Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/Kacc3Z10K9M3Esm4S32wbF0bm90.roa
File: Kacc3Z10K9M3Esm4S32wbF0bm90.roa (raw, json)
Hash identifier: 6jlfFPFsoj16ad8WPSEzEnVvfSf6qBvWYEe2gMHS4Kk=
Subject key identifier: 29:A7:1C:DD:9D:74:2B:D3:37:12:C9:B8:4B:7D:B0:6C:5D:1B:9B:DD
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 270C06
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/Kacc3Z10K9M3Esm4S32wbF0bm90.roa
Signing time: Tue 15 Mar 2022 14:03:49 +0000
ROA not before: Tue 15 Mar 2022 14:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 185.195.60.0/24 maxlen: 24
185.240.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558982 (0x270c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Mar 15 14:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29a71cdd9d742bd33712c9b84b7db06c5d1b9bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:c7:c1:69:e8:39:77:50:ce:15:df:ff:d3:
18:79:ea:9c:d2:40:e1:81:39:7d:fd:4c:4a:8b:c3:
9a:5f:e9:a7:b9:37:06:19:ae:e2:e7:48:ea:a1:a7:
a6:85:f9:78:7c:e4:c2:1b:39:25:05:9b:81:01:c5:
16:31:a1:01:7e:55:44:db:9e:8c:89:8a:5e:af:1f:
c6:26:65:42:bb:4a:fd:11:59:ea:33:05:ec:1d:e1:
57:61:f4:49:04:0d:9e:82:7e:70:3d:56:80:ae:22:
5f:45:95:31:2b:1a:9f:cb:75:1f:00:de:c5:96:c0:
53:76:04:41:75:76:7d:ad:06:a8:ac:ce:d4:2e:c2:
50:da:12:bf:ce:ca:1f:24:ee:b6:aa:d7:1e:48:d3:
ab:d2:e3:b7:9d:80:b9:12:d2:eb:47:8d:69:51:83:
40:95:4c:6f:45:e5:8b:76:58:49:2d:0a:fb:ba:29:
41:0d:5b:41:6e:55:09:31:8f:c5:c5:ce:12:33:76:
b0:79:4c:1a:b8:27:7f:2c:bf:82:cf:23:75:21:79:
9b:02:11:60:04:a8:9c:62:8f:2b:09:90:c3:c2:31:
a2:ec:8f:d0:d0:e1:45:4a:68:f0:16:f9:af:03:9a:
d2:d2:0d:80:a9:5c:e3:34:8c:fd:bc:01:67:27:d3:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:1C:DD:9D:74:2B:D3:37:12:C9:B8:4B:7D:B0:6C:5D:1B:9B:DD
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/Kacc3Z10K9M3Esm4S32wbF0bm90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.60.0/24
185.240.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0d:99:eb:b5:64:6b:0b:a1:0f:52:f0:8c:cc:6c:b7:39:94:
ee:05:00:78:05:5b:4c:97:d3:dc:14:02:4b:9b:a7:37:56:30:
f4:c1:53:6d:1d:8b:e7:4b:c1:82:82:9c:64:13:1d:71:74:97:
7c:09:78:83:05:e7:cf:72:6a:4a:f1:1b:97:84:a1:bf:9c:87:
c0:22:95:f0:09:c6:f1:a7:32:4f:f3:12:41:74:91:5a:24:92:
f7:7a:42:9e:a2:b3:1a:65:0e:81:e8:ce:a5:4e:cb:ac:c3:72:
ad:5b:8a:70:0c:c2:ec:6a:3f:91:f0:42:91:7b:61:66:d2:a2:
47:a3:78:de:ac:2f:eb:e9:5c:42:e3:ba:d8:ee:9f:c1:0a:ed:
0d:ae:ed:09:42:3e:72:62:5a:54:7d:31:40:36:dc:81:0a:ed:
9b:90:8a:1d:1f:28:ee:8e:da:dc:81:6e:cf:e2:13:b5:dd:20:
08:7e:b0:69:57:53:31:2b:88:a1:45:c8:69:a0:bc:aa:3f:4f:
d7:16:73:f6:f8:de:2d:0d:30:a1:39:14:b2:1b:f4:1f:c2:a6:
54:27:cd:54:2c:25:e7:0a:43:92:8d:34:97:6b:2c:6d:18:80:
b2:d8:94:8d:f3:f1:92:92:97:62:5b:e2:40:4d:24:04:d5:03:
82:f8:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:13 2023 by rpki-client on console-ams.rpki-client.org