Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/kChOl2SzQmKY_s20YFG8ZhoReDM.roa
File: kChOl2SzQmKY_s20YFG8ZhoReDM.roa (raw, json)
Hash identifier: RyAt0QLQtLg3MTRzaE1mX180M3CwNAf3RLwSJUzKS5o=
Subject key identifier: 90:28:4E:97:64:B3:42:62:98:FE:CD:B4:60:51:BC:66:1A:11:78:33
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 074D4C95
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/kChOl2SzQmKY_s20YFG8ZhoReDM.roa
Signing time: Tue 04 Jan 2022 11:58:26 +0000
ROA not before: Tue 04 Jan 2022 11:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39062
IP address blocks: 195.66.158.0/24 maxlen: 24
195.66.158.0/23 maxlen: 23
195.66.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122506389 (0x74d4c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 4 11:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90284e9764b3426298fecdb46051bc661a117833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:88:91:1d:07:63:f0:cc:84:6e:12:20:0c:
e9:60:ba:2f:cc:67:53:d4:7e:22:de:92:5d:5a:44:
af:b4:ab:b2:a8:42:31:e0:bf:1a:71:03:b2:13:fd:
ab:bc:fb:4e:43:0c:73:8d:53:b3:78:f8:a1:7d:62:
13:f9:0d:ba:4e:62:85:d6:c0:46:ee:96:f1:b4:8b:
0b:61:8c:61:94:ff:cc:af:af:ce:7f:99:e6:c9:be:
05:77:2b:73:12:6e:36:74:d5:ed:39:71:84:32:74:
02:c8:e5:58:36:34:34:c2:61:17:b9:c7:af:37:79:
46:39:68:6a:ba:09:98:f0:1b:a7:5c:bf:3c:8e:70:
2d:27:58:17:40:e7:a6:18:19:5e:19:6a:4e:e3:7d:
15:ae:d0:84:58:5c:1e:ed:e6:2e:fa:ef:70:c8:3a:
de:75:e0:39:c3:df:6f:ea:a8:66:3f:f5:62:1b:27:
84:be:63:1f:5c:da:d1:8b:a6:64:a8:9f:30:5d:00:
47:eb:57:33:45:8d:d7:29:d9:54:93:7f:8c:6c:45:
d7:2e:1a:f3:9d:d2:ad:7c:10:37:78:24:32:94:a2:
e5:70:6c:15:c8:d8:d2:fd:21:d0:57:f2:1c:f0:12:
dc:0c:61:a1:0e:d2:da:95:2b:71:a9:15:09:1f:13:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:4E:97:64:B3:42:62:98:FE:CD:B4:60:51:BC:66:1A:11:78:33
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/kChOl2SzQmKY_s20YFG8ZhoReDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.158.0/23
Signature Algorithm: sha256WithRSAEncryption
83:8b:bf:e9:4f:1d:be:98:7e:06:31:74:eb:7c:68:bc:cd:ab:
ab:89:43:c1:74:a0:39:a0:64:5a:25:3d:83:1f:6b:63:6c:ff:
14:e5:92:54:8a:27:d3:a8:45:44:03:ba:f7:69:bc:f6:6b:5c:
ae:b7:1a:2b:2a:ba:ad:a2:04:21:4b:53:54:ac:23:12:8f:17:
76:c2:5d:9a:32:b1:ce:00:6b:1c:dd:fe:d4:42:66:96:63:52:
97:89:20:25:cf:a4:4e:c8:38:c9:26:0e:9f:d7:b3:f0:d5:81:
9c:79:f3:b3:50:88:f0:6e:49:57:3b:8c:7f:21:3f:7f:7c:39:
a4:8e:80:88:9c:d8:a8:06:8b:f8:a8:46:51:27:8e:d5:55:6b:
d5:c9:06:47:dc:e9:f5:ec:fd:16:2c:6d:b1:b4:98:6a:38:86:
15:7c:0c:fc:d0:d2:51:22:27:30:5a:97:8f:5c:0c:a5:e1:2e:
82:55:39:37:8b:61:69:ac:88:d8:ad:f3:bf:80:86:a7:ff:56:
81:c6:a9:8c:2d:fe:7f:e9:51:1f:66:a6:6b:93:35:ce:c0:ad:
75:15:60:88:5d:d2:74:de:22:28:8e:f9:88:b5:a2:c0:cc:90:
2a:0d:45:b6:93:95:e3:1c:a5:f2:76:63:98:f9:2e:7d:af:a6:
d2:07:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:06 2024 by rpki-client on console-ams.rpki-client.org