Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/kK8nHDHaRGfiA9B8xVnsJWS4OLw.roa
File: kK8nHDHaRGfiA9B8xVnsJWS4OLw.roa (raw, json)
Hash identifier: TEUgGxJhY6/vvbKOCD4sa3e3ZJWXnB7OKmXFg+aL43I=
Subject key identifier: 90:AF:27:1C:31:DA:44:67:E2:03:D0:7C:C5:59:EC:25:64:B8:38:BC
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38D3D1F0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/kK8nHDHaRGfiA9B8xVnsJWS4OLw.roa
Signing time: Sat 01 Jan 2022 07:55:14 +0000
ROA not before: Sat 01 Jan 2022 07:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3918
IP address blocks: 145.30.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953405936 (0x38d3d1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90af271c31da4467e203d07cc559ec2564b838bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:4c:61:35:7a:e5:97:a9:77:67:9f:53:7a:
f6:bc:a3:e6:1c:e6:94:27:47:43:66:fd:49:8a:80:
90:fe:05:bc:be:ef:76:02:42:8f:59:de:ab:d3:fd:
80:7f:94:4c:2a:13:9e:e2:df:5f:9c:c0:86:7c:ef:
a7:a9:4a:cf:f2:86:2d:09:81:f2:47:0c:93:0e:0c:
8b:c4:84:d9:30:ea:73:78:c7:1d:5a:ae:ab:93:30:
08:13:d5:8f:53:fb:30:61:8b:11:06:3e:c6:71:b8:
58:31:a6:00:1a:87:99:1a:cb:f0:d7:0e:35:8c:1c:
7d:c6:d3:b4:76:53:0e:f3:d8:76:45:4d:6f:5a:5a:
d6:d6:0e:a3:4c:49:2a:42:f1:8a:c7:34:7e:01:ce:
8e:e8:c4:bd:e4:9a:04:ba:c7:6e:5f:a3:bf:1c:ba:
3a:fd:41:64:48:95:38:20:03:88:62:f3:c0:a3:d3:
91:87:20:91:77:5f:12:f0:c7:b6:93:f0:00:5a:b8:
63:0f:c4:6e:86:e4:f3:46:7d:8a:da:6d:1c:61:cd:
bf:85:d1:44:80:32:97:f5:f0:aa:41:61:c5:05:a6:
c8:e6:9e:9d:3a:03:d6:74:5a:cf:3a:15:5b:3f:d9:
72:e9:97:da:ea:76:94:3e:ed:34:e9:30:00:1e:96:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:27:1C:31:DA:44:67:E2:03:D0:7C:C5:59:EC:25:64:B8:38:BC
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/kK8nHDHaRGfiA9B8xVnsJWS4OLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.227.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d6:e5:03:80:08:c5:71:bf:7e:a8:68:c3:8e:8a:b8:2c:43:
34:3b:72:b7:b4:23:da:31:c7:13:b1:d4:b9:b7:f7:1d:78:f7:
b8:a2:35:87:de:99:8e:9a:8e:76:44:b6:e7:12:91:01:41:5e:
3d:74:96:cf:fa:8e:58:f5:b7:b4:e5:ee:e9:9c:f5:9f:0b:95:
74:58:ed:21:69:24:8f:d6:7d:cd:f3:bd:55:6c:66:9c:bf:88:
6a:53:d2:ff:af:72:f0:6c:39:79:d8:00:2b:5a:6e:70:41:78:
53:3d:f4:18:93:db:97:8e:ef:fc:fd:9b:8e:17:93:7a:09:8a:
6c:91:30:39:ef:f6:f3:51:c5:13:83:19:0b:96:50:e4:81:a0:
dd:c0:cd:d5:f8:fa:13:81:47:df:23:b5:36:fa:d1:21:a2:b4:
9a:88:97:5c:4b:85:d1:eb:18:31:79:cf:10:18:94:c8:61:99:
97:64:7d:7f:c8:2f:9c:f9:5f:b8:9e:1b:8d:17:9b:15:3b:e8:
df:c1:c8:0c:fb:08:90:b6:07:8d:bb:43:f8:0e:6e:c8:b3:e2:
7e:f6:cc:2e:70:9b:73:5a:1e:b6:c1:96:5e:ce:98:a9:6c:2e:
87:dd:36:86:30:19:7e:e5:33:94:e4:dd:a0:ce:c3:78:c6:e8:
39:de:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org