Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/KxjHO9wL6cRlzz5esZM5U6mONrM.roa
File: KxjHO9wL6cRlzz5esZM5U6mONrM.roa (raw, json)
Hash identifier: czsMsEKWB0rnM0iKHpUDmwuBJa2TA6JjfwhT44GnTpU=
Subject key identifier: 2B:18:C7:3B:DC:0B:E9:C4:65:CF:3E:5E:B1:93:39:53:A9:8E:36:B3
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 018558F4E42222F79A3DDFF049D79E75E108
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/KxjHO9wL6cRlzz5esZM5U6mONrM.roa
Signing time: Wed 28 Dec 2022 13:38:42 +0000
ROA not before: Wed 28 Dec 2022 13:38:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.234.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:f4:e4:22:22:f7:9a:3d:df:f0:49:d7:9e:75:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Dec 28 13:38:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b18c73bdc0be9c465cf3e5eb1933953a98e36b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:40:8c:de:8a:06:24:b9:79:17:16:d6:aa:
56:d3:31:aa:74:26:30:17:ba:60:b1:32:b2:22:fe:
dd:9f:32:39:a5:a4:11:c1:ca:22:33:ff:7f:2c:c7:
b0:6e:4a:4c:c6:4b:31:4e:14:bb:fa:b6:8f:2b:10:
bd:47:85:61:60:58:0f:7a:6a:aa:c9:97:7a:23:03:
48:7a:96:43:24:01:2e:b9:f4:26:9c:d8:77:ec:66:
cf:69:d1:8e:12:63:a7:4e:84:80:1d:7a:14:35:10:
b2:74:a4:8a:d9:c7:1b:53:73:e2:60:17:a1:76:1a:
32:84:31:eb:b3:e6:ce:f8:15:a1:c6:49:63:3a:94:
04:0f:a1:40:db:25:ae:f7:c2:57:b6:fa:b8:4b:41:
db:ab:d6:0a:84:59:81:4b:59:37:9f:5e:46:3d:6d:
7a:67:71:25:c5:93:4b:94:20:e1:92:3b:cb:f0:0a:
a4:00:8b:6e:2c:13:8b:8a:4d:56:4e:b7:5c:73:bb:
c1:37:84:b9:78:d9:93:f8:b8:b6:4f:cb:c3:26:ef:
94:10:a4:44:51:9b:b4:1b:04:12:13:e8:0e:5a:2b:
53:ef:fe:59:c1:8c:cf:ce:2b:6a:2d:b4:72:13:c7:
26:a9:e1:9d:64:4c:9d:e9:1d:a0:0d:68:f5:b3:c2:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:C7:3B:DC:0B:E9:C4:65:CF:3E:5E:B1:93:39:53:A9:8E:36:B3
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/KxjHO9wL6cRlzz5esZM5U6mONrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:db:14:e6:02:9c:1b:90:49:49:44:31:81:7a:da:23:8e:
0a:5a:74:fd:4a:d0:26:97:41:ad:45:10:be:f6:be:44:df:77:
8f:40:9c:4b:f1:20:c1:16:38:c1:a7:a2:61:78:2e:2a:5f:76:
c9:4c:e4:31:53:4f:9f:3e:aa:be:74:f3:75:4a:02:3d:73:69:
b0:c2:60:c3:b5:89:78:47:2a:d4:4c:a3:7a:ec:c2:19:37:53:
15:7a:f4:fe:8a:dd:6b:ee:d0:9d:a3:d7:05:36:6a:4e:9b:ec:
1d:a0:f2:5e:18:5a:70:85:76:80:f1:1d:40:56:33:69:87:ae:
9d:4f:99:4e:ab:4a:a9:4a:5c:80:86:29:c8:8c:8b:f6:c6:56:
58:c9:e4:f1:cf:c1:f9:44:f9:e5:c0:59:a5:08:84:7e:e0:2a:
c5:c5:19:2a:d3:77:dc:9a:83:5d:a8:fa:c6:1a:59:d4:a3:50:
bd:b5:87:c3:79:9a:a6:54:df:3f:e0:f0:35:eb:07:fb:7a:e1:
3a:15:d7:75:87:e6:56:04:94:ee:22:75:5d:24:16:d2:b6:d0:
e1:bb:c4:09:89:2e:e3:53:96:76:a4:9d:2c:d2:ba:5b:2e:6f:
51:c7:a9:5a:c2:d4:0a:79:77:1f:e8:c3:43:97:b9:28:5a:40:
0a:25:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:37 2023 by rpki-client on console-fra.rpki-client.org