Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/kf_kjvW7GHmEM7jwROWOHck2O5A.roa
File: kf_kjvW7GHmEM7jwROWOHck2O5A.roa (raw, json)
Hash identifier: cFJEreLmSbUv8ygH9kwLXspfM9/8EV+7GJx43bpN5Fs=
Subject key identifier: 91:FF:E4:8E:F5:BB:18:79:84:33:B8:F0:44:E5:8E:1D:C9:36:3B:90
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 011E89
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/kf_kjvW7GHmEM7jwROWOHck2O5A.roa
Signing time: Wed 01 Jun 2022 11:41:22 +0000
ROA not before: Wed 01 Jun 2022 11:41:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21346
IP address blocks: 195.22.158.0/24 maxlen: 24
193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73353 (0x11e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jun 1 11:41:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ffe48ef5bb18798433b8f044e58e1dc9363b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:6f:59:06:f5:7f:ce:e8:29:cb:b7:55:1e:
37:18:8e:de:de:97:9c:87:b2:05:10:53:01:f7:b9:
3d:68:af:fc:0f:b6:a0:95:dc:40:f0:00:e9:d0:1e:
d8:54:10:18:84:5f:c8:65:b8:62:1a:e7:2d:c0:69:
4f:aa:03:5e:01:0b:67:90:3a:21:90:a1:e8:91:52:
2c:17:9a:cb:d8:54:52:8a:b2:9f:83:df:95:08:e6:
32:26:86:4f:9a:d1:38:e4:5c:da:fe:78:d8:b3:0f:
6c:cc:91:09:63:33:39:f9:9b:2e:1d:94:90:fc:e0:
bb:e6:28:ff:a8:04:20:2d:28:9f:bb:94:62:58:2d:
95:ff:74:39:f3:34:52:8b:b0:70:39:28:39:e9:99:
19:8f:bb:be:37:26:f7:d9:e7:e8:af:aa:0d:6c:f3:
6b:21:5f:09:0e:ce:df:ec:a2:a2:c1:ca:9a:eb:c1:
5d:ea:b5:8b:7a:09:78:46:ef:d4:ac:58:d2:5e:38:
46:92:bb:24:4f:bb:ba:09:06:05:28:0e:5f:a1:32:
52:2f:96:5a:cc:5c:01:ee:33:96:16:9d:c9:2a:41:
3e:63:36:d5:bb:6a:5d:79:9d:bf:ef:33:14:54:80:
e8:2b:ec:50:ed:3b:24:84:53:8f:7b:dc:13:84:f9:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FF:E4:8E:F5:BB:18:79:84:33:B8:F0:44:E5:8E:1D:C9:36:3B:90
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/kf_kjvW7GHmEM7jwROWOHck2O5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
53:26:fc:19:ab:4a:05:1e:ac:7f:12:f6:0b:98:3b:ad:b1:9b:
b2:b6:8f:04:26:40:08:3a:0c:47:15:55:9d:55:f1:a5:5d:eb:
e9:ff:9e:dc:b6:1c:50:71:17:6f:6d:8c:51:ab:d3:41:50:7a:
50:ea:a4:b4:12:d8:2f:1e:5d:00:a5:88:f0:a6:7d:7d:a0:47:
a3:83:6c:cd:ca:d9:6a:00:10:8c:fa:9c:71:63:f2:c7:3c:67:
b1:3e:12:4b:18:b9:00:b7:18:60:38:19:0e:71:b5:ef:27:60:
57:d7:87:b9:6b:01:c8:c4:2e:1c:97:61:9f:2d:e3:29:2f:15:
1d:1b:c2:ee:b5:ec:f6:ba:70:aa:dd:e9:b9:e3:9d:e0:29:bc:
6d:86:ca:1c:30:1c:53:04:70:fd:d0:5c:92:71:08:d6:3b:7f:
12:89:76:cb:75:a7:c2:37:f2:ee:1c:8d:17:34:20:71:fb:3e:
0f:b4:fc:3f:43:42:99:88:d0:be:c0:00:a4:75:f6:9a:26:7b:
24:28:fc:f2:30:09:3f:25:53:e6:88:59:a6:06:ef:e7:d7:76:
2d:d1:88:96:eb:a6:8c:0b:3e:2f:b8:9d:f5:74:23:3b:10:cd:
d4:40:fa:b4:05:20:07:03:68:fd:a4:26:a1:d7:02:f3:0d:9b:
3a:e3:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:54 2023 by rpki-client on console-ams.rpki-client.org