Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KBL_wxkzmbjDNnFqjyqSSnCy-mM.roa
File: KBL_wxkzmbjDNnFqjyqSSnCy-mM.roa (raw, json)
Hash identifier: F251bwnHoJK7bOuZwXPvy0i9prNaCfDtdvxiXwJ4T2U=
Subject key identifier: 28:12:FF:C3:19:33:99:B8:C3:36:71:6A:8F:2A:92:4A:70:B2:FA:63
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018233D21999EBC0767C172197BB1ABB6894
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KBL_wxkzmbjDNnFqjyqSSnCy-mM.roa
Signing time: Mon 25 Jul 2022 05:26:23 +0000
ROA not before: Mon 25 Jul 2022 05:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 85.121.14.0/23 maxlen: 23
80.96.10.0/24 maxlen: 24
85.120.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:33:d2:19:99:eb:c0:76:7c:17:21:97:bb:1a:bb:68:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 25 05:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2812ffc3193399b8c336716a8f2a924a70b2fa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:c5:43:28:c8:b0:9a:21:b8:58:07:cd:35:
06:01:54:ee:c4:93:ae:ea:9b:bb:ee:13:ff:00:1f:
07:9f:0d:94:fc:d9:ef:13:36:ce:0b:f5:21:2a:63:
5d:da:86:cf:aa:d6:2a:21:0c:2a:19:9c:cb:11:e2:
41:03:13:68:69:f1:df:26:a5:0a:99:5a:0a:37:9f:
85:ec:a7:06:5a:40:5a:3c:49:3a:71:fe:a4:96:79:
68:f9:52:99:e6:a1:b3:d0:e6:b2:c4:8b:ea:d8:a9:
ce:87:bc:b6:e2:78:0c:c2:3d:cf:dc:1d:69:e6:e3:
93:ed:de:fc:32:e3:a0:61:0a:94:30:0b:c8:86:6d:
5a:0a:19:3c:dd:83:05:aa:95:35:15:41:5a:27:02:
e7:95:56:ae:01:1c:11:8d:b6:83:b6:f4:7d:dd:14:
00:14:95:93:e5:09:8d:c5:3b:e3:ce:db:a4:af:9f:
89:b3:8c:9c:8a:22:a2:af:7e:f3:9a:f2:69:0a:b7:
14:80:c0:76:3d:bc:5e:c0:f1:7f:f8:47:3c:8f:19:
6a:76:6b:56:9b:8b:fe:c9:a7:8f:2b:08:b7:37:4f:
70:de:77:12:d8:24:d5:f5:fc:9b:30:ee:1f:b9:40:
fc:0d:93:cb:73:2f:2e:fd:63:ae:50:bb:61:8d:cf:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:FF:C3:19:33:99:B8:C3:36:71:6A:8F:2A:92:4A:70:B2:FA:63
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KBL_wxkzmbjDNnFqjyqSSnCy-mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.10.0/24
85.120.144.0/24
85.121.14.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a8:9b:df:7f:07:6f:41:bd:b4:47:b2:66:86:cd:7e:b6:b2:
9e:f6:d8:37:14:2d:ad:b2:51:20:08:cc:95:d0:bb:c5:98:33:
74:87:64:06:f2:fa:25:c3:c6:19:16:a9:e1:2c:7c:d7:af:33:
6c:52:7e:91:10:51:8e:58:f0:32:40:90:a9:35:54:64:2e:10:
92:82:8f:dc:1b:1f:28:c4:c6:62:a9:e3:db:fd:39:58:e8:0d:
1a:e4:c7:1b:c7:a1:83:5d:c4:8a:ed:0b:16:5a:cc:f4:01:ca:
d6:5a:8c:26:84:52:82:05:1d:3d:1c:1e:7e:82:91:6b:c1:5f:
fc:a2:75:ad:3c:8a:61:98:cd:4a:2b:28:31:80:05:31:63:e7:
33:8f:03:e3:0a:0a:b1:ca:a9:46:61:ea:84:c9:54:60:bc:49:
02:0c:4a:0e:3b:94:67:57:3e:52:6d:47:7d:b5:c7:0d:bb:34:
4c:46:e6:ff:e5:04:69:99:7f:1e:87:99:e2:9b:dc:c1:91:1a:
66:68:95:a6:8e:27:c1:58:82:12:3e:78:ed:37:5d:ab:f5:1e:
33:05:3b:48:2a:22:20:af:fa:91:27:05:03:af:dc:ef:57:af:
76:f7:49:8e:b0:b3:d3:ed:bf:7d:1c:9c:65:42:fc:1e:27:b4:
1a:a3:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org