Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/K-Bt1nBB7VxKSsDQwlNpcHi-pTg.roa
File: K-Bt1nBB7VxKSsDQwlNpcHi-pTg.roa (raw, json)
Hash identifier: ccyfTIOtepUxE5SzbosTyQqavpzvZnqOI5Z80gqQoEU=
Subject key identifier: 2B:E0:6D:D6:70:41:ED:5C:4A:4A:C0:D0:C2:53:69:70:78:BE:A5:38
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 04C9E850
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/K-Bt1nBB7VxKSsDQwlNpcHi-pTg.roa
Signing time: Sat 01 Jan 2022 10:02:08 +0000
ROA not before: Sat 01 Jan 2022 10:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.144.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80341072 (0x4c9e850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 1 10:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2be06dd67041ed5c4a4ac0d0c253697078bea538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:72:9a:31:be:ab:4e:32:34:8a:13:64:3b:
e1:55:5e:1b:53:da:18:d6:6b:22:d8:ce:41:bc:8a:
63:10:4b:93:95:91:e3:79:79:ea:80:ff:ec:10:2c:
22:ff:fc:21:16:46:76:6b:8d:cf:98:47:72:50:60:
e1:e7:9d:0d:bd:c6:9d:81:f1:65:17:ea:fd:d2:77:
93:2e:e2:0b:13:74:d8:a1:7b:e4:5e:03:ac:56:79:
22:c2:59:21:2d:6d:55:67:69:8e:0f:ba:08:71:68:
23:c3:80:d5:ff:da:2d:9e:96:c4:81:20:ec:06:bc:
f3:27:bc:b4:27:52:f6:dd:f8:7f:33:c9:fd:eb:fc:
08:ab:98:3b:b1:37:e4:18:75:97:64:38:04:9d:7d:
69:f7:0b:2e:bd:56:3a:4c:2a:68:3a:41:7b:f8:39:
f7:98:1b:da:33:3b:7b:9d:ee:e7:46:84:3a:27:b3:
8d:12:23:3d:46:ef:1b:13:8c:88:6b:f2:e4:28:92:
82:ca:93:e6:1e:ac:e3:e0:7b:f9:03:a4:71:05:00:
b7:21:fa:c6:85:f0:a0:53:4a:07:3e:c4:33:81:3d:
da:3a:c8:14:f3:45:67:b5:80:1f:79:2f:4a:d7:bc:
43:e8:e1:af:dc:d0:91:64:f2:92:a2:43:77:27:40:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:6D:D6:70:41:ED:5C:4A:4A:C0:D0:C2:53:69:70:78:BE:A5:38
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/K-Bt1nBB7VxKSsDQwlNpcHi-pTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.223.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9f:93:88:b0:98:0a:7c:32:2c:bd:21:1c:e5:c2:f5:c4:f7:
5e:2d:de:77:cd:e8:0c:d8:a4:a0:53:4a:02:5b:2e:ae:05:80:
0e:64:51:4c:d5:6b:c4:ba:60:2f:f3:ff:ff:7a:60:0d:98:20:
78:27:fd:44:10:eb:13:b8:f1:ae:76:41:43:25:f6:72:ae:8f:
70:08:6c:bb:99:96:0d:fe:46:c4:3e:23:1f:fb:ce:66:77:f7:
ff:48:7d:33:94:1f:21:01:b0:00:99:13:96:e4:14:c7:99:21:
30:10:01:ff:d3:eb:c2:aa:b0:c0:66:2a:5d:52:7d:32:64:77:
de:e2:8d:dc:1a:e5:10:38:80:13:19:9e:a4:78:f3:4e:2b:15:
8a:01:ff:8c:27:6d:34:79:e1:2d:6c:23:65:03:48:46:79:4c:
f1:b9:50:66:46:58:b9:1f:a4:1b:5a:bc:c9:e4:ae:fb:7d:83:
c5:fb:ec:60:6e:d9:14:13:ff:97:3f:2b:e7:49:60:e0:0a:6b:
97:fe:5b:ce:62:e3:e9:15:31:92:12:f0:b3:c0:b9:7f:60:61:
c0:72:91:18:ba:73:e5:0d:aa:4d:e0:39:0e:ce:a3:52:01:33:
c0:94:1b:b4:8c:e1:84:8a:0d:66:2c:ab:d7:e2:62:a1:1a:6b:
2c:d1:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:26 2024 by rpki-client on console-fra.rpki-client.org