Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Kunyt_BEAzI_rXVceRMlIecMW3U.roa
File: Kunyt_BEAzI_rXVceRMlIecMW3U.roa (raw, json)
Hash identifier: fWnVLCOUWz07SO7GT2mAkq00nH19r4NadjfcfkERneE=
Subject key identifier: 2A:E9:F2:B7:F0:44:03:32:3F:AD:75:5C:79:13:25:21:E7:0C:5B:75
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 048A4596
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Kunyt_BEAzI_rXVceRMlIecMW3U.roa
Signing time: Mon 27 Jun 2022 20:17:31 +0000
ROA not before: Mon 27 Jun 2022 20:17:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.139.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76170646 (0x48a4596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jun 27 20:17:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ae9f2b7f04403323fad755c79132521e70c5b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:de:30:c9:b7:5e:fa:23:c1:67:f3:2e:3d:
09:e0:00:98:6d:db:dd:e2:d0:61:ee:58:ed:91:ba:
1f:3c:9c:25:fa:02:c2:14:49:4a:f6:0b:c0:bf:7b:
79:f7:dd:4a:6f:6c:97:e0:38:d1:29:2b:23:2a:8d:
0b:3b:f2:e8:59:33:2d:51:b7:ba:5c:35:41:83:46:
59:35:38:44:de:90:00:70:65:e3:5d:6e:84:d8:58:
4f:6d:7e:4f:cd:9c:da:f7:d4:dd:1b:80:00:7a:13:
5d:c9:b9:f3:36:b7:8b:5a:ea:44:60:c7:c3:36:45:
09:cd:81:dd:3a:05:17:55:09:fc:81:02:1d:4c:84:
c6:c0:0c:3b:7d:7e:35:21:f0:bc:b8:93:18:9e:46:
f1:52:64:be:fa:9d:9a:82:26:ca:c1:64:25:ae:fe:
52:9e:7f:8e:b8:18:df:b3:cc:0a:c6:1d:68:82:17:
1d:61:6f:6b:cf:7e:f4:70:fe:54:a5:0c:d4:e4:8e:
79:6c:6b:5a:ed:3e:a7:2d:d6:70:19:f9:43:81:93:
6e:51:bf:8f:de:9c:f1:e4:e9:e7:06:72:33:ee:1f:
f8:55:83:e5:cf:51:fa:34:e4:5e:bb:d0:95:15:95:
33:03:87:f1:ef:8e:0f:f3:ec:93:33:31:21:a9:60:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:F2:B7:F0:44:03:32:3F:AD:75:5C:79:13:25:21:E7:0C:5B:75
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/Kunyt_BEAzI_rXVceRMlIecMW3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.34.0/24
Signature Algorithm: sha256WithRSAEncryption
56:43:23:34:65:1a:7c:1e:87:46:91:bf:30:88:5b:7d:c9:f4:
e6:0f:c9:00:23:23:34:fc:28:e6:d5:03:d2:ba:8f:cd:5c:ce:
f3:89:df:e1:ee:d1:5c:68:fa:a3:8e:67:21:e1:10:49:e7:2c:
01:ef:fb:fd:83:7e:0a:5c:93:53:df:75:b6:2b:11:02:dd:51:
d9:23:26:77:b1:a3:34:ec:d2:55:f0:2f:25:3d:de:81:84:c0:
f4:e9:3e:67:75:7f:19:2f:b6:69:68:1e:c8:15:ec:f6:5b:ea:
01:a8:f8:40:64:d8:31:d2:61:4f:b5:f5:d6:60:24:4b:d5:2c:
ed:57:02:3d:79:86:d2:d2:99:73:c2:b0:71:30:3d:b3:dc:6a:
e2:c5:12:df:dc:45:1b:c2:21:b2:39:ec:e9:bb:32:e1:26:55:
18:23:3e:bf:33:e9:d5:01:52:5f:cf:a3:d1:8e:d8:12:b2:6e:
c2:4b:be:6e:9a:83:66:f1:02:77:1a:7e:33:27:54:66:15:7a:
56:a4:59:be:f8:13:72:37:0c:b9:38:c7:5e:74:c5:bb:f4:12:
7e:3c:03:ef:85:02:e8:2d:00:09:8d:ec:27:dc:95:8e:d1:ac:
6b:45:ad:ea:c5:89:b2:0e:4c:08:bf:fe:75:ec:c9:ab:e9:19:
21:36:74:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBIpFljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTc2MmRiMTI4MmZmZDA4NDc2MTIzMjAzOGY4MWY1ZDI5ZTY0MGQ1MB4XDTIyMDYy
NzIwMTczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmFlOWYyYjdmMDQ0
MDMzMjNmYWQ3NTVjNzkxMzI1MjFlNzBjNWI3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKj3jDJt176I8Fn8y49CeAAmG3b3eLQYe5Y7ZG6HzycJfoC
whRJSvYLwL97effdSm9sl+A40SkrIyqNCzvy6FkzLVG3ulw1QYNGWTU4RN6QAHBl
411uhNhYT21+T82c2vfU3RuAAHoTXcm58za3i1rqRGDHwzZFCc2B3ToFF1UJ/IEC
HUyExsAMO31+NSHwvLiTGJ5G8VJkvvqdmoImysFkJa7+Up5/jrgY37PMCsYdaIIX
HWFva89+9HD+VKUM1OSOeWxrWu0+py3WcBn5Q4GTblG/j96c8eTp5wZyM+4f+FWD
5c9R+jTkXrvQlRWVMwOH8e+OD/PskzMxIalgMQ0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQq6fK38EQDMj+tdVx5EyUh5wxbdTAfBgNVHSMEGDAWgBS5di2xKC/9CEdh
IyA4+B9dKeZA1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VYWXRzU2d2X1FoSFlTTWdPUGdmWFNubVFOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvZjgxOTE1LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8x
L0t1bnl0X0JFQXpJX3JYVmNlUk1sSWVjTVczVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
ZjgxOTE1LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8xL3VYWXRzU2d2X1Fo
SFlTTWdPUGdmWFNubVFOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmLIjANBgkqhkiG9w0BAQsFAAOC
AQEAVkMjNGUafB6HRpG/MIhbfcn05g/JACMjNPwo5tUD0rqPzVzO84nf4e7RXGj6
o45nIeEQSecsAe/7/YN+ClyTU991tisRAt1R2SMmd7GjNOzSVfAvJT3egYTA9Ok+
Z3V/GS+2aWgeyBXs9lvqAaj4QGTYMdJhT7X11mAkS9Us7VcCPXmG0tKZc8KwcTA9
s9xq4sUS39xFG8Ihsjns6bsy4SZVGCM+vzPp1QFSX8+j0Y7YErJuwku+bpqDZvEC
dxp+MydUZhV6VqRZvvgTcjcMuTjHXnTFu/QSfjwD74UC6C0ACY3sJ9yVjtGsa0Wt
6sWJsg5MCL/+dezJq+kZITZ0OQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org