03:48:9f:68:1b:ac:79:e0:b0:a5:e1:c3:4d:7c:c9:2e:9d:e9:
67:27:d9:5c:54:36:30:2c:3f:e3:f7:b6:37:75:78:b5:ef:19:
9a:99:0b:51:23:05:a6:b1:f3:03:56:6e:a1:57:b6:50:f8:ff:
04:e9:47:bf:b1:0a:d8:f5:76:a2:48:1c:30:65:25:5b:08:0f:
3e:56:ad:a3:b8:4d:bc:b1:c0:a4:e4:00:54:9f:0b:2e:67:c8:
d5:dd:3e:df:4d:da:8e:da:b8:d3:a3:49:7a:f0:a5:2a:5e:cb:
86:87:50:e8:b0:fc:f3:57:88:94:39:f4:5f:90:be:d3:5e:10:
e5:aa:e6:9b:71:4a:49:af:d4:71:f0:5d:fa:1f:08:2a:54:5e:
14:48:6f:d5:71:a7:89:9c:cf:32:1a:79:ad:c9:3a:aa:a5:c9:
0b:8c:c1:b2:28:5c:7c:3a:36:c7:a0:0f:6f:2b:7b:e9:d5:87:
bd:fb:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org