Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KsDvHrwPUbcyjrbQUXXRBZfstVg.roa
File: KsDvHrwPUbcyjrbQUXXRBZfstVg.roa (raw, json)
Hash identifier: pcEpUBt65rV53+BRDEWCPe1QCJHaA28UCJMMpUyGY+g=
Subject key identifier: 2A:C0:EF:1E:BC:0F:51:B7:32:8E:B6:D0:51:75:D1:05:97:EC:B5:58
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 041F4F2C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KsDvHrwPUbcyjrbQUXXRBZfstVg.roa
Signing time: Sat 01 Jan 2022 12:04:50 +0000
ROA not before: Sat 01 Jan 2022 12:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2895
IP address blocks: 185.103.100.0/22 maxlen: 22
147.45.0.0/16 maxlen: 16
193.233.4.0/24 maxlen: 24
193.233.0.0/22 maxlen: 22
193.233.10.0/23 maxlen: 23
193.233.8.0/24 maxlen: 24
2001:640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69160748 (0x41f4f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ac0ef1ebc0f51b7328eb6d05175d10597ecb558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:89:18:9b:e7:56:d1:71:9c:73:de:6b:d2:
57:4b:5b:da:c6:11:e4:86:6e:40:23:b2:a1:76:bd:
91:a9:ac:29:55:15:00:45:04:2d:4a:d2:cd:a3:73:
de:00:1d:d5:44:64:90:89:8a:c4:39:34:93:93:4a:
ca:78:ce:e4:79:28:bb:88:76:85:4d:8b:3f:da:ae:
66:f6:b0:33:b1:8a:68:e9:26:18:d8:4c:20:51:a8:
77:20:88:78:06:d1:d8:f0:ae:88:cb:7e:06:2e:48:
c0:97:dd:77:ff:01:2f:ec:7a:e9:1f:3b:62:50:55:
5d:2f:d3:53:93:78:c6:29:93:f2:52:d0:b6:03:22:
bb:16:72:44:c5:0d:52:de:84:f9:23:38:95:62:b0:
e2:b9:b1:a2:71:78:11:06:85:81:ed:c8:e8:41:7c:
ca:ac:92:2d:56:74:1e:5f:e9:97:8f:97:51:84:fa:
e1:1c:9f:85:3d:98:2d:6e:d2:c5:9c:b2:4a:55:44:
a4:6f:7b:35:7c:23:20:98:54:5b:05:cf:71:a2:70:
49:55:a3:39:7f:ea:5c:0c:ae:ac:0e:de:a2:a2:39:
ca:73:49:40:8f:c9:e2:7e:0e:bc:af:b2:19:b3:31:
b9:dd:50:f5:63:82:8f:ff:fa:14:40:3e:a8:94:ba:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:EF:1E:BC:0F:51:B7:32:8E:B6:D0:51:75:D1:05:97:EC:B5:58
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KsDvHrwPUbcyjrbQUXXRBZfstVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.0.0/16
185.103.100.0/22
193.233.0.0-193.233.4.255
193.233.8.0/24
193.233.10.0/23
IPv6:
2001:640::/32
Signature Algorithm: sha256WithRSAEncryption
74:27:86:f4:46:72:7c:12:0a:25:7d:cb:ae:09:d0:22:12:78:
a3:7a:10:8d:20:1f:3c:e2:77:22:94:14:dd:48:e5:a2:f0:73:
39:e0:21:46:16:01:90:93:bd:76:66:27:fc:62:49:8b:b8:e5:
dd:35:f8:54:c4:f4:e9:f1:1d:19:4c:a1:e6:95:e9:98:2d:b2:
93:cc:82:01:c0:e3:20:2d:c3:91:46:ba:5f:6f:1b:a6:ed:3b:
17:72:e9:84:9b:ec:e7:05:0e:f5:cc:5d:ef:9d:a6:9d:e5:15:
10:6d:15:3b:0b:93:c2:b0:57:8e:e6:bc:50:f0:e8:ef:50:3b:
27:c8:0a:d2:9e:10:31:3b:6e:e7:2f:5c:87:e7:c4:d5:b5:a8:
01:38:60:0c:22:89:87:bf:6b:a1:03:b3:06:21:e8:ba:62:70:
7e:a5:72:24:03:9b:cc:5d:d3:27:d4:9a:df:96:ac:9a:d5:e8:
25:23:f0:74:23:b8:03:c0:cd:f9:b1:41:21:5e:51:00:3d:26:
1d:b6:4f:b9:c4:45:78:a3:ae:4f:e1:aa:94:17:6d:5c:e4:2f:
06:94:35:48:da:88:37:07:71:cc:17:59:2e:0e:61:71:0d:5b:
67:b0:4a:5e:68:6c:32:b3:f8:c5:5e:83:b0:0f:b5:91:2f:bb:
fe:2b:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org