Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa
File: Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa (raw, json)
Hash identifier: twgOSwOymNbqh16661B3Fomn2gnWQ9naWZqdE/wdgTk=
Subject key identifier: 2A:4E:9C:DD:44:2E:0B:62:60:60:22:D0:70:73:C2:54:9C:F2:58:42
Certificate issuer: /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial: 030BC334
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa
Signing time: Sat 01 Jan 2022 12:56:27 +0000
ROA not before: Sat 01 Jan 2022 12:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 185.223.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51102516 (0x30bc334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Validity
Not Before: Jan 1 12:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a4e9cdd442e0b62606022d07073c2549cf25842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:96:0e:4b:10:e1:b3:13:c2:ed:bd:ca:bd:
07:11:46:9d:02:66:b4:d5:e3:bf:9c:70:94:e6:29:
bc:5f:83:93:72:ff:16:1a:fd:68:af:77:3d:09:ea:
8d:56:88:05:5e:5b:e9:d9:9b:c3:b4:ad:18:22:ec:
78:3b:41:e9:1d:86:f5:20:08:e0:e4:c4:5c:24:6a:
f5:ba:01:4c:ab:5a:56:6f:3d:1c:f2:a6:e9:60:2d:
e6:03:4b:31:ae:f8:e1:10:51:0b:09:08:99:ed:12:
36:3d:94:c9:7d:34:3c:2b:83:d4:f6:67:26:3d:1b:
b4:03:19:00:73:8b:eb:f2:91:f6:14:b0:e4:c3:e4:
96:3b:3a:fc:b8:3d:bf:ea:b2:c5:03:10:22:0b:db:
e9:83:2a:28:14:c7:60:fb:b8:bd:f0:1f:06:c0:d0:
dc:8c:33:34:ca:91:19:e9:b5:ca:28:f0:9a:ae:79:
95:27:9f:9e:df:86:28:bd:a4:12:62:cd:99:b3:7f:
1a:d6:ab:82:d4:94:db:22:aa:cf:03:d0:d2:1e:8e:
4b:c2:69:07:d7:cd:bb:cb:1c:68:41:a5:7d:b3:27:
04:1f:6b:aa:9b:df:0d:ae:cd:73:c9:44:60:41:e2:
0e:ed:60:6c:46:94:4a:4e:f9:81:b9:6b:32:ad:41:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:9C:DD:44:2E:0B:62:60:60:22:D0:70:73:C2:54:9C:F2:58:42
X509v3 Authority Key Identifier:
keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/Kk6c3UQuC2JgYCLQcHPCVJzyWEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c1:a9:80:bd:c1:c7:4a:50:ca:de:4c:65:d2:58:e9:89:96:
39:a5:29:53:db:c4:83:b8:bd:27:97:1a:de:5b:ea:d0:d0:85:
e4:a1:1f:22:fa:c5:8c:8a:02:5e:6f:89:fc:19:c0:fc:76:6d:
1f:36:67:27:d1:32:8f:ee:97:57:1d:c1:35:cf:39:b1:ea:4d:
89:c6:a5:ed:5a:30:5d:ea:26:54:9f:93:31:93:5a:5e:fb:44:
ac:c8:42:a6:90:e8:f0:00:d4:d9:7a:bc:a6:89:49:19:c4:2f:
76:2b:a0:be:39:81:02:06:7c:b2:52:29:8c:a5:21:f1:2e:eb:
17:1f:74:2f:72:9b:4b:4c:7f:19:98:46:60:31:4b:5f:eb:9f:
4d:bd:9f:39:e3:33:14:ff:59:4b:95:52:9f:cf:69:0e:10:d4:
b4:6b:a4:4f:34:3c:08:bb:48:eb:34:59:22:3e:89:bc:b1:07:
44:33:76:be:76:99:5e:3e:b3:f7:f7:a0:c1:bf:af:37:94:5e:
27:71:30:c0:39:f7:ef:49:48:d3:73:6b:60:e7:9d:f4:ca:ed:
34:b6:2a:39:23:1f:80:17:16:96:15:9a:3e:53:df:32:b5:b4:
5b:59:81:d2:96:08:a8:db:90:5e:db:59:f7:65:13:59:7a:3c:
51:4d:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:48 2023 by rpki-client on console-fra.rpki-client.org