Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/KHB9x21HODMTIeafrLWz2yuJWaY.roa
File: KHB9x21HODMTIeafrLWz2yuJWaY.roa (raw, json)
Hash identifier: 7/Xp4Vz3sg8sqOgP39VRylnf49NWsuGwfAPnr5yC6DI=
Subject key identifier: 28:70:7D:C7:6D:47:38:33:13:21:E6:9F:AC:B5:B3:DB:2B:89:59:A6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0853C850
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/KHB9x21HODMTIeafrLWz2yuJWaY.roa
Signing time: Wed 02 Feb 2022 10:15:32 +0000
ROA not before: Wed 02 Feb 2022 10:15:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
83.147.212.0/22 maxlen: 24
83.147.216.0/23 maxlen: 24
83.147.222.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
94.241.136.0/21 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
178.253.40.0/22 maxlen: 24
178.253.38.0/23 maxlen: 24
178.253.52.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139708496 (0x853c850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 2 10:15:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28707dc76d4738331321e69facb5b3db2b8959a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:ad:1a:c6:66:28:f8:01:3c:22:b9:0d:10:
0e:14:3f:2b:d9:7c:01:27:d6:b4:53:58:50:b5:6d:
e8:52:71:83:e3:11:c4:81:fd:ac:88:3f:98:ca:dd:
c4:45:37:31:fa:d3:77:a4:b9:d0:ee:89:89:8b:80:
4f:39:e5:54:05:12:6d:e7:d7:81:e8:db:8c:2e:24:
7c:8c:9e:49:98:e6:7e:85:e5:2d:97:86:5a:c3:46:
b1:cf:b8:4f:8b:8f:59:38:82:5d:5a:24:45:d9:f8:
85:8a:3c:eb:3e:f1:2b:8c:57:7b:a3:99:af:ed:2e:
79:aa:b1:4f:21:e8:31:9a:06:18:23:27:b3:6e:cb:
1a:26:d0:e3:2d:84:62:94:6e:db:64:a4:6f:63:49:
ec:0d:a4:72:04:8f:bd:05:35:da:6e:d7:f4:9c:9a:
4d:3b:53:80:a9:05:e2:a6:03:ce:09:94:d7:8b:82:
d4:5e:2b:81:eb:ef:05:4c:28:76:01:a7:1e:4d:37:
3f:1b:3d:ec:8c:27:37:71:b7:c9:33:00:74:57:11:
e3:4c:56:52:0d:ea:de:1e:0b:af:0d:42:fd:02:d3:
5a:62:98:ed:52:a3:10:d8:fc:29:d4:66:5a:af:6d:
98:9a:8b:54:72:9b:cd:75:e0:63:d2:4c:74:a5:e3:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:7D:C7:6D:47:38:33:13:21:E6:9F:AC:B5:B3:DB:2B:89:59:A6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/KHB9x21HODMTIeafrLWz2yuJWaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0-83.147.217.255
83.147.222.0/23
83.147.232.0/22
83.147.240.0/20
91.186.194.0-91.186.207.255
91.186.212.0-91.186.223.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.12.0/23
178.253.32.0/23
178.253.38.0-178.253.45.255
178.253.52.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e5:c0:09:a7:a0:dc:82:73:06:96:a1:17:f0:ae:ff:eb:25:
4b:2f:f3:a4:34:6d:92:81:b9:dc:15:a1:3f:a8:6e:87:d0:a4:
6f:54:06:ad:b6:d4:74:c4:ee:42:98:b2:79:93:be:8e:2f:ca:
fd:35:99:5b:8c:f6:62:bb:19:61:d7:72:c2:f6:25:ba:ff:77:
0c:9d:35:3a:68:cf:e2:11:d3:db:f8:e8:2b:28:43:b8:45:9a:
a4:9c:8d:fb:0c:f1:eb:8d:b0:93:ee:6a:7b:cd:64:ba:c2:45:
ff:02:f3:7b:5a:c0:b4:13:f4:c7:1f:83:d1:a8:03:41:3f:6c:
3b:ca:c4:63:cb:25:b7:3d:e1:af:ed:e9:07:6b:91:5e:c3:08:
f8:2e:de:73:fa:36:b0:6f:a9:a8:63:ee:40:65:87:a5:7e:40:
3a:f2:d3:25:88:c1:21:c3:76:8a:65:cb:b1:e7:70:0c:f8:2f:
cf:20:72:0f:62:5d:e6:82:c7:e6:3e:b7:02:c9:bc:f4:bf:bd:
59:26:d3:70:df:3e:14:c9:82:50:67:d7:94:60:e8:46:64:ed:
65:16:4c:64:9b:bf:4a:a6:7c:d3:c8:3e:aa:05:4a:d7:13:77:
53:d1:40:e2:70:88:b9:87:dc:b6:1a:e5:ad:73:e7:c6:c5:73:
4b:bc:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org