Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/kzuiKFX5R0HvXr14TEPBMRxnSTI.roa
File: kzuiKFX5R0HvXr14TEPBMRxnSTI.roa (raw, json)
Hash identifier: NyZFBpsI6ma96bCvJhVhyIHJww17vUC1uEBtVz1wPkQ=
Subject key identifier: 93:3B:A2:28:55:F9:47:41:EF:5E:BD:78:4C:43:C1:31:1C:67:49:32
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 03B35A55
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/kzuiKFX5R0HvXr14TEPBMRxnSTI.roa
Signing time: Sat 01 Jan 2022 05:56:54 +0000
ROA not before: Sat 01 Jan 2022 05:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21005
IP address blocks: 185.110.237.0/24 maxlen: 24
185.110.236.0/22 maxlen: 22
185.110.236.0/24 maxlen: 24
185.110.239.0/24 maxlen: 24
185.110.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62085717 (0x3b35a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 1 05:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=933ba22855f94741ef5ebd784c43c1311c674932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:1f:92:a6:4c:f4:00:7c:be:f0:71:0f:77:
73:96:66:73:bc:68:09:a0:5f:d3:d3:83:a1:9a:15:
8e:96:38:4f:fd:d4:63:e9:c4:6a:9b:8e:3a:df:23:
ac:9d:7f:85:a2:c2:f6:40:83:31:6b:42:89:e7:9f:
d7:0f:eb:2c:58:c3:7b:71:ea:79:e1:39:ee:57:ae:
b7:5b:49:b5:db:da:d8:31:3f:bf:9b:c0:1f:76:9a:
d4:f3:14:6f:a8:cd:09:29:d7:7e:9d:69:54:2d:bd:
9e:07:87:1d:bf:e6:00:85:43:17:f0:5a:b4:22:05:
ef:23:a5:e2:a5:ae:5d:17:bb:5b:01:37:a6:b9:3f:
18:fe:47:69:bd:e0:4f:0b:3d:b8:2b:6b:20:73:10:
27:8a:d5:d9:f9:e6:9f:3b:64:43:94:10:b8:7c:69:
5e:2f:2c:42:f6:59:4c:a3:b7:c2:db:77:4e:f5:06:
0a:17:a3:a6:81:d2:0d:bd:d6:b2:dd:3c:4b:9e:be:
fd:1b:f5:22:d9:49:da:6c:c9:3c:c1:a0:be:a9:05:
ca:81:44:aa:f6:a7:bb:63:5f:5b:ca:92:91:e5:6c:
cd:0e:43:3d:89:8a:7c:91:60:85:cb:08:60:c5:b4:
0c:e5:ff:d1:14:e5:4a:ae:8d:03:21:a2:0f:cb:82:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3B:A2:28:55:F9:47:41:EF:5E:BD:78:4C:43:C1:31:1C:67:49:32
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/kzuiKFX5R0HvXr14TEPBMRxnSTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
75:0b:ea:47:31:51:5f:ce:d7:c9:86:5d:0b:42:c8:1d:ca:f0:
5d:5c:b3:6e:20:bc:5a:5b:b3:c5:6c:f3:99:3b:14:83:83:f1:
d5:40:01:39:34:6c:18:7a:63:98:34:5f:46:bf:3d:0d:80:44:
62:3b:fa:bc:b6:1e:98:bd:3f:54:0a:c9:c4:17:62:57:d2:87:
32:d3:27:5e:1e:c1:8d:fa:97:76:b8:99:88:e2:49:e6:c9:9b:
8e:92:1d:2a:d4:48:42:7e:52:22:2e:cf:55:f0:67:96:bc:b5:
b1:44:65:ba:b1:66:e4:de:f9:67:09:31:46:cb:d6:7b:bb:d7:
9e:a9:a6:5c:3b:3b:82:92:2d:b9:80:65:9f:a6:3c:68:04:67:
0c:3f:8a:cc:3d:4b:cc:b9:9f:0f:32:75:28:a7:85:a7:7d:fc:
95:e1:a7:1d:e8:d1:08:60:53:df:a8:9a:d4:94:33:de:af:32:
9e:6c:fc:93:33:d2:45:f1:d9:22:49:71:3b:fe:8f:5e:20:34:
06:e7:0b:90:cd:d8:05:e3:7c:c7:f9:bf:26:59:5d:f1:15:ca:
b1:66:47:bc:a6:f2:b9:d0:ee:64:87:5b:37:72:3f:ea:06:d8:
a3:36:df:f1:e5:3b:bd:77:c4:83:98:11:98:72:29:0d:91:8b:
92:d3:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:18 2024 by rpki-client on console-ams.rpki-client.org