Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Kf4IGcWyPTuECwEMB9l8Im7CLd0.roa
File: Kf4IGcWyPTuECwEMB9l8Im7CLd0.roa (raw, json)
Hash identifier: m0SM3eySz63WR1V1BdYsyJQWsI4DVddbDmRzJBqBm0M=
Subject key identifier: 29:FE:08:19:C5:B2:3D:3B:84:0B:01:0C:07:D9:7C:22:6E:C2:2D:DD
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 172AB091
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Kf4IGcWyPTuECwEMB9l8Im7CLd0.roa
Signing time: Thu 10 Mar 2022 20:37:09 +0000
ROA not before: Thu 10 Mar 2022 20:37:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.104.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388673681 (0x172ab091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Mar 10 20:37:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29fe0819c5b23d3b840b010c07d97c226ec22ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:a1:0f:ff:07:9b:b8:fb:5a:ad:42:2d:32:
58:05:dc:b2:6c:3d:45:cf:07:3a:a6:ba:3a:de:2b:
41:d6:11:03:31:25:42:4a:cb:4e:2d:03:77:b8:98:
fa:45:13:ee:fb:68:ac:b4:3c:06:a2:b3:57:33:54:
3a:42:56:87:5e:47:e5:3b:d1:94:80:36:3a:8d:42:
eb:64:6f:55:13:60:c8:4c:0d:88:64:74:b7:76:06:
5e:98:fa:40:3b:4f:40:ab:4c:0b:39:d3:93:21:55:
6e:94:7b:16:ba:4c:fd:66:0f:b7:71:8b:24:86:62:
44:b7:51:e0:a5:9e:6f:19:a0:d5:f1:8c:fb:9a:52:
82:73:60:7c:df:a5:e6:d3:af:a0:da:3f:aa:0f:cd:
ee:8a:f7:c1:4a:e3:56:5e:4f:80:15:bb:48:e1:35:
c3:6d:db:90:39:55:81:7e:88:e6:64:ab:78:cc:c2:
83:8e:cc:de:71:34:52:60:98:11:ad:7e:3f:70:71:
8d:02:31:76:16:5b:8f:81:3a:d4:af:22:98:50:b4:
f4:22:96:d2:bb:5c:4c:87:5f:a3:f9:b7:ca:2b:bd:
ed:40:08:ec:22:d1:76:ee:69:c7:c4:d7:72:73:6a:
1d:a2:d4:db:f0:1a:60:c3:1e:45:c4:56:22:c6:90:
e3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:08:19:C5:B2:3D:3B:84:0B:01:0C:07:D9:7C:22:6E:C2:2D:DD
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Kf4IGcWyPTuECwEMB9l8Im7CLd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.12.0/22
Signature Algorithm: sha256WithRSAEncryption
69:e2:07:b0:f1:bb:01:73:0e:ca:19:67:4c:18:28:f9:fb:da:
4a:bd:46:83:e0:6d:36:5d:b3:74:55:1c:db:9f:b9:6f:2e:81:
59:d3:67:6c:f8:36:1d:da:c9:37:d3:20:6f:99:12:dd:d7:1d:
bf:23:71:58:13:a7:7f:b3:a1:8d:46:89:34:9e:72:fe:03:ff:
78:cf:eb:d3:4c:93:92:e6:92:b3:fa:dc:18:43:9a:a6:40:b6:
f3:17:4f:56:53:77:4c:33:a7:77:7f:13:cd:18:05:0c:7e:ca:
73:ce:97:68:aa:dd:37:2b:07:ba:8e:07:5d:53:23:4c:3b:63:
d9:f3:08:ae:bf:c3:fd:69:5c:ca:1d:ff:e7:11:cb:2a:64:0b:
18:66:46:74:1d:93:b0:24:8d:76:18:dd:6f:68:70:64:0e:8d:
f6:62:57:77:81:eb:2a:10:3d:56:a5:d7:3a:6c:9d:0c:b6:dc:
39:af:32:e8:24:5b:8b:2a:74:5a:c9:fa:0f:59:f2:2c:35:8d:
b8:4d:aa:f7:c5:6e:6a:ed:3a:58:8a:25:9f:db:22:50:82:be:
6e:88:6b:45:30:29:02:6c:d4:dc:5f:bb:3a:6f:e9:38:63:08:
bd:db:75:0e:c9:90:31:dc:02:bf:f7:06:93:04:86:89:c4:69:
6e:4b:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org