Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/KbOAltxDXTvWzNl3RZ5XIyZjqck.roa
File: KbOAltxDXTvWzNl3RZ5XIyZjqck.roa (raw, json)
Hash identifier: TZIPO55xwqb+bz3iCJlK8SYQScPUSd9yVtgomTcgyoI=
Subject key identifier: 29:B3:80:96:DC:43:5D:3B:D6:CC:D9:77:45:9E:57:23:26:63:A9:C9
Certificate issuer: /CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Certificate serial: 0106976E
Authority key identifier: D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/KbOAltxDXTvWzNl3RZ5XIyZjqck.roa
Signing time: Sat 01 Jan 2022 00:56:48 +0000
ROA not before: Sat 01 Jan 2022 00:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.234.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17209198 (0x106976e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Validity
Not Before: Jan 1 00:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29b38096dc435d3bd6ccd977459e57232663a9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:ce:3f:63:88:90:ae:65:2f:bf:5e:7d:4c:
22:8b:52:63:89:ae:9b:82:64:90:4d:e7:a5:d2:a8:
d3:1d:10:a6:be:a4:49:00:8c:35:c7:9a:0c:9f:9f:
5f:25:7c:67:7d:ba:39:d4:83:a6:cc:7b:16:e6:dc:
a9:09:d0:f8:77:39:1b:2f:6d:d6:bc:5d:55:1c:f3:
04:28:c2:9b:33:02:e3:b6:6e:a8:98:72:56:80:de:
c0:12:a1:0a:08:7a:db:6f:c3:c7:12:03:a6:69:c0:
8c:3a:5c:8a:cd:05:33:cf:83:0f:26:43:4a:d0:51:
38:22:f5:d1:76:93:38:a6:84:c7:8f:ce:f3:22:e2:
fe:27:6a:e8:a4:7e:06:13:72:aa:a4:c9:95:b1:8e:
00:6a:96:ce:6f:d3:f8:d7:c0:01:01:11:34:86:7e:
26:8e:3c:40:d9:26:96:36:52:a5:87:c5:b2:c6:da:
a7:72:ec:ec:5d:22:31:8a:00:2d:8f:11:45:a5:5c:
0a:c4:f1:69:67:74:9a:fd:13:d2:e8:bd:bd:f9:64:
15:56:fe:d4:26:00:3b:d2:e2:fc:8e:0d:1a:67:17:
ef:0c:5c:5e:31:f7:30:d5:c4:7c:1d:23:dc:32:0b:
41:61:8a:f0:0b:da:71:38:57:cc:fc:ed:9c:6a:a3:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:80:96:DC:43:5D:3B:D6:CC:D9:77:45:9E:57:23:26:63:A9:C9
X509v3 Authority Key Identifier:
keyid:D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/KbOAltxDXTvWzNl3RZ5XIyZjqck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.12.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f8:a4:20:bd:ef:75:85:fd:a7:f8:5e:76:4e:f7:de:7b:7f:
2d:25:bc:42:4f:51:bf:e0:6a:8b:de:e0:be:82:8f:76:15:e7:
52:70:88:37:60:f8:35:77:d4:35:9a:a6:40:6a:32:e9:4d:01:
87:01:90:b2:68:ed:57:c3:66:48:18:83:c4:6e:95:44:05:54:
63:1d:2b:e0:e9:2a:cd:f2:31:ce:8a:cf:19:82:d4:c2:40:4d:
b5:74:50:9c:11:89:ec:9e:a2:1a:f8:31:da:e0:42:85:eb:62:
84:93:d9:d1:95:b5:e3:e2:72:a5:d1:1b:91:f9:94:83:66:f1:
24:a6:ef:b3:cd:39:6a:67:e7:7d:fc:da:f7:33:bc:13:b2:a0:
f9:8d:94:c6:2e:f2:7e:23:af:88:7d:a6:5d:b8:26:cf:14:28:
29:13:46:2b:32:c2:33:e1:2d:44:c8:c9:5f:60:6a:d0:c4:25:
8f:8f:c9:21:1d:28:33:a5:d2:66:9e:2c:97:ae:74:3e:70:c1:
78:aa:4e:d1:72:5d:0a:bd:d6:1c:ff:76:da:f9:a8:a8:69:ff:
a9:9d:98:b6:36:27:94:43:f1:9a:bd:67:ca:11:71:03:ed:cb:
3f:81:0b:49:34:fa:20:62:2b:b5:e7:f2:6e:bc:19:78:3c:14:
2f:32:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-ams.rpki-client.org