Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/KJZqStMxrzlANFvZ5asr7rRmjjM.roa
File: KJZqStMxrzlANFvZ5asr7rRmjjM.roa (raw, json)
Hash identifier: 4MGZ0E0EqBD5fZAYDXUtRFroOO8KZEbzVG5DV9mNf28=
Subject key identifier: 28:96:6A:4A:D3:31:AF:39:40:34:5B:D9:E5:AB:2B:EE:B4:66:8E:33
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 0C5B92FD
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/KJZqStMxrzlANFvZ5asr7rRmjjM.roa
Signing time: Thu 12 May 2022 05:35:02 +0000
ROA not before: Thu 12 May 2022 05:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59882
IP address blocks: 185.153.210.0/24 maxlen: 24
185.153.208.0/22 maxlen: 22
185.153.211.0/24 maxlen: 24
185.153.208.0/24 maxlen: 24
185.153.209.0/24 maxlen: 24
2a07:88c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207327997 (0xc5b92fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: May 12 05:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28966a4ad331af3940345bd9e5ab2beeb4668e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:c7:dc:ea:3f:26:32:ff:03:0a:44:0d:fd:
de:d0:e4:44:93:1f:dc:4f:80:b7:cd:3c:83:f2:32:
f7:fa:fc:5a:e6:16:21:a1:62:b2:be:72:e3:c3:68:
c6:14:59:6c:23:bb:41:26:e9:66:c1:23:52:a5:f0:
1c:c9:c8:16:cc:26:d9:16:1c:ae:36:78:6e:eb:8e:
4e:5d:7b:46:30:ca:a8:96:02:cf:66:f4:26:0d:d9:
4e:22:80:50:07:a5:97:a9:df:92:56:05:9b:51:ce:
e3:c3:0f:d4:d0:6f:1f:a6:94:70:f5:88:9a:8d:f4:
13:b6:d7:84:ad:80:26:3f:66:71:2a:cb:0e:28:f7:
60:ac:56:c8:cb:24:af:4c:36:d2:cd:10:3d:7b:7f:
c9:03:f9:c4:e0:2e:0c:27:b1:08:d8:ba:fa:fa:0f:
0a:0b:e7:48:81:8c:6e:8e:59:73:ce:b5:dd:a1:1a:
ec:c7:f4:c9:e8:c3:53:c8:0d:b6:04:9d:80:04:91:
27:1e:d0:a4:00:b7:b0:93:db:dc:b5:25:6d:b7:d1:
20:ca:b8:92:d4:49:6b:bf:a9:0a:a2:51:93:e5:19:
f4:53:b3:db:b9:7d:07:8c:b5:69:79:a9:8e:1b:ea:
23:6a:18:0e:69:72:ee:93:53:83:4a:21:fb:b0:9b:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:6A:4A:D3:31:AF:39:40:34:5B:D9:E5:AB:2B:EE:B4:66:8E:33
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/KJZqStMxrzlANFvZ5asr7rRmjjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.208.0/22
IPv6:
2a07:88c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:9b:a3:78:05:a8:4d:dd:59:4f:1b:ca:b7:8f:fc:8b:98:39:
15:4b:78:45:44:a6:94:1e:2d:62:11:50:2f:d8:a0:f8:2f:9e:
17:ce:4c:d2:2a:74:38:61:38:14:67:47:90:21:5b:d9:0d:ce:
73:07:d3:a7:80:b7:d4:8b:23:eb:4d:8c:a3:63:07:5d:3a:b6:
72:58:8c:08:06:1f:fb:f4:a0:90:b7:2e:75:77:37:db:76:ff:
75:2a:a5:93:ed:de:b6:d3:7d:d5:6d:d0:1c:9d:10:27:7e:0e:
21:9e:23:f6:f7:5c:0d:ec:09:78:9c:0a:78:8a:f1:26:1d:80:
35:32:62:fc:0f:43:26:9a:9a:1f:46:9c:92:72:0a:84:48:6d:
b3:bf:ac:b1:e2:a3:00:19:b0:95:87:8f:4f:9b:2c:00:94:c6:
04:f9:a4:cb:c5:d3:e9:7f:65:81:3c:65:69:2b:5d:c7:c1:88:
db:97:75:2c:1d:d2:92:9c:fe:84:35:0c:a6:68:4d:60:fb:21:
f3:74:09:19:b5:3b:d5:83:32:16:3c:b4:23:9d:d8:76:bb:d1:
2e:15:7c:f3:28:1d:02:04:22:1f:fa:e2:5c:6c:95:55:69:3c:
ce:62:d1:1d:f7:f6:3e:03:af:1e:a2:27:0e:18:31:18:24:0c:
9e:b3:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:32 2023 by rpki-client on console-fra.rpki-client.org