Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/kmH_TDnwbK2SFV60TTcAFGyVCGI.roa
File: kmH_TDnwbK2SFV60TTcAFGyVCGI.roa (raw, json)
Hash identifier: t9UseWzKKVX2lgBP6tc6nZFAeiQKHvxl4jh3kxfU7o4=
Subject key identifier: 92:61:FF:4C:39:F0:6C:AD:92:15:5E:B4:4D:37:00:14:6C:95:08:62
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 047B1D56
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/kmH_TDnwbK2SFV60TTcAFGyVCGI.roa
Signing time: Tue 05 Apr 2022 16:30:07 +0000
ROA not before: Tue 05 Apr 2022 16:30:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48481
IP address blocks: 185.32.67.0/24 maxlen: 24
185.50.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75177302 (0x47b1d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Apr 5 16:30:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9261ff4c39f06cad92155eb44d3700146c950862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:3e:73:04:1f:28:1c:3e:30:2b:85:d9:56:
77:73:0c:60:17:67:1f:8a:e7:6d:b9:c2:92:5b:a2:
7e:05:c8:a1:42:cc:96:4d:80:22:fe:61:78:35:fa:
11:a6:a1:1d:ad:ed:29:ef:b3:74:2d:ed:30:73:be:
8f:d1:c4:08:4b:49:2e:ac:68:0c:bb:96:73:73:97:
85:6f:57:ec:8a:35:d5:72:aa:72:d4:28:ae:a9:49:
88:91:87:43:5e:92:71:3d:c3:c8:5a:ec:eb:39:8b:
b0:88:ee:7c:18:6f:7e:a1:88:23:9a:3a:39:dd:9b:
d4:0f:d0:db:89:1c:a0:e5:73:0c:88:db:23:8a:6d:
d7:f3:b1:e6:bc:2d:87:3b:ab:d6:d4:6d:05:b6:2e:
97:65:39:3d:dd:12:78:35:a7:06:48:f8:b5:53:6b:
6f:7d:fc:2b:e8:33:06:05:fd:f1:b4:04:ab:e3:1e:
49:c5:0a:c7:e4:d9:95:2a:f7:cc:d4:d3:60:be:d8:
ac:bc:38:ab:0a:69:1e:13:60:47:3b:9d:0e:6e:58:
4a:b5:ba:72:11:51:a4:43:cc:d9:2a:1a:54:bc:af:
d1:f5:98:bc:d2:ec:ee:34:3d:78:20:4c:83:f1:88:
6b:55:8a:3f:d3:17:33:bb:cc:b0:32:8c:ee:36:6f:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:FF:4C:39:F0:6C:AD:92:15:5E:B4:4D:37:00:14:6C:95:08:62
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/kmH_TDnwbK2SFV60TTcAFGyVCGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.67.0/24
185.50.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e0:ed:25:c1:33:d0:fa:74:8a:8c:43:23:e2:e7:eb:9d:1c:
20:e8:ad:fa:7c:25:b1:09:4e:d6:4e:f7:05:f3:43:e9:d5:24:
b6:41:92:72:e3:45:13:ab:05:e5:69:6e:7b:77:71:27:1c:05:
b6:90:55:78:57:02:a6:b2:c1:e0:7b:fc:17:d2:80:13:e0:70:
1a:fa:03:a7:6d:0c:c7:ac:57:a5:d5:5b:7e:9b:9c:f0:80:12:
f6:05:1e:cd:46:02:11:ee:76:f8:46:dd:0f:7f:c5:d7:da:87:
6b:bb:6a:1a:25:55:ae:2d:c5:ad:6c:55:85:2d:e9:80:e3:84:
4a:09:c4:8b:44:65:6e:7a:29:d7:20:25:1b:05:0d:ca:20:85:
8c:95:58:98:3f:bf:a3:75:ed:e0:4d:54:54:18:f7:1b:3e:e3:
a7:88:e9:e2:31:76:6b:c5:7f:19:c5:57:13:76:a5:59:66:fb:
8f:76:5d:82:a7:89:15:a5:0a:08:08:bf:b4:02:ba:0e:f3:b2:
6a:26:2c:f5:7d:c4:42:14:fe:c9:8c:5c:5f:e7:23:8e:ff:f4:
5e:9d:39:e1:d3:4f:95:d2:47:e8:7b:da:8d:58:30:6a:6a:ab:
71:e5:b0:21:ca:2c:fe:d9:97:3e:9e:73:b0:c6:bb:3f:d3:10:
c3:ae:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org