Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/KoCBSqyGrsOzcu0FjpWSU7tGiv0.roa
File: KoCBSqyGrsOzcu0FjpWSU7tGiv0.roa (raw, json)
Hash identifier: KCTOCfsCEYvsvugj3FPXUtHHk6tOVmVSvTASJYoEfbE=
Subject key identifier: 2A:80:81:4A:AC:86:AE:C3:B3:72:ED:05:8E:95:92:53:BB:46:8A:FD
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 0D1C71A7
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/KoCBSqyGrsOzcu0FjpWSU7tGiv0.roa
Signing time: Sat 01 Jan 2022 01:52:03 +0000
ROA not before: Sat 01 Jan 2022 01:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60718
IP address blocks: 109.74.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219967911 (0xd1c71a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Jan 1 01:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a80814aac86aec3b372ed058e959253bb468afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:fe:fe:24:8d:20:cc:5a:7f:cd:fe:47:88:
2a:a0:ff:c1:71:fe:83:eb:63:34:ce:af:08:e8:12:
89:f4:64:cd:2c:da:48:80:eb:f9:a0:26:47:3d:11:
63:ba:11:ea:6b:20:3f:b1:2c:7a:5d:fc:38:12:af:
f3:95:13:dd:a9:c7:f2:96:57:4f:a4:85:da:f4:8c:
fd:2e:eb:7b:0d:4a:1a:b7:5e:4b:46:43:00:55:14:
b5:45:8a:ab:44:55:34:80:a1:54:4a:af:84:89:e7:
7f:d9:4c:c4:20:44:c9:5e:1e:9b:43:aa:82:10:a1:
94:fe:ba:34:dc:f3:cb:85:eb:67:ef:c4:b9:72:6f:
e9:4d:b8:49:05:9c:d8:69:c2:f5:46:c7:e2:44:1d:
2b:a0:79:8b:7b:ed:3b:9b:bb:59:5c:32:ad:cb:71:
53:1b:86:81:a2:bb:1b:c8:93:58:32:4f:9d:85:55:
dd:97:59:e8:d4:89:bd:93:e8:7f:39:4f:4b:5e:29:
e3:aa:b3:b3:32:ed:84:80:5b:79:eb:b9:e3:47:9b:
cd:1b:2d:0d:db:01:99:90:20:96:50:6f:e6:76:ab:
f1:26:bc:f3:96:aa:6d:98:ee:4c:c6:34:62:1f:c8:
fc:ad:ce:d5:85:5c:bc:ec:2c:bd:fb:0c:5c:7d:f8:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:81:4A:AC:86:AE:C3:B3:72:ED:05:8E:95:92:53:BB:46:8A:FD
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/KoCBSqyGrsOzcu0FjpWSU7tGiv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b8:9b:e6:9d:04:29:75:98:31:8b:49:4c:55:e5:54:72:30:
bd:8c:65:3d:bb:f2:e0:da:9d:bd:bf:3b:3b:e5:89:67:26:69:
d8:bf:d4:2f:c4:64:2f:3c:20:14:4a:39:a9:1c:97:48:06:9b:
cf:b6:7a:62:fd:3b:9e:e4:26:ff:1a:20:e6:c8:67:eb:41:88:
ee:c0:ad:c1:b3:4f:4d:53:10:98:80:12:5a:32:c4:fe:c3:32:
6e:a2:ab:29:96:11:cf:cb:e7:ce:3b:df:8c:50:45:9c:61:6e:
c8:ca:29:99:21:58:f5:22:a4:7c:6c:f4:19:42:74:07:06:b6:
b4:d6:2f:af:0c:64:e0:e3:59:7f:87:91:3d:54:7c:8d:77:51:
f9:bd:f6:c8:e9:e5:1a:5a:4b:7d:e6:7c:2b:30:41:cb:19:7d:
6a:48:a9:97:94:e1:dc:a3:cb:76:82:8c:bd:e5:5e:ba:15:4d:
3e:20:ba:61:40:9f:30:4e:39:fd:bb:20:ea:79:8a:ca:16:94:
c3:70:c6:9f:b4:f2:61:3e:4c:12:ae:36:30:d4:b6:81:6a:4b:
32:d9:78:07:a3:04:35:e0:71:f3:2a:8e:40:9f:72:29:ad:7e:
a5:64:08:2f:83:4f:ff:40:3a:af:8d:bf:57:01:eb:ad:4a:ac:
e9:93:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:52 2025 by rpki-client