Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/KrcrDh1vmSltxfdKtQLu5pn5f0A.roa
File: KrcrDh1vmSltxfdKtQLu5pn5f0A.roa (raw, json)
Hash identifier: LrEHLdU2/e0KorOZ4ByUptxd+TAn38bel24zeI56vNQ=
Subject key identifier: 2A:B7:2B:0E:1D:6F:99:29:6D:C5:F7:4A:B5:02:EE:E6:99:F9:7F:40
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 03DDEC5E
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/KrcrDh1vmSltxfdKtQLu5pn5f0A.roa
Signing time: Sat 01 Jan 2022 09:57:59 +0000
ROA not before: Sat 01 Jan 2022 09:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 185.166.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64875614 (0x3ddec5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jan 1 09:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab72b0e1d6f99296dc5f74ab502eee699f97f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:81:cb:3c:fb:87:f2:25:81:e9:ed:8c:20:
01:5d:81:db:d6:20:78:e8:66:80:37:09:4d:1f:50:
27:bf:d7:e9:5a:22:16:c2:50:3e:93:6b:3b:67:02:
61:2f:2c:97:80:dd:87:5b:c4:d7:7e:2e:b6:41:b1:
9f:53:b7:95:e1:e4:b5:02:a1:e6:8f:05:7a:9c:81:
ad:d7:92:4d:d7:f9:e6:d7:17:e9:0f:1b:74:fc:3a:
e6:be:6c:31:dc:48:2a:d4:b2:e3:75:0d:be:32:9e:
7e:e1:7f:e5:f2:6d:3f:db:34:7f:cb:a1:59:9b:44:
75:e2:8c:7a:0d:f9:f6:5a:19:7e:d7:28:a9:54:ae:
95:3f:e0:1e:69:90:5e:ad:65:e8:e6:cc:a7:79:d1:
a7:35:44:62:08:10:c0:d1:21:46:15:77:75:a7:13:
4c:4a:79:1f:db:99:25:51:99:df:8b:a0:c2:8b:d2:
d5:70:ce:1d:81:37:e8:ba:52:c5:85:60:35:3b:f1:
c7:87:61:de:cb:d2:6b:f3:dd:50:73:c6:02:23:cd:
61:96:d5:06:eb:44:5c:a1:0f:6a:a4:85:90:ee:f9:
d4:61:d3:ef:a3:c9:9b:66:e9:a6:ea:e8:49:32:54:
ff:78:26:51:da:53:9d:3e:f8:7e:28:ae:91:c6:2e:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:2B:0E:1D:6F:99:29:6D:C5:F7:4A:B5:02:EE:E6:99:F9:7F:40
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/KrcrDh1vmSltxfdKtQLu5pn5f0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:72:b6:17:3e:24:1c:e7:be:ba:fd:e0:c7:44:ff:d9:e0:fc:
ee:1d:a3:3d:83:96:32:1e:b8:ab:d3:ef:47:6e:c1:77:47:97:
95:77:58:e8:74:67:3a:05:44:25:bc:6a:35:93:ea:fb:76:5e:
cd:f8:6b:43:76:31:03:ba:f9:72:8e:3a:80:20:3c:05:1f:02:
f9:a1:49:c8:04:eb:37:2f:9e:c9:ba:70:b2:eb:78:bd:4d:7a:
9f:1b:7f:a8:30:36:41:61:65:1d:e0:c0:1f:d1:f8:c2:bd:ca:
8e:6c:97:e4:cd:dc:9b:3d:1d:f0:0d:26:e2:fc:8e:ef:83:a5:
0e:bc:e8:f6:31:bb:92:17:fc:a3:90:ba:6b:ca:9b:f1:06:5b:
31:58:0d:9d:31:7d:fa:87:26:30:91:48:19:e6:37:43:ed:6f:
56:ee:cd:33:61:6e:c6:54:65:ca:5d:f4:c9:dd:35:1b:71:ad:
9d:5a:22:c2:21:a6:ae:18:c7:6e:21:31:cb:60:02:69:72:0f:
97:e0:58:dc:82:2c:79:26:fc:54:40:2f:83:36:47:7f:08:0d:
99:93:88:3e:65:04:45:f5:61:a9:e2:52:cb:f5:0c:03:98:f7:
ca:c9:b4:07:c6:00:33:41:2d:02:2f:6b:63:47:19:00:70:57:
be:c8:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org