Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/KEqIfMV4cugaXOuUJO6qSj72XiM.roa
File: KEqIfMV4cugaXOuUJO6qSj72XiM.roa (raw, json)
Hash identifier: NjIMeRbYY2T86Am9ROqZUKV20POyAaDtbLduHEwAHdo=
Subject key identifier: 28:4A:88:7C:C5:78:72:E8:1A:5C:EB:94:24:EE:AA:4A:3E:F6:5E:23
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 054B00F3
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/KEqIfMV4cugaXOuUJO6qSj72XiM.roa
Signing time: Sat 01 Jan 2022 08:04:21 +0000
ROA not before: Sat 01 Jan 2022 08:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207519
IP address blocks: 185.99.222.0/24 maxlen: 24
185.99.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88801523 (0x54b00f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Jan 1 08:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=284a887cc57872e81a5ceb9424eeaa4a3ef65e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:72:ce:b4:49:d9:88:8f:9f:27:20:ca:18:
b0:07:fa:b8:60:c4:31:ce:86:5f:a4:56:b7:3b:19:
2e:f3:cc:c3:6d:e8:76:86:c8:41:73:8a:40:73:ce:
a5:9f:7d:ff:25:c9:b1:91:57:db:52:2a:b8:2b:c8:
28:67:c0:90:c5:06:77:1b:83:e3:50:f5:89:59:6b:
2e:55:2f:18:13:e1:86:d6:f3:96:9f:35:2b:af:1b:
0f:9f:28:ee:d3:ee:1f:a8:86:8b:c9:85:2d:95:1f:
03:e5:2f:4d:ab:07:29:d6:b1:99:a5:d8:b7:2d:ed:
ff:d4:78:eb:03:2e:f4:0a:22:6b:a0:1a:8c:79:82:
08:84:ca:bb:9a:48:3e:5b:ef:d1:2d:bb:31:98:86:
21:24:f5:ae:38:29:82:d7:cd:cc:c8:72:ff:d5:aa:
89:a3:dc:e6:15:ab:d2:a5:dd:95:14:1c:87:8a:ed:
be:36:5f:e6:b4:75:e1:d5:0f:23:7f:bc:f4:95:b7:
4e:3d:52:cb:3e:8e:04:f4:3c:02:10:c7:36:2b:5d:
50:92:6b:5f:f2:ce:5d:22:ef:63:9c:4d:cf:54:ff:
2f:f4:be:cd:50:43:16:fa:7a:91:6a:be:90:f1:03:
95:39:0d:54:4b:3f:47:47:2a:c1:d8:6c:d7:03:db:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:88:7C:C5:78:72:E8:1A:5C:EB:94:24:EE:AA:4A:3E:F6:5E:23
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/KEqIfMV4cugaXOuUJO6qSj72XiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.221.0-185.99.222.255
Signature Algorithm: sha256WithRSAEncryption
4d:1b:44:f2:de:02:10:0e:b5:32:8d:4d:e1:52:7a:80:9b:fd:
ab:6f:37:57:3a:08:3c:b2:48:31:63:67:52:c0:c1:cf:5d:19:
4a:44:0a:9f:34:37:8f:f1:00:4c:1f:15:82:b0:dc:74:62:e7:
af:4d:97:75:de:d9:49:ec:60:de:ea:62:78:b6:6a:35:d7:4b:
5c:6f:c9:c8:65:60:e1:7f:42:6a:8c:27:34:2b:1a:bb:42:5f:
92:2c:8b:ec:42:70:dc:f3:c8:14:e5:81:d5:ee:60:13:69:93:
7e:9c:c7:8c:44:6b:90:f7:65:07:ef:f5:ce:9b:17:c7:b6:ef:
04:14:fc:94:56:ae:41:6e:d6:aa:4a:44:79:07:b5:38:c0:9a:
23:64:71:c0:9e:f0:b5:2f:dc:6d:7e:9a:4d:31:6c:aa:23:10:
93:62:10:40:3b:91:d5:ef:2f:13:33:d7:6b:ad:17:29:0a:89:
4a:10:6b:b6:29:97:c9:18:8a:e4:d4:36:b6:37:4f:8a:4c:1d:
25:c1:de:42:6f:04:86:11:e6:05:99:c4:f0:32:0b:54:d3:7b:
18:bb:a3:70:e6:b7:6b:89:53:15:77:ba:87:34:d7:3f:d4:6d:
e6:16:57:bb:b8:59:4d:75:8f:a7:39:63:05:7b:8c:28:d9:57:
8f:06:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:03 2023 by rpki-client on console-ams.rpki-client.org