Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/KFBLPAJ6ipWZ46mDqbvxxpu99oA.roa
File: KFBLPAJ6ipWZ46mDqbvxxpu99oA.roa (raw, json)
Hash identifier: EqRYso4dGBe+dqafzzm3Y/gZnx0kdW07u8id/bU4sSk=
Subject key identifier: 28:50:4B:3C:02:7A:8A:95:99:E3:A9:83:A9:BB:F1:C6:9B:BD:F6:80
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0182CFCCB6F584F2666BAB27CD3B17746B59
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/KFBLPAJ6ipWZ46mDqbvxxpu99oA.roa
Signing time: Wed 24 Aug 2022 12:21:15 +0000
ROA not before: Wed 24 Aug 2022 12:21:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211660
IP address blocks: 185.1.201.0/24 maxlen: 24
2001:7f8:10d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:cc:b6:f5:84:f2:66:6b:ab:27:cd:3b:17:74:6b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Aug 24 12:21:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28504b3c027a8a9599e3a983a9bbf1c69bbdf680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:7e:4d:54:81:47:8b:93:77:0e:1c:1f:36:
a3:99:70:dc:d5:1a:09:8b:21:63:8e:aa:0b:64:34:
4d:de:d4:99:d3:28:61:7c:a4:d5:c8:14:79:87:8f:
a1:0c:4c:f9:35:45:45:39:5f:1d:65:4a:e9:17:80:
e7:05:2e:dd:f3:c0:fd:ce:f4:11:0f:7e:a7:59:77:
88:7f:70:97:de:f0:fa:ff:18:fc:e9:ac:f5:f1:5a:
a4:92:f6:70:9a:83:4b:f4:1e:76:73:61:70:1c:b8:
cd:6e:d4:c0:8f:63:f1:5c:c6:cd:d3:5c:30:be:ee:
3d:70:a0:ae:c3:92:8a:b9:ab:9c:ac:55:e5:d4:99:
a1:9d:2e:2a:ec:83:14:ae:f8:82:59:94:9f:a6:91:
71:e3:3e:b6:fe:7f:c0:f6:86:20:ba:ba:65:37:4a:
40:01:b6:61:ea:05:2b:8d:8b:33:26:63:d1:08:2c:
a1:68:ee:34:9f:4f:62:ef:80:60:e1:41:82:12:ae:
98:b2:19:4a:78:ff:e6:7f:ea:0b:c4:a2:c0:5a:cd:
ac:af:05:bf:ff:49:88:76:78:ca:6a:94:28:df:4a:
08:e4:f8:e4:71:16:10:0c:ac:71:90:6d:f4:e7:6f:
9a:d0:24:fc:cd:d6:d1:45:72:e0:dc:15:73:4a:05:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:4B:3C:02:7A:8A:95:99:E3:A9:83:A9:BB:F1:C6:9B:BD:F6:80
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/KFBLPAJ6ipWZ46mDqbvxxpu99oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.201.0/24
IPv6:
2001:7f8:10d::/48
Signature Algorithm: sha256WithRSAEncryption
26:fa:ac:73:24:90:b2:ae:56:23:22:60:2a:c8:94:76:36:bd:
21:55:92:59:71:63:9b:75:9b:e9:30:f2:32:08:50:79:0e:a7:
9d:e5:4f:3d:ab:0e:bc:4a:7e:3c:27:79:ed:40:7f:04:55:1c:
46:14:03:fc:06:87:b7:c7:b8:e9:ca:61:83:0e:43:a9:5c:ac:
e3:ad:be:4b:da:ca:39:c3:65:e6:41:0d:dc:12:a1:a9:22:1a:
19:df:5b:af:df:0c:b5:31:d7:a1:ff:16:63:5a:2f:dd:9a:12:
43:e7:41:eb:9d:f1:fd:ca:db:97:d3:c3:24:53:4d:8a:c6:88:
63:5b:28:19:3b:b6:82:17:7e:c2:bd:f6:57:52:6f:cd:8f:ef:
b2:ad:a2:8d:b7:20:19:ec:dc:26:28:2e:67:a9:c7:d3:78:5a:
dd:82:39:7b:ea:e0:a2:86:ab:02:70:94:01:e5:26:45:98:92:
63:a6:bd:35:e9:da:4d:16:70:c2:d3:b8:3f:e9:7d:bf:1f:42:
bb:ac:71:fe:71:6f:2f:47:e9:0c:47:3b:a5:6f:8b:64:78:7e:
44:78:d0:15:c4:c9:11:9e:b0:a6:41:62:b9:50:e0:e0:93:85:
d4:00:e6:30:9c:fc:d8:ec:1e:93:ef:d2:99:8c:63:8f:ba:c3:
e1:85:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org