Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kbPpo0Vbc5pogm8k84AC55LMM_0.roa
File: kbPpo0Vbc5pogm8k84AC55LMM_0.roa (raw, json)
Hash identifier: gPpOlDt2MZXhDIMOu9/skpAWQKaebA1ocjqZtSPu0YE=
Subject key identifier: 91:B3:E9:A3:45:5B:73:9A:68:82:6F:24:F3:80:02:E7:92:CC:33:FD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01849EA09BC5090FDAC2B597679A55C2B0E2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kbPpo0Vbc5pogm8k84AC55LMM_0.roa
Signing time: Tue 22 Nov 2022 09:17:16 +0000
ROA not before: Tue 22 Nov 2022 09:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 188.255.229.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:a0:9b:c5:09:0f:da:c2:b5:97:67:9a:55:c2:b0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 22 09:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91b3e9a3455b739a68826f24f38002e792cc33fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:55:d5:6b:e1:41:2c:34:56:28:e3:7d:95:b1:
49:61:66:41:17:ba:ce:5b:c9:50:7c:55:52:60:3e:
eb:40:db:bb:b9:89:e1:d5:94:bc:24:31:ae:1b:e4:
78:6a:15:2f:b5:24:b1:35:48:36:58:af:97:86:90:
67:e1:1a:1a:48:d6:f8:9c:12:6f:af:51:76:c3:3b:
0e:28:73:80:fc:1f:0c:ef:32:a2:11:07:5b:7f:37:
07:94:db:c7:20:3a:a7:78:14:d2:fd:37:2b:05:b3:
ed:53:ee:0f:ac:51:76:b7:05:92:32:7c:c2:65:b5:
8e:b7:c6:78:2e:1d:16:7f:80:91:66:f1:4b:63:de:
d9:0e:5e:5c:d1:7f:69:c5:4c:b3:fe:1e:3f:e2:5e:
4d:f1:80:ea:60:f8:9e:06:74:7f:99:5a:b6:24:98:
46:dd:d5:e2:fe:8b:f9:8e:00:36:cb:25:e0:ff:81:
dc:71:96:5b:87:a7:2c:e2:d3:50:80:14:94:65:8c:
44:65:c1:eb:8b:10:7f:b8:30:54:b8:e3:1e:5c:6d:
99:e3:bb:d2:3d:88:85:e8:27:27:3f:37:cd:85:75:
bd:d9:f1:c0:09:cc:2d:df:6e:d9:c6:cf:8d:b7:56:
dc:f9:9f:35:68:18:57:3d:05:58:17:19:1e:72:62:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:E9:A3:45:5B:73:9A:68:82:6F:24:F3:80:02:E7:92:CC:33:FD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kbPpo0Vbc5pogm8k84AC55LMM_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
188.255.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bf:22:38:82:e2:d9:7f:93:3e:cc:e6:da:75:eb:5d:a0:4b:
1b:8c:cc:2c:89:ad:bf:68:3f:5c:1a:cd:59:f5:46:27:d6:6b:
6e:5f:3b:e7:50:4e:9a:6d:b6:7d:b3:e2:42:14:da:a1:6f:12:
19:7c:59:ec:c6:6b:35:31:b6:1b:8f:2b:f0:1a:cd:17:d4:ce:
3a:62:c3:ce:d0:ce:ed:7a:77:78:86:69:ee:cf:0c:71:fb:44:
f1:38:32:8d:85:7b:6f:33:e7:df:bb:e3:d3:bc:d4:04:08:97:
8a:96:0e:99:b0:4c:50:87:35:f7:1c:94:ac:f4:33:08:80:80:
59:1c:82:59:99:b3:bb:f4:27:f3:65:59:4c:78:fb:67:65:08:
0f:7d:0d:cc:f4:d2:a5:60:2f:91:ff:cd:c7:a9:6b:d8:b3:4f:
59:df:ba:08:7a:e9:cc:cb:99:e5:d9:9a:17:0f:6b:09:95:bb:
28:ac:75:35:92:51:43:b4:aa:4b:12:04:d8:6e:d1:2c:55:d3:
c0:a2:f7:a2:c3:27:ce:75:95:de:3e:bb:05:8f:56:9d:5c:25:
91:6b:ec:00:56:eb:dc:2b:12:21:95:ba:1d:f4:8c:06:26:5a:
33:30:9a:0d:77:39:52:3f:9a:37:cf:c6:d6:39:e3:5e:e7:e9:
ca:6c:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org