Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/kOWNVe03mslyhRqyWDWVy8nTR5Y.roa
File: kOWNVe03mslyhRqyWDWVy8nTR5Y.roa (raw, json)
Hash identifier: IDn7lC2U3bb+g9l+/fzrwmcy5M8mTBm+ym7mJaLJ2q4=
Subject key identifier: 90:E5:8D:55:ED:37:9A:C9:72:85:1A:B2:58:35:95:CB:C9:D3:47:96
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0B21BA5E
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/kOWNVe03mslyhRqyWDWVy8nTR5Y.roa
Signing time: Sat 01 Jan 2022 05:02:29 +0000
ROA not before: Sat 01 Jan 2022 05:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43754
IP address blocks: 2.188.80.0/24 maxlen: 24
2.188.81.0/24 maxlen: 24
2.188.80.0/21 maxlen: 21
2.188.80.0/20 maxlen: 20
2.188.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186759774 (0xb21ba5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 1 05:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90e58d55ed379ac972851ab2583595cbc9d34796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:98:77:5c:f8:ca:24:62:85:b3:bd:97:28:
d9:2c:50:92:73:04:e2:6b:eb:68:57:7d:b8:33:1d:
dc:97:63:45:86:f1:5d:7a:12:f7:86:d9:0c:af:5f:
fb:28:8d:08:c0:42:7d:37:7c:64:5a:93:cb:55:61:
ac:6f:f9:b4:e6:33:5b:33:8e:fe:33:e0:32:b8:1b:
bc:5e:0d:64:9a:e8:ff:82:55:dc:e6:bc:d0:b1:0c:
86:bf:c2:60:c2:e3:11:42:cd:10:72:de:2b:80:2c:
7d:d2:c0:63:c8:d0:3d:62:6b:fc:af:05:91:3d:9a:
0d:c8:fd:56:e6:b4:88:db:a8:31:fe:4c:f2:bc:ea:
f7:28:31:ed:88:cc:0a:bf:0f:47:ef:69:83:d2:72:
50:8c:6f:2f:c4:f2:ea:18:8e:91:2b:49:16:d8:40:
ec:aa:7d:ad:18:94:3b:24:ae:42:fa:2e:d7:67:4f:
7b:3c:15:bb:0c:6a:31:bd:76:9d:b1:6a:65:68:e1:
1f:82:42:61:a9:4c:22:1c:1a:36:37:a1:6a:85:6a:
b2:43:7e:9b:4f:74:84:89:a2:a5:0d:6b:0b:3d:91:
0e:7f:e6:d4:a2:17:49:a1:48:b9:bb:f6:1f:51:4f:
41:03:51:d3:6b:18:b1:e2:0a:a8:92:f7:e0:17:11:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:8D:55:ED:37:9A:C9:72:85:1A:B2:58:35:95:CB:C9:D3:47:96
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/kOWNVe03mslyhRqyWDWVy8nTR5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:36:9a:0d:63:8d:f1:5a:24:8a:53:e5:43:be:06:23:7a:75:
98:31:14:da:d0:da:30:e8:36:23:1a:b0:26:32:93:8e:8e:8f:
bc:23:22:0b:79:9c:00:f1:3f:39:cf:f0:2c:b7:9f:97:eb:9b:
a4:3a:82:60:ea:e9:a9:2f:d2:74:58:27:46:53:b9:26:a3:84:
cc:ed:1f:ab:07:b9:b8:b6:8d:4a:2f:16:75:4d:06:4d:0d:d8:
72:42:08:ad:50:87:35:6a:ec:34:9e:40:f1:9c:2b:f5:21:a2:
13:48:c0:a0:4e:57:40:c4:ff:5d:f2:b8:79:25:8b:98:fb:75:
84:fe:f3:2d:10:95:2b:d1:dc:95:87:35:84:ef:99:d3:2e:31:
6c:28:27:17:af:cd:ee:bd:56:4a:cb:28:af:da:ec:be:bb:60:
3c:ea:73:c8:35:07:85:da:aa:a6:29:a3:65:42:fa:32:85:36:
2a:ef:30:24:1a:87:23:22:e2:a5:01:e6:b3:82:cd:62:af:f5:
df:a8:45:4a:b1:54:75:e4:52:0e:29:7f:37:83:e5:63:f1:f4:
e9:ef:17:f3:85:48:27:50:7d:46:88:4e:f1:fe:e5:5c:0a:ab:
2c:40:6f:87:47:be:20:29:81:4c:e3:e3:6d:41:25:b0:ad:95:
63:6a:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:53 2024 by rpki-client on console-ams.rpki-client.org