Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KF5OZNnXU_hZGdjgcj3LLVSEieo.roa
File: KF5OZNnXU_hZGdjgcj3LLVSEieo.roa (raw, json)
Hash identifier: h7irv7k8IfVogpKgt2+1sQzOThm8SqQA5U1rdDHbfqk=
Subject key identifier: 28:5E:4E:64:D9:D7:53:F8:59:19:D8:E0:72:3D:CB:2D:54:84:89:EA
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01855779DD602E83F18B98558AADDE836176
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KF5OZNnXU_hZGdjgcj3LLVSEieo.roa
Signing time: Wed 28 Dec 2022 06:44:42 +0000
ROA not before: Wed 28 Dec 2022 06:44:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60148
IP address blocks: 2.187.255.0/24 maxlen: 24
2.187.254.0/24 maxlen: 24
2.182.255.0/24 maxlen: 24
2.182.254.0/24 maxlen: 24
78.39.221.0/24 maxlen: 24
78.39.152.0/24 maxlen: 24
78.39.157.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
78.38.239.0/24 maxlen: 24
2.187.253.0/24 maxlen: 24
78.38.238.0/24 maxlen: 24
78.38.237.0/24 maxlen: 24
2.185.254.0/24 maxlen: 24
2.185.255.0/24 maxlen: 24
2.180.255.0/24 maxlen: 24
2.180.254.0/24 maxlen: 24
2.181.222.0/24 maxlen: 24
2.181.223.0/24 maxlen: 24
2.183.254.0/24 maxlen: 24
2.183.255.0/24 maxlen: 24
195.146.37.0/24 maxlen: 24
195.146.59.0/24 maxlen: 24
2.184.255.0/24 maxlen: 24
2.184.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:79:dd:60:2e:83:f1:8b:98:55:8a:ad:de:83:61:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Dec 28 06:44:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=285e4e64d9d753f85919d8e0723dcb2d548489ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:34:52:75:0c:49:39:31:91:96:38:7a:ad:
ce:12:8e:e9:13:4e:36:73:d1:24:60:f6:32:fc:16:
04:75:34:bc:d8:35:2e:6c:d5:aa:59:f9:ba:84:10:
eb:93:07:df:7f:b3:aa:a3:79:f9:50:bc:07:70:3e:
41:d5:2a:9f:45:1c:82:2d:94:3c:ae:31:41:a5:4a:
cb:0f:a7:c5:76:d6:e0:a6:b9:44:8b:a7:c5:46:9e:
45:1e:09:be:94:0c:11:4d:9d:b6:b4:22:c8:4d:51:
d8:e0:b3:b4:74:97:47:88:d7:42:7f:75:c6:f0:88:
6b:79:53:bf:82:05:3b:f9:04:68:f8:77:5b:38:39:
87:2c:9e:38:ce:82:1a:5e:9b:46:6f:44:63:f6:3b:
4d:e3:be:69:6a:d0:ba:af:7d:12:2d:e4:02:42:20:
99:a3:67:9e:82:29:bb:55:0d:b4:37:46:73:58:3a:
f2:e2:2c:3b:78:ba:82:3d:21:a9:18:a4:b4:9a:19:
33:cd:da:fb:d2:fc:a1:bc:e9:86:17:37:44:c2:dc:
a5:3e:9c:0a:43:ba:94:e5:10:b8:ae:76:85:90:81:
80:d9:a4:ae:c5:de:d2:95:4e:f6:f0:32:64:a0:3d:
dd:85:c8:0e:6b:7c:99:f6:db:c5:b8:b7:52:6f:ec:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:4E:64:D9:D7:53:F8:59:19:D8:E0:72:3D:CB:2D:54:84:89:EA
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KF5OZNnXU_hZGdjgcj3LLVSEieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.180.254.0/23
2.181.222.0/23
2.182.254.0/23
2.183.254.0/23
2.184.254.0/23
2.185.254.0/23
2.187.253.0-2.187.255.255
78.38.237.0-78.38.239.255
78.39.152.0/24
78.39.157.0/24
78.39.221.0/24
80.191.56.0/24
195.146.37.0/24
195.146.59.0/24
Signature Algorithm: sha256WithRSAEncryption
64:10:7a:aa:ac:2c:8b:c3:94:0a:e9:19:20:78:6f:97:07:f6:
a1:06:eb:05:ac:fd:dc:6d:bd:35:bc:e6:63:18:0f:67:9f:48:
f2:4c:9b:50:3b:a7:ec:40:b0:5d:5e:ec:9b:89:38:51:7a:de:
19:7a:c8:ad:9d:f2:ad:9b:41:0f:d9:61:c5:23:f4:4f:ca:2b:
02:db:bf:0b:61:75:27:cf:f8:d2:f8:a2:dc:20:3e:1c:83:2f:
3b:4e:ea:4e:60:a4:99:0f:1e:71:18:d8:c8:d2:5b:ae:33:ce:
1b:78:ce:72:fd:8e:b2:dc:0f:b2:e0:63:3f:3e:ff:8e:40:19:
6e:57:79:46:80:93:7f:00:bc:06:c7:b7:ae:6b:1e:63:1e:29:
88:61:80:79:15:b0:6d:d1:87:54:fa:ad:4d:e2:dd:03:26:05:
45:b4:f6:33:66:83:49:f8:63:4e:5e:e6:bc:3b:12:60:34:79:
ce:54:ba:98:a7:cd:ed:21:5c:66:7d:93:f5:c3:ee:03:90:0f:
ad:40:b6:d8:2c:d2:eb:2c:c5:a3:fc:32:59:82:43:84:01:e4:
e1:ec:99:61:74:a3:0c:a6:46:7f:ba:97:8e:23:ee:8e:3e:71:
86:06:e1:58:9e:89:56:5d:10:b5:19:30:02:f7:ef:37:f0:08:
b9:04:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org