Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/KJRQnmyoAGY5rTcTOEFQnOeChds.roa
File: KJRQnmyoAGY5rTcTOEFQnOeChds.roa (raw, json)
Hash identifier: dPDAW+tJhhiqLcvODR+OytdIDyYunQYkzuWdGg79QGk=
Subject key identifier: 28:94:50:9E:6C:A8:00:66:39:AD:37:13:38:41:50:9C:E7:82:85:DB
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0FD861A8
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/KJRQnmyoAGY5rTcTOEFQnOeChds.roa
Signing time: Sat 01 Jan 2022 14:59:37 +0000
ROA not before: Sat 01 Jan 2022 14:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3302
IP address blocks: 185.133.209.0/24 maxlen: 24
185.197.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265839016 (0xfd861a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 1 14:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2894509e6ca8006639ad37133841509ce78285db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:97:5c:cd:77:cf:85:97:94:33:4b:f5:27:
79:a2:c7:10:e9:bf:9e:bf:ad:37:f3:54:14:dc:c4:
55:ee:c9:bc:71:05:f8:b3:cf:dd:d0:e3:ee:db:26:
56:ff:56:44:dc:28:83:71:02:65:b2:91:4a:94:a3:
a0:91:c9:c8:b5:07:f7:d6:9b:ac:e9:92:6d:e7:e5:
f2:44:fa:c2:6d:fa:28:1f:61:50:c8:4f:bf:74:b0:
63:13:99:af:ce:67:5f:af:de:19:9e:db:d0:0b:c8:
b6:25:a1:7e:d7:c4:eb:aa:bf:90:54:b3:47:80:c0:
60:6b:74:01:c7:b8:4f:19:3f:9c:51:7f:e0:25:8f:
58:ba:d9:a3:37:53:dc:3a:fd:f8:ee:b7:e7:9d:52:
73:cd:5f:ba:cd:07:bf:21:b3:f3:76:34:42:dc:c7:
d5:6d:19:8a:03:5e:86:ba:20:76:fb:44:91:c0:1b:
d5:20:a0:20:14:26:56:25:74:cc:3c:23:db:39:0e:
11:76:31:38:6f:61:1a:05:72:45:fe:ab:48:e3:eb:
d3:b2:ae:5c:c5:9f:21:ae:cd:2b:46:4a:75:08:85:
e2:7c:89:fc:d1:41:65:03:2c:ba:0c:4b:20:ac:1d:
61:ee:15:73:4d:b7:fb:51:5f:b0:da:07:75:3f:32:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:50:9E:6C:A8:00:66:39:AD:37:13:38:41:50:9C:E7:82:85:DB
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/KJRQnmyoAGY5rTcTOEFQnOeChds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.209.0/24
185.197.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c7:c6:87:88:a0:1b:4d:55:1a:a6:df:02:74:44:2c:9b:94:
f0:11:f8:69:c7:20:25:38:96:82:20:b9:be:b4:d1:53:9f:26:
88:ab:19:65:a4:6a:ec:ea:a1:76:91:3c:1c:5a:b1:bb:fe:8e:
29:57:ad:83:26:ad:0e:c4:d1:5c:db:f6:0a:1c:5f:79:70:e9:
6e:e9:7c:26:c9:1d:d7:35:29:6e:6b:a3:7f:d2:9c:17:a0:b3:
ab:61:93:06:46:65:08:14:7c:e0:31:68:ca:49:83:0b:7c:e2:
7f:51:8d:3c:4c:d7:97:4a:4e:3d:1a:4e:41:d9:01:b2:80:7d:
dc:3f:cd:48:30:0d:e9:79:19:f2:c2:fb:42:69:8e:af:a8:95:
b9:44:38:98:a1:bc:6e:5d:32:59:6f:0e:10:23:3e:58:9d:25:
ff:86:62:6b:31:94:91:bd:9d:7f:38:c3:28:1f:71:5a:9e:c4:
e5:d0:3c:00:b0:a4:23:72:98:85:e8:9b:af:14:d2:71:55:12:
cc:af:c1:23:8e:7c:bf:f5:9a:d2:df:e5:20:26:fa:6f:22:54:
88:f0:03:e0:70:b1:b1:3e:b0:3f:10:9c:11:b0:76:11:f3:17:
ef:a1:e5:8c:ba:0a:28:0c:8b:b9:33:6b:1d:b4:f8:93:e7:be:
a5:82:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:42 2023 by rpki-client on console-ams.rpki-client.org