Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KooNQFIpywsMJ63CwYraenpO494.roa
File: KooNQFIpywsMJ63CwYraenpO494.roa (raw, json)
Hash identifier: pOtKpXJWbMUUB1+lrsIwy3mBfPMN1rXc7gtj20ktvaY=
Subject key identifier: 2A:8A:0D:40:52:29:CB:0B:0C:27:AD:C2:C1:8A:DA:7A:7A:4E:E3:DE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01821170EF261FD9706BD66870DA30286088
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KooNQFIpywsMJ63CwYraenpO494.roa
Signing time: Mon 18 Jul 2022 13:13:10 +0000
ROA not before: Mon 18 Jul 2022 13:13:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 85.121.14.0/23 maxlen: 23
85.120.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:70:ef:26:1f:d9:70:6b:d6:68:70:da:30:28:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 18 13:13:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a8a0d405229cb0b0c27adc2c18ada7a7a4ee3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:d2:f2:8a:cc:47:48:d1:73:43:c2:42:01:
dd:76:b2:b2:2d:f9:a1:2b:75:37:cd:b9:64:8d:4b:
73:16:49:3c:5d:c7:e5:42:ff:45:63:11:55:23:b7:
43:ab:40:ef:7a:59:1c:47:2a:d3:f1:f0:fb:cc:ec:
b7:61:c3:1a:78:46:8b:f2:1f:83:9c:2f:84:01:aa:
e8:87:43:b3:6b:a5:53:77:c4:ee:55:82:17:d9:8c:
60:8b:be:74:57:43:bb:e1:ac:a9:fb:cc:fd:4c:86:
fe:ca:94:86:44:11:aa:3f:cc:f3:8f:52:ce:3a:b5:
9e:ab:01:35:bc:7b:12:df:65:6e:a4:a8:c0:2d:47:
9b:c8:85:e0:5d:5f:d4:0a:0b:52:65:d0:e9:c6:68:
1d:79:72:ba:89:d6:b8:3f:38:fc:93:52:48:c6:07:
8d:d6:f9:1e:7d:5a:50:94:50:12:77:43:fa:e7:bb:
c7:31:32:f6:2a:23:c3:97:6d:7c:90:6c:9d:d0:8d:
f9:f9:4d:21:84:16:f1:86:60:ef:dc:35:b7:e5:c9:
87:3f:33:47:40:98:f3:61:26:1b:6f:06:0c:a7:43:
a6:07:a6:54:51:3e:3d:62:58:99:29:6d:a3:a9:0d:
5c:37:55:45:79:41:b4:80:28:af:fd:42:10:a7:99:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8A:0D:40:52:29:CB:0B:0C:27:AD:C2:C1:8A:DA:7A:7A:4E:E3:DE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KooNQFIpywsMJ63CwYraenpO494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.144.0/24
85.121.14.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:22:12:cd:d5:ec:a3:b1:47:af:be:f3:e0:cc:44:0c:67:2d:
48:86:ef:6f:97:65:0e:f0:b8:37:15:b9:24:a0:9a:91:5c:0d:
bd:8e:0d:0c:46:74:41:cb:48:2f:bd:00:3a:66:8b:0d:a5:67:
89:19:de:9e:42:d4:b3:b0:0b:91:50:60:9e:19:fb:42:2b:b1:
61:3c:1b:d5:03:31:9c:2a:ce:de:a8:46:d4:10:41:33:44:0d:
8a:5c:24:44:17:26:2c:c9:b0:b7:9a:dd:21:3f:40:d5:e3:3e:
4c:b2:71:10:99:7a:47:04:45:57:ae:cf:96:fe:7f:9c:f5:ea:
f1:10:3c:ef:b3:ae:8b:10:40:f7:45:86:26:c8:03:39:f2:6f:
70:04:c6:06:df:4e:64:2b:ac:41:4e:5b:c1:90:80:74:1b:c2:
1f:25:39:17:2f:bf:b8:0b:24:fa:e1:58:a2:b8:04:ff:db:1a:
d7:c1:c6:26:da:dd:06:53:88:5f:57:e9:0d:c0:4d:5f:f0:81:
4b:4d:f0:b2:2a:4c:67:1e:e5:81:b4:85:17:4a:0f:57:42:73:
27:c0:5a:88:be:11:68:39:4f:7d:1b:5c:55:14:39:26:04:fa:
b7:35:21:b7:01:29:98:68:71:c2:7b:14:2c:ab:90:11:50:31:
08:e9:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org