Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/KKss72kEJDbpBWs-UeiLDgEdnuQ.roa
File: KKss72kEJDbpBWs-UeiLDgEdnuQ.roa (raw, json)
Hash identifier: 3WyJ4ZssV5pPEX/0CK0cDpZsUKzcswfJAFD+grMXLh8=
Subject key identifier: 28:AB:2C:EF:69:04:24:36:E9:05:6B:3E:51:E8:8B:0E:01:1D:9E:E4
Certificate issuer: /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Certificate serial: 0A4CEA79
Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/KKss72kEJDbpBWs-UeiLDgEdnuQ.roa
Signing time: Sat 01 Jan 2022 05:57:58 +0000
ROA not before: Sat 01 Jan 2022 05:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 188.95.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172812921 (0xa4cea79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Validity
Not Before: Jan 1 05:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28ab2cef69042436e9056b3e51e88b0e011d9ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:11:4c:d1:8a:39:e0:41:ae:dd:1d:0f:fa:
c5:9c:80:2e:22:d8:de:4f:ad:c9:8d:89:61:8a:58:
21:3d:6c:5b:12:5b:a7:a4:5a:a4:8a:24:79:dc:39:
87:75:20:28:5b:2d:e2:81:32:1f:99:5a:17:12:6a:
f5:80:43:ef:0e:69:d9:33:80:47:76:8e:16:80:e3:
f0:02:a4:c5:59:2a:79:e7:92:13:7e:5c:42:8f:ec:
95:c9:38:c5:8e:38:5b:2b:96:9c:d0:de:9e:b1:a4:
f1:03:bc:80:d4:f8:f0:7e:97:97:6f:d3:47:7e:3f:
52:5e:8c:8d:dd:72:bc:8d:9d:89:a0:27:af:2a:7e:
42:5b:48:79:5e:46:5d:bb:47:c4:ba:ab:90:79:0f:
37:cf:10:ee:5d:2a:5a:8f:3a:ce:cc:c3:48:fa:ba:
1a:f6:c7:a9:da:68:6a:a3:e9:d0:ff:32:3d:98:d9:
13:83:c1:96:14:f8:35:24:67:9e:4f:22:3a:f3:53:
f7:69:c5:5c:a6:12:22:d0:89:e3:c9:61:04:77:cd:
83:b1:38:8a:0b:00:38:12:b7:a7:80:08:61:44:d2:
77:b4:85:4c:3a:e4:e5:ff:b4:37:f7:f5:b5:d1:34:
87:1f:69:85:5d:61:c9:e8:5b:44:e5:78:4f:f8:f5:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:2C:EF:69:04:24:36:E9:05:6B:3E:51:E8:8B:0E:01:1D:9E:E4
X509v3 Authority Key Identifier:
keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/KKss72kEJDbpBWs-UeiLDgEdnuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.143.0/24
Signature Algorithm: sha256WithRSAEncryption
29:00:e9:da:44:8b:90:e5:60:7a:a4:08:08:1e:2f:75:d3:80:
0d:ab:74:75:e9:d2:5b:5c:b1:80:f3:6a:93:ac:22:f7:4e:44:
fa:4b:09:8e:78:43:db:b6:f7:f5:13:f9:c8:cf:84:3f:7e:32:
dd:6e:9d:aa:06:16:71:55:09:4f:a0:ea:53:6a:64:8a:5a:65:
23:33:fa:cd:2e:c4:2c:bb:34:39:d4:90:b4:98:fc:f2:eb:da:
2f:9a:40:56:d0:b0:93:4a:0b:25:73:a9:4d:d6:fe:15:3f:b1:
4d:12:d5:d9:b8:13:48:34:66:5c:c8:04:45:93:42:d0:f8:76:
0c:dd:ff:22:19:79:7a:60:c3:f7:63:5c:38:25:a1:02:e3:4b:
da:90:40:ce:30:b5:c2:94:23:42:4f:5a:5a:e3:6a:fe:a4:51:
c2:d6:a2:66:ee:f9:76:f6:67:1d:11:4e:b3:3d:65:5a:d7:58:
ee:b0:69:dd:91:ef:fe:8f:95:b9:02:cb:a2:e0:88:8d:4e:84:
c6:73:c1:42:1a:b8:71:ac:93:e4:e0:6a:fe:19:fc:03:35:cc:
97:e8:67:21:a1:85:fc:67:ca:cd:28:25:2d:e7:e2:4f:56:f8:
df:a9:6a:2d:70:1d:55:5b:26:04:da:67:3b:d0:22:83:96:96:
bf:1f:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:16 2023 by rpki-client on console-ams.rpki-client.org