Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/kwBe9XGgFBj8HbABII0AAEnyLCA.roa
File: kwBe9XGgFBj8HbABII0AAEnyLCA.roa (raw, json)
Hash identifier: SrWMAQF0PGCbqvmvY8JO/aUThETcy9Q3AcbUo7BlEqc=
Subject key identifier: 93:00:5E:F5:71:A0:14:18:FC:1D:B0:01:20:8D:00:00:49:F2:2C:20
Certificate issuer: /CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Certificate serial: 0183B3A1B16B8D5E811A88875A0F0979A13A
Authority key identifier: 74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/kwBe9XGgFBj8HbABII0AAEnyLCA.roa
Signing time: Fri 07 Oct 2022 18:07:41 +0000
ROA not before: Fri 07 Oct 2022 18:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.74.222.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:a1:b1:6b:8d:5e:81:1a:88:87:5a:0f:09:79:a1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Validity
Not Before: Oct 7 18:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93005ef571a01418fc1db001208d000049f22c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:f6:02:e9:f8:ba:39:f6:7d:2b:13:d3:9c:
83:20:7e:8c:fc:d5:94:80:bf:77:53:a4:c1:be:57:
d2:09:18:81:69:be:1d:41:cb:cf:23:06:62:9e:5d:
b7:ad:e6:b1:92:0f:18:53:8d:fb:2f:ac:0d:17:05:
05:9e:78:a5:66:0b:67:ba:2d:64:3d:a7:33:01:4a:
3c:c4:d8:59:20:63:2c:38:3a:e2:da:c0:f5:ef:05:
83:ed:bc:c6:32:29:32:ef:1d:ba:45:d9:6d:ab:32:
1e:fe:2d:e3:1f:74:e4:dd:7a:25:21:eb:30:e5:71:
13:3e:91:07:62:04:99:8c:cd:e6:8b:48:a6:c7:65:
ca:4f:fc:21:c5:fc:52:cb:b9:ca:0c:b3:3d:26:de:
02:5e:0c:16:2e:c5:80:a6:61:ce:88:ef:b2:e0:60:
d7:01:5d:05:74:8c:4c:f2:b2:00:d4:b1:df:14:cf:
bf:6a:4a:4e:9a:6b:14:d3:8a:1c:6a:e6:2c:a0:42:
82:63:ad:97:00:53:2d:83:1f:09:09:a4:4f:37:c6:
8a:27:09:72:7d:66:20:42:76:75:4b:bb:33:7a:1d:
b4:48:02:82:eb:07:12:f9:64:9f:98:2c:48:1f:75:
e1:fa:bd:3a:a0:ff:47:ca:63:d9:f6:64:b0:d8:dd:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:5E:F5:71:A0:14:18:FC:1D:B0:01:20:8D:00:00:49:F2:2C:20
X509v3 Authority Key Identifier:
keyid:74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/kwBe9XGgFBj8HbABII0AAEnyLCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.222.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c6:30:41:c1:26:10:e7:4c:e7:11:c4:5c:03:c6:a1:6e:6e:
cd:d2:dc:07:d3:da:ae:e6:1b:a9:5e:42:89:77:07:73:5a:4a:
a2:79:66:ab:51:25:36:a9:65:a0:b3:dc:4a:15:70:72:3d:59:
c7:8a:bb:47:ea:c5:9e:27:82:b5:89:c6:3e:7d:fe:90:9a:c0:
6f:42:73:ac:e1:ec:69:bc:88:05:35:41:3a:34:d6:11:21:38:
af:8b:aa:be:0d:e9:74:cc:8d:ba:fa:56:46:c2:d8:08:46:4c:
86:89:75:45:27:f9:86:ce:18:34:f1:94:9b:af:fc:30:7d:5c:
83:0f:b0:61:e9:90:45:d0:fc:22:1e:d7:0f:b4:70:8c:f7:f7:
8c:58:8d:f6:34:d7:e9:ec:e4:2b:bf:ff:80:e8:d0:a1:2d:31:
25:6f:66:db:db:c7:53:1a:62:60:71:8b:9b:cc:95:74:56:81:
3a:ad:70:76:8c:6e:97:30:1a:a7:96:5b:de:4f:a0:a8:34:e4:
ab:7b:fc:0f:d3:de:f0:2b:58:bc:35:e7:50:f5:b5:6c:ea:87:
ea:8f:72:3a:67:ae:15:12:aa:55:7b:d0:97:f0:c5:33:01:e5:
db:6d:4d:3c:65:da:e6:c4:d5:77:f9:11:ab:2f:57:a2:80:f9:
6c:c1:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org