Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KiicxZo_JKwFhbauWsqXxkAEy98.roa
File: KiicxZo_JKwFhbauWsqXxkAEy98.roa (raw, json)
Hash identifier: qiTde0GSrCy6vVm+752ds80vT6/4SB0fxYh2tpvlVpo=
Subject key identifier: 2A:28:9C:C5:9A:3F:24:AC:05:85:B6:AE:5A:CA:97:C6:40:04:CB:DF
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 06EDB9FA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KiicxZo_JKwFhbauWsqXxkAEy98.roa
Signing time: Fri 20 May 2022 15:17:30 +0000
ROA not before: Fri 20 May 2022 15:17:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44437
IP address blocks: 185.244.24.0/24 maxlen: 24
2a05:1080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116242938 (0x6edb9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: May 20 15:17:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a289cc59a3f24ac0585b6ae5aca97c64004cbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ea:3c:19:70:8e:01:3e:7a:e3:0a:7a:e5:53:
b4:80:be:d4:4d:4e:56:41:67:5e:2c:1d:fa:7b:c6:
ba:4c:5a:ee:e4:65:db:88:3b:6b:c7:8a:0c:19:97:
f0:55:26:87:f9:81:9d:8b:6d:6e:5f:dd:bc:52:cf:
87:d2:23:7b:07:44:00:96:81:bc:ee:2b:eb:34:87:
2c:ee:5c:06:b0:2d:ab:6f:88:6d:a6:ac:a0:e0:7c:
7e:7c:22:5e:2f:0b:89:43:5e:4e:4a:fc:5b:13:51:
45:ab:7b:cc:4d:ec:b7:60:b8:3b:03:43:ef:e0:fa:
56:37:f4:13:73:ea:de:b8:68:d6:98:82:c0:9a:67:
2e:fe:f2:2e:ad:09:b5:84:d2:18:a0:8d:2e:6e:ba:
04:64:88:77:8d:8e:f7:46:10:db:00:28:e1:39:ab:
bb:6b:ff:a5:e9:e5:88:05:00:70:72:7a:1c:c3:2c:
8c:3e:3a:8b:2e:ca:64:de:73:f0:e1:b0:c9:95:0f:
76:7d:3e:ff:f3:b0:a2:b4:b9:d9:0b:6f:58:f7:38:
4a:02:d3:c0:f5:3c:e1:78:1c:f8:21:eb:d3:f3:9b:
b1:cd:80:c1:60:21:ac:50:66:29:1d:3c:24:05:5f:
7b:43:42:e5:07:91:d9:e6:1f:8b:63:08:eb:48:45:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:9C:C5:9A:3F:24:AC:05:85:B6:AE:5A:CA:97:C6:40:04:CB:DF
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KiicxZo_JKwFhbauWsqXxkAEy98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.24.0/24
IPv6:
2a05:1080::/32
Signature Algorithm: sha256WithRSAEncryption
37:7d:11:41:57:a7:20:96:02:d1:b3:59:a1:b0:95:6f:85:5e:
ab:89:21:cd:f6:af:36:e4:35:ef:98:7a:a9:ce:e9:e0:82:75:
12:86:c4:de:b2:03:0d:fa:e5:eb:9f:09:19:4f:11:cd:ca:93:
43:4a:cc:ea:9b:01:b4:ab:62:7d:60:6d:f7:45:fd:e5:b5:83:
99:e1:4b:5d:b6:72:dc:c5:9b:7b:59:98:44:ad:f9:14:29:ed:
22:40:48:54:bd:b0:0f:08:d9:6a:1c:0e:52:ab:36:d5:dd:22:
a1:50:73:3b:61:11:7e:2a:ae:b2:fc:1c:95:81:c5:69:86:2d:
b9:d7:6a:3d:57:4f:e5:7a:90:b3:61:d7:8f:f6:33:f3:79:ff:
83:27:80:c2:ac:79:5e:0a:3c:77:53:ad:15:8c:00:84:99:24:
73:ae:24:30:72:22:40:12:c9:27:85:b9:bd:83:8b:b6:ed:c7:
54:a8:7c:af:41:be:62:bc:4f:69:30:40:a2:a6:03:48:8a:9d:
e5:6b:aa:6d:99:9c:9f:66:4d:eb:50:03:33:2a:cc:8c:a9:74:
6e:c4:31:9e:2f:15:67:3f:ab:d6:28:07:5d:62:da:3c:ea:7c:
d4:83:43:05:ca:14:85:d4:dc:91:3e:33:c7:4c:a8:ea:01:14:
28:97:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org