Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KvSJYIX518aTlPdixyVniv_Y7jU.roa
File: KvSJYIX518aTlPdixyVniv_Y7jU.roa (raw, json)
Hash identifier: qlUbo3UEQl4bv0HuEgBsTLh4jwkul/BhEhFWvpzdlnA=
Subject key identifier: 2A:F4:89:60:85:F9:D7:C6:93:94:F7:62:C7:25:67:8A:FF:D8:EE:35
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1B43CA05
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KvSJYIX518aTlPdixyVniv_Y7jU.roa
Signing time: Mon 21 Feb 2022 12:54:57 +0000
ROA not before: Mon 21 Feb 2022 12:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206192
IP address blocks: 85.153.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457427461 (0x1b43ca05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Feb 21 12:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2af4896085f9d7c69394f762c725678affd8ee35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:1f:2c:ba:60:43:67:b3:c8:24:85:2d:62:
05:02:91:c0:e7:da:4f:74:1d:12:be:96:45:58:75:
b6:3f:ce:ef:ed:ec:ed:39:53:23:34:f6:fa:63:00:
29:d3:49:52:4b:bf:b2:53:a1:8b:ab:3d:9f:d6:03:
1a:cf:54:16:02:7d:59:a8:7a:69:71:9f:97:81:8a:
5e:4f:cc:2f:0f:cc:3d:80:4c:d7:f0:10:00:5a:29:
20:af:9e:95:0f:de:9a:d9:e1:e2:96:b4:7f:40:98:
3c:d5:f0:3b:a3:57:e9:c4:b2:19:fc:30:2e:bc:e8:
e1:8f:58:63:ef:fc:6a:c4:bf:68:78:64:af:48:8d:
90:c8:f8:72:d2:fa:fc:b4:ba:e5:6d:d2:d5:aa:44:
06:d5:3e:18:ba:43:ea:92:b9:ac:fd:49:8a:83:d0:
ff:f9:48:b4:ca:8e:ed:0b:b2:05:db:8c:c4:15:c7:
f1:af:d1:25:0c:18:c0:75:4c:db:dd:d0:63:a2:e6:
74:44:a5:6c:d6:5c:6c:eb:65:43:1b:97:16:4c:6b:
a6:1d:f4:4c:d6:40:05:87:e9:18:1f:c7:6a:2e:dd:
69:7f:6a:59:52:9a:54:68:5b:4d:6c:fe:ca:f8:c8:
1e:c1:98:52:d3:df:2f:7e:5c:e7:bb:fe:5c:07:66:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:89:60:85:F9:D7:C6:93:94:F7:62:C7:25:67:8A:FF:D8:EE:35
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KvSJYIX518aTlPdixyVniv_Y7jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
33:07:7e:c8:f9:dc:4b:a8:01:e1:2d:00:a4:9d:af:2e:17:dd:
05:a2:2c:08:a7:fa:21:04:35:76:ca:c1:62:a1:e3:44:5e:fa:
c1:85:6b:04:52:e0:40:d7:d9:aa:68:d6:74:a3:1a:5f:b7:3a:
44:65:6f:68:94:fd:99:7d:f9:1e:e3:c8:24:3c:5a:fa:53:7a:
35:c8:c4:dc:8c:bb:17:3c:89:99:12:cf:5a:31:04:7e:04:16:
be:9f:e7:21:aa:c5:52:61:c8:b4:94:7f:2b:0c:b7:57:5b:87:
86:fd:dd:43:8e:6a:d4:4e:a0:9b:03:df:3f:d7:55:aa:c8:ea:
86:2f:66:c7:3f:59:5a:f5:fe:d1:48:8e:33:47:dd:98:00:53:
97:9e:a5:94:b8:ab:c3:ce:fb:af:5d:b7:7f:bd:cd:70:6c:47:
c1:14:88:df:c0:78:f2:53:fa:3c:5f:9d:0d:a7:68:ce:f6:17:
60:48:13:35:31:93:ca:e7:66:8d:f9:ff:90:fb:35:92:c1:17:
63:24:81:f6:60:d3:6d:b8:e6:3f:55:7d:b2:a6:a3:60:06:51:
d8:8c:9b:6c:7c:14:84:a9:68:b2:52:a3:e8:d3:cf:9e:63:cc:
5f:74:3a:df:b4:87:ed:e5:64:51:44:df:fd:f0:b9:ff:9b:40:
ab:41:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org