Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KbhTQi3NDWeCgifugrZG15kOS9Q.roa
File: KbhTQi3NDWeCgifugrZG15kOS9Q.roa (raw, json)
Hash identifier: 5SXt31PMpC9avmWLpLoBhG0XAwMbqzF8eJ6ekc5ka8A=
Subject key identifier: 29:B8:53:42:2D:CD:0D:67:82:82:27:EE:82:B6:46:D7:99:0E:4B:D4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01853F5E4A29639CC6092E42DCCA68A4611E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KbhTQi3NDWeCgifugrZG15kOS9Q.roa
Signing time: Fri 23 Dec 2022 14:23:41 +0000
ROA not before: Fri 23 Dec 2022 14:23:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 91.216.185.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:5e:4a:29:63:9c:c6:09:2e:42:dc:ca:68:a4:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 23 14:23:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29b853422dcd0d67828227ee82b646d7990e4bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:0e:ea:88:d3:00:81:ba:bb:5f:e3:22:b5:
70:39:32:0e:6f:bb:31:71:10:56:61:9a:62:c2:15:
57:f7:4e:30:bd:97:ca:90:93:5d:b9:4f:e6:97:b1:
32:16:90:f4:b2:28:ce:e6:16:b7:17:3d:1d:76:58:
06:f1:85:67:c6:e1:ca:46:c9:e5:b6:27:bf:a5:99:
d0:25:37:14:d6:31:b6:72:aa:06:d8:7a:9e:fb:a9:
8f:38:90:4f:f1:50:5d:aa:9d:23:3f:30:8d:37:40:
90:b0:c2:41:b0:fa:78:c2:98:3f:48:a9:7b:7d:c7:
61:34:1a:99:00:bb:e5:c8:17:14:f4:b5:f3:2a:a2:
09:59:41:5d:b2:04:f4:fc:d2:18:d7:3b:bf:fa:19:
c1:c6:01:f6:a8:69:3e:ea:63:ed:9f:c4:e5:34:2e:
d0:31:09:6e:c1:2c:87:75:97:c6:0d:cc:45:97:1f:
dd:ca:d7:cb:96:4f:1a:08:85:96:2b:ee:26:dc:d8:
6e:d7:c6:5b:e9:85:e4:03:af:48:95:b7:fd:51:27:
86:9a:54:54:40:bf:d5:79:fc:e6:ca:d1:2b:ce:ab:
4d:22:e4:e2:1b:db:50:7b:76:40:f7:9f:3e:46:68:
dc:aa:b7:c4:0e:9a:64:1e:64:9e:e7:36:45:01:2d:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:53:42:2D:CD:0D:67:82:82:27:EE:82:B6:46:D7:99:0E:4B:D4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KbhTQi3NDWeCgifugrZG15kOS9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.168.0/24
91.216.185.0/24
93.114.244.0/24
94.176.214.0/23
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ed:f7:73:3d:ed:7c:0e:ea:d6:c7:8d:6d:0e:f1:87:33:82:
b5:d1:48:81:f4:ae:81:ee:b3:75:d9:49:b8:80:89:e3:79:98:
4a:f5:e3:5e:b0:6c:70:e7:f5:bc:9a:bf:7b:7e:1c:83:4e:54:
a8:07:8f:f5:fb:4e:e4:e7:1a:5e:1f:3f:98:69:76:af:5e:e7:
93:b2:39:fc:3f:05:a0:79:ce:aa:14:04:cb:e0:78:50:b9:fa:
ad:c8:f8:28:43:21:2a:6a:30:af:58:d2:6e:fa:bc:e0:10:2a:
bc:5b:8c:4c:64:2f:7b:9e:17:37:e8:a1:9b:cb:6a:da:dd:e2:
db:2a:a7:f1:2c:32:e6:cd:49:66:08:31:83:46:cb:d4:9d:d5:
bc:4b:af:48:7b:4c:63:e2:a0:62:fa:af:3b:a4:5e:6d:bb:87:
62:a4:0a:a0:45:52:9a:9b:d9:52:9a:70:6a:7c:30:f0:38:7c:
b1:cb:81:78:41:00:03:92:ce:d7:04:70:85:df:30:59:a0:0d:
81:ca:5d:e7:17:6f:33:4c:8f:52:79:1a:d9:f1:fc:96:46:ab:
cf:81:78:d6:3b:cf:71:93:f4:f6:73:4c:0a:0b:0f:1b:75:c7:
68:98:26:04:48:7f:a5:7f:82:0c:bd:02:ee:25:ac:2e:e9:14:
92:b1:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org