Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/Kbxg-EK7RqTo7JR7y4j2iui3lBg.roa
File: Kbxg-EK7RqTo7JR7y4j2iui3lBg.roa (raw, json)
Hash identifier: RuLX99kCBlYCuWTSpy4XSIv8dgkhwMEQAcM/6b2vQcg=
Subject key identifier: 29:BC:60:F8:42:BB:46:A4:E8:EC:94:7B:CB:88:F6:8A:E8:B7:94:18
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 367367A2
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/Kbxg-EK7RqTo7JR7y4j2iui3lBg.roa
Signing time: Mon 27 Jun 2022 03:53:49 +0000
ROA not before: Mon 27 Jun 2022 03:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31712
IP address blocks: 195.153.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913532834 (0x367367a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 27 03:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29bc60f842bb46a4e8ec947bcb88f68ae8b79418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:59:f0:e5:4e:21:b2:e4:85:62:9a:04:c9:
da:da:2c:62:ac:31:48:30:2e:25:04:10:77:c4:4e:
09:ca:3c:3d:ab:dc:ee:46:3b:51:f0:7c:cc:96:d1:
00:24:fb:0e:5c:40:63:c7:1e:cf:70:83:72:ed:87:
42:03:52:45:70:16:37:b0:c6:14:e9:b7:bd:e6:05:
d2:9e:4b:59:aa:f7:8c:69:47:a6:3a:42:8a:9e:f2:
34:ce:0f:bb:8e:a0:e6:ac:94:2e:a9:00:a3:ea:43:
a1:9b:a7:30:74:c8:b6:9d:42:22:77:c3:17:f6:aa:
90:6d:dd:b7:ac:8b:27:6e:18:f3:be:d6:28:d3:39:
fe:f6:0d:5b:ca:2e:5b:e8:6d:d9:51:5a:7a:e2:4c:
72:1f:4a:78:93:3e:e7:ea:7d:c1:fa:48:01:4e:95:
d4:ad:34:11:0f:d7:b6:bc:9f:fa:3f:f8:3a:3e:b8:
37:4e:48:6d:38:5a:c5:33:6d:e1:37:bb:0a:c1:01:
3d:11:58:b9:93:0b:d3:c3:5c:b9:6f:76:f0:42:4f:
bd:03:d5:03:78:0a:44:d1:af:29:75:ba:aa:ba:c2:
b6:d2:fe:d2:b6:35:43:f1:37:3c:14:52:6b:bb:ec:
b2:2b:7b:e2:80:2b:4f:c9:25:90:9b:cc:5b:e3:5d:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:60:F8:42:BB:46:A4:E8:EC:94:7B:CB:88:F6:8A:E8:B7:94:18
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/Kbxg-EK7RqTo7JR7y4j2iui3lBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.153.19.0/24
Signature Algorithm: sha256WithRSAEncryption
20:07:cd:d0:85:4a:c1:8b:11:4a:79:ea:92:07:9b:d6:dd:f1:
70:fa:a4:6a:7d:74:f6:4f:20:92:90:ae:a0:7c:11:12:29:c5:
46:d7:17:25:50:c8:83:3d:d4:51:03:ad:c8:6c:e9:89:1b:d2:
79:fb:a6:b3:0a:8d:7f:f2:56:7b:4c:81:67:61:ef:9b:92:cd:
d6:13:87:a5:31:c7:15:b4:94:94:b3:d3:23:5f:b4:4c:44:3a:
a0:4c:aa:4c:5e:09:6c:78:f4:1b:b1:4d:f1:72:48:a6:b0:bb:
b8:6a:1c:b5:bb:7b:b3:d9:f1:d0:fe:f0:df:f9:ea:02:4b:0f:
13:23:b6:60:f7:74:1a:94:f8:7d:0d:63:9b:ec:08:69:61:7f:
bf:ea:52:92:fa:60:1d:a9:56:84:87:95:e3:09:34:85:6b:a5:
4d:f4:2f:97:0e:69:9f:ec:d0:72:c3:49:14:27:2e:a8:0d:c4:
35:db:b7:76:73:26:b0:a7:31:aa:ce:1d:28:7c:7c:00:c8:5c:
f2:8d:56:5b:c9:d4:50:34:5a:85:f3:07:55:d7:dc:07:a8:45:
ef:35:ba:21:ee:4a:13:1e:fb:34:b5:59:b6:57:a9:8c:7b:6c:
18:7f:76:96:55:1e:45:48:a8:8b:f5:00:36:41:02:b1:9f:be:
c5:90:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:07 2024 by rpki-client on console-ams.rpki-client.org