Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ki-a5QkTkP8ARgYAhVzR_988LlQ.roa
File: ki-a5QkTkP8ARgYAhVzR_988LlQ.roa (raw, json)
Hash identifier: 1A5QCvoT+RX2YHwE0LH/GM4uDBcORAaqfYdKFSlWqaU=
Subject key identifier: 92:2F:9A:E5:09:13:90:FF:00:46:06:00:85:5C:D1:FF:DF:3C:2E:54
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 03A0AA89
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ki-a5QkTkP8ARgYAhVzR_988LlQ.roa
Signing time: Thu 24 Mar 2022 12:50:38 +0000
ROA not before: Thu 24 Mar 2022 12:50:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210848
IP address blocks: 185.156.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60861065 (0x3a0aa89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Mar 24 12:50:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=922f9ae5091390ff00460600855cd1ffdf3c2e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:79:b6:e8:96:d7:05:03:1a:23:84:ce:47:
53:8c:c0:8a:a3:bb:21:fc:7f:60:27:36:85:e3:92:
6b:87:e3:b9:67:90:d2:e2:3c:0e:9a:5b:e4:47:1e:
71:0a:0a:88:3d:0f:f8:d6:f6:db:01:f7:cf:58:d1:
8f:02:d3:32:dd:11:4f:30:b6:62:41:34:c2:e5:76:
a6:d0:ba:80:42:40:61:a5:b4:e2:13:d3:4b:6e:d5:
65:36:d4:ba:e6:a5:47:45:77:9c:0e:87:66:77:20:
20:69:e1:68:9b:32:67:18:1c:c2:14:52:7c:9a:d7:
68:92:8b:a9:c9:d5:52:4b:00:6b:bd:f9:d6:83:da:
ea:07:b2:d3:75:e4:99:31:f7:8b:4d:45:f4:40:a8:
be:3c:82:8a:16:a8:fc:a3:e9:b3:d1:a5:9c:37:0e:
cc:36:9d:d9:1a:81:ea:67:54:b2:18:1d:d8:a3:77:
47:67:da:3a:46:2a:30:9f:f9:a6:42:9a:58:33:4b:
77:71:74:6c:1f:39:1c:d1:12:39:94:13:85:d8:0c:
15:4a:54:ff:7c:96:05:24:ba:5d:a0:aa:8e:50:13:
c1:2e:7e:fc:3b:a7:99:a8:47:ef:77:34:24:ae:99:
69:9c:47:0c:ae:e1:c3:2c:a7:6c:39:ee:46:75:cd:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2F:9A:E5:09:13:90:FF:00:46:06:00:85:5C:D1:FF:DF:3C:2E:54
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/ki-a5QkTkP8ARgYAhVzR_988LlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3e:7e:c5:30:0a:db:e7:b0:73:eb:31:3e:c4:96:9c:42:3d:
c1:cb:a5:70:63:39:c8:52:01:2f:ac:d7:47:f2:f9:14:c4:4a:
a9:bd:68:2b:c8:11:dc:3f:d3:db:4d:cb:21:c9:3d:94:78:8a:
94:bc:32:97:9f:0b:bb:9c:f3:e1:75:b7:78:2b:8f:e6:8a:a2:
33:ec:68:a9:b2:2f:12:44:34:0f:c3:ef:1c:36:56:84:39:f9:
3f:41:c4:2d:cc:32:c1:76:5d:3a:23:3b:2e:2a:e4:88:48:b0:
b5:2d:96:a3:76:36:01:6b:d9:d1:ab:73:00:e0:51:bd:41:0f:
52:db:1a:6a:7c:dd:a0:f0:fb:d2:23:06:02:fa:a9:71:45:61:
0c:db:f9:95:ab:dd:cc:dc:79:30:46:1c:79:4e:6a:42:cf:62:
87:e0:69:41:42:dc:ce:29:bd:8a:d8:65:fc:1a:dc:ca:46:04:
1a:68:fc:bd:db:93:8f:95:fc:02:ac:7c:f7:f4:ad:2d:10:10:
a9:f2:f7:cb:97:ff:eb:a9:7f:a4:4d:4d:fd:9b:ea:5c:c8:ce:
5d:f0:9b:1b:1b:78:e0:31:f0:ee:79:55:e2:b9:c4:0f:72:bb:
14:8b:bd:41:43:4e:97:fc:3f:5f:e2:88:8e:e6:f0:32:cc:7e:
99:7b:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org