Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/KOnyxtrJ9PxmL-itPTCWL-dNhQo.roa
File: KOnyxtrJ9PxmL-itPTCWL-dNhQo.roa (raw, json)
Hash identifier: nJjFQcxrmiCaIE4KyF6lPj83OjZlaRE0CSru2k2Bjh0=
Subject key identifier: 28:E9:F2:C6:DA:C9:F4:FC:66:2F:E8:AD:3D:30:96:2F:E7:4D:85:0A
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 095E0E93
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/KOnyxtrJ9PxmL-itPTCWL-dNhQo.roa
Signing time: Sat 01 Jan 2022 13:06:37 +0000
ROA not before: Sat 01 Jan 2022 13:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157159059 (0x95e0e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 1 13:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28e9f2c6dac9f4fc662fe8ad3d30962fe74d850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:fa:5c:ea:58:28:e1:91:0b:b0:3b:8e:2c:
9d:e6:1b:f6:d8:ed:b0:1e:7a:b3:df:bb:5e:3e:46:
29:3b:a6:22:a8:5f:be:c0:30:a4:9c:19:6f:ec:e4:
0a:95:4f:cd:c7:24:93:05:8a:9b:e7:e3:3c:1d:c0:
7b:35:9d:4e:fe:90:ea:1e:e4:ec:3c:93:17:e2:84:
7b:7f:a3:0d:e0:0f:2a:43:50:1a:d3:12:bd:ea:9a:
2d:76:ee:8f:13:4f:38:2a:92:bb:70:6b:f1:a1:64:
4b:3d:b5:bd:e1:9f:79:ce:4f:60:84:6e:69:02:4f:
a0:05:4f:77:eb:89:73:be:6d:2d:f6:d5:21:d3:71:
ba:5f:e6:05:df:0e:c0:a7:56:31:52:a1:e1:16:11:
a0:ec:02:dd:5a:7b:45:78:1b:da:6f:b8:73:65:0e:
4f:1a:7d:99:14:82:03:7c:53:cb:da:bc:bc:44:2a:
60:5f:2b:d1:99:1b:c6:a9:c2:bb:a8:50:03:a9:6e:
68:64:4e:ad:19:f2:a9:1b:24:57:be:04:7b:a4:c4:
4f:5b:d8:02:eb:80:7f:1f:0c:ef:f4:bb:a2:78:3d:
c1:d2:b2:11:74:bb:02:9f:57:6f:12:5f:ad:9a:ea:
d2:ee:c3:87:a4:63:30:32:83:1a:2e:b3:95:01:f6:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E9:F2:C6:DA:C9:F4:FC:66:2F:E8:AD:3D:30:96:2F:E7:4D:85:0A
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/KOnyxtrJ9PxmL-itPTCWL-dNhQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
Signature Algorithm: sha256WithRSAEncryption
29:33:7b:74:0b:fd:95:f7:63:96:ee:73:03:2b:3e:b2:27:fd:
9b:20:e9:52:bf:67:67:66:08:fb:24:af:b2:79:ba:ab:53:39:
03:67:3c:51:f0:b8:5b:b8:1d:78:03:22:fa:07:2f:ae:b0:da:
84:df:a6:61:d8:26:28:d1:40:40:fe:77:8c:e9:ea:56:90:8e:
f9:f1:e3:37:7d:b8:bb:37:fd:6e:6b:aa:34:05:b6:e6:a9:16:
9b:36:40:50:32:b2:23:66:28:79:78:34:27:5d:4a:11:97:d0:
5b:7d:82:4f:a6:78:f3:e3:97:99:3d:96:ef:13:d8:3b:c5:9c:
af:22:e2:c5:87:9b:c1:65:1e:1d:29:a9:42:8e:aa:eb:9c:c5:
9f:84:a1:35:2f:bd:9e:57:5d:60:6a:19:df:15:3b:0f:4a:64:
b5:7f:37:9e:6a:67:6c:f1:06:8a:b9:2c:c0:fd:b3:ba:0a:68:
6e:2b:c6:5c:6e:7f:91:9f:04:82:88:70:0d:c9:9f:6e:24:fb:
35:18:24:fa:76:c8:3f:a1:22:0f:a4:fb:fd:ca:04:0b:b9:40:
a8:94:bf:b2:11:7d:95:56:14:4a:de:30:c7:82:6c:ac:0d:ec:
18:eb:b2:04:4f:0f:4f:3b:71:4f:b5:2b:78:35:00:0c:a8:29:
37:86:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org