Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/Krh1MR1DfdwA9UBEFZTmVbWoiPk.roa
File: Krh1MR1DfdwA9UBEFZTmVbWoiPk.roa (raw, json)
Hash identifier: s6mEcH/0kbF9Bj3qgQRpKTqRhiF/lMhjypmK7RZ73hc=
Subject key identifier: 2A:B8:75:31:1D:43:7D:DC:00:F5:40:44:15:94:E6:55:B5:A8:88:F9
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 0293D858
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/Krh1MR1DfdwA9UBEFZTmVbWoiPk.roa
Signing time: Sat 01 Jan 2022 06:05:54 +0000
ROA not before: Sat 01 Jan 2022 06:05:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59740
IP address blocks: 185.58.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43243608 (0x293d858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Jan 1 06:05:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab875311d437ddc00f540441594e655b5a888f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:00:f8:f3:a8:d7:26:b8:a2:76:28:8e:eb:
d3:8a:7a:3b:df:51:8b:8f:3f:41:c9:19:11:1e:66:
61:28:95:f4:17:99:e4:8c:4c:03:43:e1:1d:0c:53:
08:c6:9f:23:05:f9:0a:ca:c5:6b:50:a9:e8:68:20:
78:1e:83:a2:bc:59:cd:eb:0c:f3:c3:9a:ac:24:f4:
fa:ce:45:7b:c6:42:8d:d1:23:4c:10:46:92:a2:c5:
a5:9e:98:d6:0e:93:9d:c5:97:c9:14:e4:1f:6d:46:
e8:5e:db:b8:1f:37:1d:ec:e7:ca:0b:76:20:7e:87:
a4:34:8a:2f:dd:83:b4:bb:59:6c:89:14:3b:6a:9a:
71:dd:50:1e:17:c8:4e:c5:9e:24:e4:6c:51:c9:43:
26:50:b8:7e:af:fe:fb:98:47:7e:7d:42:09:d9:bb:
be:16:7c:3b:41:30:18:91:4a:b6:25:f4:33:f6:a6:
fd:da:21:81:0b:c6:fb:dc:aa:6c:c7:11:f3:ce:18:
87:48:08:7a:71:2a:f9:7f:3e:30:4d:31:72:72:51:
41:1f:13:57:2b:fa:08:e8:a0:b1:e7:a6:53:64:28:
c1:d8:e2:45:d8:a8:88:56:b9:14:c2:63:26:d5:3a:
6b:09:cd:82:8f:48:f8:72:41:39:ed:56:47:f2:82:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:75:31:1D:43:7D:DC:00:F5:40:44:15:94:E6:55:B5:A8:88:F9
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/Krh1MR1DfdwA9UBEFZTmVbWoiPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.252.0/22
Signature Algorithm: sha256WithRSAEncryption
77:bb:cc:ce:96:21:78:d2:e1:64:66:9d:c2:79:e1:42:99:9b:
12:27:dc:2d:a8:47:46:63:34:83:d5:a9:5c:8d:7f:75:13:f9:
65:fe:ac:22:cb:91:d1:07:ad:6d:ae:0f:f7:d3:de:95:5b:18:
1b:65:71:70:9c:99:8a:45:98:1d:99:ee:aa:16:a7:18:c9:92:
b1:28:00:55:9f:40:e5:72:bb:9b:08:6f:bc:d5:ae:e5:93:01:
aa:89:69:84:bd:a5:26:25:7b:ad:33:d4:5d:00:e3:e2:72:26:
d8:71:95:5e:65:e1:c6:26:6c:e6:a7:41:3b:1b:4e:3e:37:95:
bf:7f:07:40:0c:a1:52:4f:e5:ee:1a:ac:8f:63:58:1b:b5:aa:
36:94:3f:0e:65:bc:c5:31:51:74:ba:5a:5f:30:b7:b3:fe:d2:
2c:92:69:76:c0:96:9b:d4:bd:91:a8:a8:c1:3e:dd:db:4a:eb:
a5:85:55:41:6c:49:d2:27:c0:52:83:d7:c9:09:96:45:0c:f4:
da:3e:7e:d9:19:0b:09:cb:5c:82:ca:74:72:ea:a0:63:06:23:
d7:92:e5:31:66:5e:52:09:91:9f:96:c3:bc:2c:db:98:f7:e6:
7c:7d:fc:4e:c6:69:4e:26:84:53:2a:79:4b:86:71:59:1f:ca:
99:8d:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org