Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KYmgywWU-OfSUq5OB7uP57oVioI.roa
File: KYmgywWU-OfSUq5OB7uP57oVioI.roa (raw, json)
Hash identifier: AeUN0NpOCW1HmQrXYoy4L8HvRbqmgq8E1JLbzqxTTyI=
Subject key identifier: 29:89:A0:CB:05:94:F8:E7:D2:52:AE:4E:07:BB:8F:E7:BA:15:8A:82
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 280DD24A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KYmgywWU-OfSUq5OB7uP57oVioI.roa
Signing time: Sat 01 Jan 2022 16:09:30 +0000
ROA not before: Sat 01 Jan 2022 16:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62150
IP address blocks: 93.170.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671994442 (0x280dd24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2989a0cb0594f8e7d252ae4e07bb8fe7ba158a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:b2:49:06:18:d4:99:ce:2f:a4:07:be:81:
a1:ce:93:44:5b:37:22:f9:7f:cd:27:b4:5b:9c:a3:
6c:74:ed:e9:8a:b8:99:68:33:14:9b:48:b4:7b:a8:
98:65:63:c6:d1:82:dd:c9:21:14:3c:21:71:c4:9f:
cd:2e:7e:2e:67:cb:14:96:8f:c7:04:6f:9f:b2:4c:
51:0a:75:b4:57:d2:dc:95:65:a9:72:46:b6:c6:33:
a4:68:63:69:e0:3a:6f:76:ec:f3:00:ee:64:56:c1:
6d:7e:2a:17:71:5d:83:79:1b:73:75:53:82:29:e0:
46:d2:a1:20:59:da:f8:81:68:4c:3b:a0:97:86:ef:
e1:fa:06:0f:3c:7e:7b:ad:1a:72:0a:53:9c:24:9c:
31:38:ae:64:9b:a9:e2:f1:ec:83:0a:db:82:76:01:
ef:ef:5d:f1:42:ab:68:38:3e:31:ab:5c:52:34:1b:
3c:cd:b0:46:7c:3d:ae:ab:85:13:3b:fc:06:a7:11:
66:20:e4:0a:54:c4:a8:06:56:b7:34:78:43:29:77:
92:0c:b5:3d:b4:1e:39:a9:ae:7a:f9:16:8e:ea:73:
d5:a7:3f:d5:70:f9:ca:27:de:6e:44:46:85:a7:7f:
73:b7:66:55:72:d4:0e:b6:83:34:fb:9f:30:2b:19:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:A0:CB:05:94:F8:E7:D2:52:AE:4E:07:BB:8F:E7:BA:15:8A:82
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KYmgywWU-OfSUq5OB7uP57oVioI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.52.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fe:ba:3e:f9:c9:b4:ba:fe:9a:59:c8:c9:c3:ba:46:40:81:
62:d1:a4:cf:de:c4:c5:6b:84:94:a7:88:a8:26:e8:e4:72:a4:
35:9f:e4:b3:a2:b3:1c:fa:01:fa:13:c0:5f:a1:c9:5c:23:10:
c2:fa:50:02:b1:7f:9f:5e:35:98:ac:08:cc:6f:15:8f:a3:4e:
d2:89:b5:92:6a:63:77:2a:ea:b3:b0:a2:47:6d:2a:0d:f3:08:
40:ae:03:bf:52:1d:ec:1e:26:cd:e4:10:0d:1e:19:ad:2e:2e:
61:b6:a0:fc:59:75:2c:05:7d:ca:33:32:8c:d3:41:ff:e1:3a:
59:56:2a:f8:08:ed:e9:30:d2:54:74:4d:cd:b8:61:fd:5c:f8:
ec:fd:f0:3f:30:a6:76:a9:73:87:29:6a:91:1d:d8:76:13:c4:
c3:6c:a7:08:8f:fa:44:e6:eb:1f:06:32:df:a2:96:c9:1b:65:
ba:d6:d3:10:2b:6e:3d:cb:1d:9e:37:6e:1e:d3:73:d4:46:a3:
01:00:c3:ce:84:ba:98:b8:71:0e:5c:0c:c1:51:70:5f:e1:c9:
71:db:bf:30:46:6d:a8:4b:d4:6b:77:f1:b2:06:98:16:b6:f3:
37:50:1c:9e:51:03:5f:ca:13:ea:11:da:ec:12:4f:31:65:e9:
61:c9:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:24 2023 by rpki-client on console-ams.rpki-client.org