Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/KJAQ1RKXBTL1TFxciN3UVJQ6KcA.roa
File: KJAQ1RKXBTL1TFxciN3UVJQ6KcA.roa (raw, json)
Hash identifier: 0jEQVMw8geXoq8R5XHwRdQ+A+2TBwfNFM3kjCUm1hc8=
Subject key identifier: 28:90:10:D5:12:97:05:32:F5:4C:5C:5C:88:DD:D4:54:94:3A:29:C0
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 01820C22AE396AC838ECD587C5C55E450E79
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/KJAQ1RKXBTL1TFxciN3UVJQ6KcA.roa
Signing time: Sun 17 Jul 2022 12:29:35 +0000
ROA not before: Sun 17 Jul 2022 12:29:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29017
IP address blocks: 185.181.116.0/22 maxlen: 22
91.197.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:22:ae:39:6a:c8:38:ec:d5:87:c5:c5:5e:45:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jul 17 12:29:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289010d512970532f54c5c5c88ddd454943a29c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:36:07:57:da:c9:17:63:93:ee:56:9e:19:
4d:31:3b:14:ce:69:58:83:c6:0e:66:16:78:19:5f:
f0:d5:4f:f9:44:05:cf:22:cc:ff:c3:9d:bc:b3:10:
d1:a0:24:c7:57:71:ca:6d:0f:a3:cc:ab:cd:f6:35:
ff:df:d5:eb:bf:97:80:5c:ba:0d:9b:3f:56:74:fd:
18:0d:c7:a6:ab:a2:af:1f:86:50:91:18:af:b8:35:
c0:20:87:19:68:f7:f3:ef:d1:ec:50:80:cc:7b:d9:
ad:46:a7:49:e2:1e:d2:43:7d:45:24:19:77:92:4f:
53:03:36:8f:df:12:57:f4:62:81:a3:67:d8:8d:a4:
af:05:39:1d:7f:6a:b5:72:39:6c:cc:a6:fd:39:51:
0e:64:38:ce:12:82:87:7d:bc:5e:0b:80:83:35:c0:
0a:08:d0:23:95:38:c8:2f:45:76:e6:02:2f:5e:f9:
3d:7b:50:44:b8:a2:5e:a4:79:08:b2:0c:f9:58:c0:
e9:d2:c7:e7:85:f6:b9:cb:52:4e:4e:19:b1:9a:61:
3d:b3:33:44:9f:3b:fc:4e:58:24:45:c1:c9:cc:71:
5b:53:a0:4a:35:bc:89:78:6a:da:89:7c:1b:2a:76:
2f:23:11:48:65:10:df:e4:9e:fd:45:e3:b1:5a:a6:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:10:D5:12:97:05:32:F5:4C:5C:5C:88:DD:D4:54:94:3A:29:C0
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/KJAQ1RKXBTL1TFxciN3UVJQ6KcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:e0:88:91:42:7a:64:c3:22:2e:89:fd:19:26:80:d3:27:56:
3b:4f:23:f9:b1:81:19:e7:0e:27:44:db:bd:a6:aa:88:fa:ca:
f3:10:e4:67:ac:9e:be:5f:34:ce:fe:77:91:e8:ff:76:b6:87:
23:1a:e6:74:6a:18:85:1d:85:c1:cc:f1:3d:21:d5:e4:4d:c2:
88:fb:b6:56:bb:a4:12:73:a7:b9:cd:56:b5:f2:55:b0:e6:d4:
5a:61:e3:78:46:fe:d1:b2:27:14:d2:a1:bf:11:b6:6b:27:ff:
43:f8:1a:6d:2b:49:e3:cd:4a:76:2c:97:93:79:8f:51:b1:04:
57:9e:dc:73:d3:33:4d:7a:ef:60:a0:bb:55:2e:98:85:77:b1:
71:6c:05:00:c5:d5:74:47:f1:3f:f1:36:96:8a:41:c7:81:54:
66:5a:42:30:61:d6:15:a1:19:e5:46:39:22:4f:50:1d:c8:f0:
60:ec:fb:3b:ba:20:3e:57:30:04:e3:78:ab:62:f1:0e:23:4c:
c6:7b:62:f2:de:98:aa:82:f0:33:20:12:7b:13:0f:d2:f5:89:
9e:de:fa:80:fa:8e:7c:e7:b6:d1:54:75:d9:23:7e:34:0b:3b:
67:30:91:62:98:5f:87:20:a8:60:23:f7:94:06:7c:10:09:29:
6e:ae:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org