Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/CnkKVI99PhSI4Hojr0_ytaMvsFg.roa
File: CnkKVI99PhSI4Hojr0_ytaMvsFg.roa (raw, json)
Hash identifier: 2TMM//KpyQfqpoYMaQvT+XqUQla08HpvzyfSdO85OA8=
Subject key identifier: 0A:79:0A:54:8F:7D:3E:14:88:E0:7A:23:AF:4F:F2:B5:A3:2F:B0:58
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 0510E61F
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/CnkKVI99PhSI4Hojr0_ytaMvsFg.roa
Signing time: Sat 01 Jan 2022 07:52:48 +0000
ROA not before: Sat 01 Jan 2022 07:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204811
IP address blocks: 185.239.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84993567 (0x510e61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jan 1 07:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a790a548f7d3e1488e07a23af4ff2b5a32fb058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:df:48:b3:f0:43:67:54:b5:52:06:5b:3c:
bb:27:91:67:a0:35:e3:d0:7e:69:19:65:cc:9b:eb:
c4:a3:88:75:d7:c1:a8:23:e4:4d:18:9e:f3:99:7e:
b6:c1:b8:7b:e2:18:e4:3d:62:92:f3:c7:8b:cd:4c:
96:96:c7:72:34:ed:1f:45:da:64:e0:ff:b9:cd:bd:
07:09:ad:f0:e8:6b:98:3c:a4:e5:6a:24:ba:05:22:
3f:8e:5e:a3:25:da:cc:7f:24:8a:17:ff:65:4b:b8:
95:69:b4:c3:3a:67:cf:f2:7e:14:6b:97:7d:cb:c1:
a0:8e:7e:f3:45:72:ee:c0:b1:96:7d:8c:ae:22:ec:
aa:32:b8:b2:d6:fd:fc:72:63:eb:d4:3f:de:db:18:
dc:03:36:22:7c:90:b1:b7:b8:b0:d7:ec:a7:24:aa:
31:21:a3:53:f1:8e:3b:fe:3c:d9:b2:a7:ae:30:60:
55:03:0b:e2:9f:f8:3d:9c:a2:c1:77:65:44:ab:38:
7f:f8:e9:1f:91:99:90:c6:5e:22:cd:15:da:9b:f3:
96:e5:f8:16:31:52:b6:58:71:18:d1:6e:02:4d:6c:
11:c7:93:2f:91:31:82:44:82:c6:75:06:3f:cb:80:
e0:54:50:d3:70:62:9e:39:0e:61:a1:0a:2f:ae:07:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:0A:54:8F:7D:3E:14:88:E0:7A:23:AF:4F:F2:B5:A3:2F:B0:58
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/CnkKVI99PhSI4Hojr0_ytaMvsFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:8c:e8:a3:d7:a9:61:89:a0:ff:ee:03:64:67:ba:2d:8d:6b:
44:12:38:d4:33:2e:5a:3e:b9:0b:82:67:e7:10:92:57:ac:d1:
12:a8:5e:42:bb:a9:be:82:fa:24:12:98:aa:58:a4:65:ae:9f:
7b:fc:4a:fe:45:11:ba:fc:5e:31:e0:d8:a4:5a:4b:d1:a5:4f:
1b:ca:0b:59:fb:4c:9e:95:ae:a0:c6:d8:23:76:28:bf:86:8e:
c6:3a:98:ad:f7:8b:7b:d8:69:9e:86:83:37:f8:5e:94:17:45:
a3:d1:48:f0:30:55:12:ee:50:ee:65:b5:df:2c:70:14:da:37:
93:78:f2:71:b6:04:9a:f3:8c:7d:87:55:3d:54:d2:59:11:73:
72:1b:e6:0e:df:58:94:20:6b:2f:27:6b:2e:0c:48:dc:5c:6d:
a0:b9:be:57:f6:48:aa:d0:c0:db:c7:f7:34:ea:a4:19:c9:5c:
a2:82:bc:d9:50:80:3e:d3:f4:94:49:13:90:75:01:95:5e:e5:
df:80:f8:3b:53:98:59:df:c4:22:3b:43:be:70:1a:0e:45:e1:
99:62:d3:c3:a9:4b:71:4a:de:01:81:cb:d9:25:62:2b:56:51:
07:12:b0:1b:9e:1e:e8:ea:e6:00:d8:d0:60:53:a5:53:6f:48:
2e:cc:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:11 2024 by rpki-client on console-ams.rpki-client.org