Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/kyio14ZiIBSRcvEGjUc5WGW43jw.roa
File: kyio14ZiIBSRcvEGjUc5WGW43jw.roa (raw, json)
Hash identifier: 6l27hi2ADcSExXApNfOTzyhnoBYFj55P9QRbfXM/FM8=
Subject key identifier: 93:28:A8:D7:86:62:20:14:91:72:F1:06:8D:47:39:58:65:B8:DE:3C
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 0183A847FB5CC0B9C3482ECEFE00898B1ABE
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/kyio14ZiIBSRcvEGjUc5WGW43jw.roa
Signing time: Wed 05 Oct 2022 13:13:53 +0000
ROA not before: Wed 05 Oct 2022 13:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 85.11.163.0/24 maxlen: 24
85.11.161.0/24 maxlen: 24
85.11.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:47:fb:5c:c0:b9:c3:48:2e:ce:fe:00:89:8b:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Oct 5 13:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9328a8d7866220149172f1068d47395865b8de3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:49:3d:95:0e:2b:14:f9:e1:be:e1:9b:a2:
73:07:2e:d2:f2:31:df:c1:92:28:0f:f2:af:ab:dc:
e3:75:90:53:2f:b5:94:11:da:8d:c4:49:3a:0e:67:
3a:05:cc:54:8b:f8:f6:cd:0f:c4:1f:89:b3:3c:63:
e9:dc:e0:e7:75:b0:59:a0:51:2a:22:6d:f3:bc:53:
d8:bb:3b:a0:cd:d6:b8:07:31:c4:21:9f:02:99:5f:
44:33:c2:59:48:19:87:e9:0a:36:f6:f0:e7:0e:21:
5b:0e:7f:66:5c:a5:fd:b8:2b:c5:46:89:7e:8b:f6:
db:49:b0:dc:f8:74:05:0f:7c:95:eb:99:b6:c9:ea:
94:90:66:6e:59:bc:2f:58:2b:71:1b:1c:0f:34:2f:
6e:66:03:63:91:bb:72:25:d4:fd:9e:20:84:ad:66:
52:80:bf:6b:67:a6:36:1b:fc:e8:de:98:c9:66:7a:
06:b0:aa:3a:20:a6:98:f2:8c:4b:f2:39:fe:2f:97:
51:75:69:ab:76:d7:c2:43:2e:ae:fd:33:78:55:fd:
39:07:27:be:e7:26:0d:78:89:73:8b:72:1a:b2:72:
1f:56:5d:4b:29:64:45:7c:6e:14:0e:e2:cb:8d:cf:
e6:33:0a:66:7d:3d:a7:2f:ba:69:5c:44:a9:68:a1:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:28:A8:D7:86:62:20:14:91:72:F1:06:8D:47:39:58:65:B8:DE:3C
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/kyio14ZiIBSRcvEGjUc5WGW43jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
85.11.163.0/24
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
60:44:fd:dd:f1:50:24:5e:72:70:d9:3b:50:7f:b3:93:b7:5c:
57:92:fb:ee:4c:7d:4d:d1:74:27:69:e1:ae:e2:be:b5:31:9a:
6d:fd:73:77:56:40:9c:4c:66:3d:e3:7e:74:cc:0f:9f:5f:90:
56:35:8c:c6:b1:a6:bc:92:51:a5:58:d4:46:06:f2:ca:2f:fd:
81:fd:99:eb:42:5f:c2:61:d6:fe:d3:6e:76:77:79:01:06:cf:
0e:44:e3:0c:e6:75:7a:7c:6f:46:0e:ac:d3:54:e8:0c:5b:13:
b4:97:ec:bb:3a:0e:29:e1:95:6d:9e:de:cc:86:bb:16:bf:00:
7d:43:4e:ae:1b:04:03:c3:86:c7:d1:c2:36:c4:a8:19:bb:91:
4b:00:84:09:1f:75:09:ff:7b:6f:7b:35:c8:13:ab:d3:54:35:
04:10:22:1a:63:2f:e5:d2:e7:72:28:25:90:e1:64:ff:d6:42:
fc:33:27:70:91:4b:36:7d:a0:f0:78:09:4a:8b:d4:e6:f6:b7:
e7:a6:00:1d:bb:c6:2f:1a:e8:25:41:cc:31:fd:82:4f:6d:96:
5b:59:4b:24:78:95:ac:37:08:1b:3a:b4:5f:31:92:58:c0:f6:
53:a6:4b:00:e5:a8:cc:49:60:17:1a:7f:c3:19:e1:fe:87:b9:
14:2e:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:56 2024 by rpki-client on console-ams.rpki-client.org