Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/KuasstXc01prl9-PULMs7gBzcVI.roa
File: KuasstXc01prl9-PULMs7gBzcVI.roa (raw, json)
Hash identifier: D+sgJ2bL632KID7u7X1g/MpWhipwmdw7X5k1CoYTJxg=
Subject key identifier: 2A:E6:AC:B2:D5:DC:D3:5A:6B:97:DF:8F:50:B3:2C:EE:00:73:71:52
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 0182E8F331AF9BB6DCF3E546BE2C47577AED
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/KuasstXc01prl9-PULMs7gBzcVI.roa
Signing time: Mon 29 Aug 2022 09:33:48 +0000
ROA not before: Mon 29 Aug 2022 09:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201568
IP address blocks: 185.60.68.0/22 maxlen: 22
185.60.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:f3:31:af:9b:b6:dc:f3:e5:46:be:2c:47:57:7a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Aug 29 09:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ae6acb2d5dcd35a6b97df8f50b32cee00737152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:d2:48:0f:3a:a5:c9:6f:3f:5f:bb:bc:3b:
75:cb:6b:83:8a:fd:12:02:61:61:f1:83:22:30:70:
fb:99:ec:a8:35:e2:19:44:41:bf:e0:bb:b2:3e:51:
74:cd:66:f3:f7:d2:e0:ae:8b:1e:3e:98:0b:0d:0b:
1c:40:3c:a6:ba:de:a7:71:ee:72:d2:69:04:8b:4a:
e0:26:56:8c:4f:fb:e6:f0:65:54:84:fb:1f:b6:1a:
68:af:ab:80:98:d5:99:05:95:96:3c:73:f7:68:ed:
15:ba:58:5b:ea:30:ba:55:6e:09:67:53:5e:65:9e:
0b:0d:34:ac:c0:d2:01:bb:1b:f0:ac:c5:4c:d7:ca:
fe:ae:69:db:5e:e6:f5:5a:7c:4b:7e:89:2b:e7:a1:
0e:47:b9:7b:34:17:aa:f3:dc:71:b5:2f:cd:ad:46:
99:3c:7a:63:ed:d5:1f:24:e0:bc:65:a1:f3:ea:cf:
84:c5:2a:09:31:50:2a:bb:e6:2a:d9:5e:12:26:cf:
fd:51:b6:34:9e:c2:2f:5c:85:32:fa:7e:52:bb:25:
53:f5:48:ce:aa:23:1f:f3:3f:fe:f9:b0:2f:73:8b:
1d:2e:a2:cc:04:bb:fa:00:e6:b2:af:27:af:3d:d3:
80:ca:ac:50:20:db:14:ae:89:88:cb:43:a0:fe:92:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:AC:B2:D5:DC:D3:5A:6B:97:DF:8F:50:B3:2C:EE:00:73:71:52
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/KuasstXc01prl9-PULMs7gBzcVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.68.0/22
Signature Algorithm: sha256WithRSAEncryption
17:f1:af:07:4c:22:1c:b8:41:e1:a0:2d:d4:3d:0e:55:08:ff:
53:34:d6:a6:fc:08:88:c0:85:e8:2f:85:01:a8:9c:76:1f:47:
97:0f:2e:40:82:47:5d:25:83:13:7d:e9:68:2c:ec:6c:ce:39:
94:91:44:ac:79:7d:14:b2:b0:ff:fe:8f:98:fc:ca:d2:2b:ef:
9e:6f:33:e0:b2:7a:fa:08:77:9e:3f:e4:53:cd:d9:d4:43:87:
77:b8:a2:fb:9d:0d:a1:82:98:16:b3:95:f4:27:3d:cb:a4:3b:
a5:51:a0:76:7c:67:a8:7d:34:38:e2:cc:fc:ff:6f:7d:60:c0:
76:8e:ca:9e:ea:44:0d:f9:36:34:52:af:17:37:cf:cf:21:41:
1c:02:24:77:d9:b0:0c:25:e6:bb:87:73:89:48:6c:a8:30:93:
15:6c:fa:c0:f6:78:46:48:b0:76:d0:b0:ca:b0:3f:9e:83:41:
ab:7f:13:bd:00:08:7e:96:76:2a:ab:f4:8a:0b:a3:eb:49:02:
66:9b:51:ea:4a:1d:f9:f4:1d:ce:72:9f:41:da:42:20:70:13:
80:e6:45:e7:8f:8d:67:74:e1:2c:81:86:b4:f0:7d:49:2a:17:
ff:02:6b:cf:84:94:7b:fa:4d:63:97:9c:9a:10:17:e8:2f:54:
d6:2f:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:58:53 2025 by rpki-client