Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/kcrRe1K41P1Iz_jVOWcQVOBD8vM.roa
File: kcrRe1K41P1Iz_jVOWcQVOBD8vM.roa (raw, json)
Hash identifier: rEfZfnmqbD0n8XEcacaczHquQha0d5M0w8ZL2q77Vlw=
Subject key identifier: 91:CA:D1:7B:52:B8:D4:FD:48:CF:F8:D5:39:67:10:54:E0:43:F2:F3
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 08D287
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/kcrRe1K41P1Iz_jVOWcQVOBD8vM.roa
Signing time: Thu 30 Jun 2022 22:05:02 +0000
ROA not before: Thu 30 Jun 2022 22:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8784
IP address blocks: 212.37.192.0/19 maxlen: 19
194.153.214.0/24 maxlen: 24
2a02:d50::/32 maxlen: 32
2001:4b90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578183 (0x8d287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Jun 30 22:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91cad17b52b8d4fd48cff8d539671054e043f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:63:ee:b6:42:8e:d1:78:92:86:ba:52:96:
89:09:b6:f3:d0:b9:6d:60:05:d6:04:72:83:38:8a:
33:bd:77:b8:13:9f:69:ca:01:6b:78:bc:89:5a:35:
2f:55:54:38:85:a0:4a:25:f2:1b:74:ed:4a:7a:cf:
ff:6c:88:be:a3:f0:0a:24:21:12:52:b9:dd:aa:f0:
1e:44:04:54:28:db:c6:af:26:99:31:27:87:fd:d4:
f8:b7:5b:4e:62:d8:b9:6f:6e:af:e7:23:b6:03:27:
14:84:98:7d:a1:f6:80:d6:20:4b:f9:aa:d1:e2:ee:
f5:2b:41:cb:a6:60:44:3c:5d:11:42:22:b2:4d:20:
d2:41:0b:17:47:19:b2:02:34:57:64:40:55:ee:fa:
a9:02:f3:da:00:01:23:d8:79:96:05:03:38:12:08:
97:51:bc:cd:1a:8e:ae:a4:61:b3:93:c9:b1:78:31:
bd:0a:73:29:bb:2f:50:78:e2:a5:19:18:5d:02:b2:
d0:2d:33:11:0d:94:3e:3c:e8:95:59:e0:55:75:4e:
d9:4f:52:aa:2a:c9:79:ae:a2:42:cc:db:ff:57:41:
6e:f9:2a:e5:0f:27:bc:af:f3:20:6f:c3:36:cd:9e:
a6:ca:c1:55:e8:b3:d9:29:34:dd:5f:4b:4b:1f:0b:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:D1:7B:52:B8:D4:FD:48:CF:F8:D5:39:67:10:54:E0:43:F2:F3
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/kcrRe1K41P1Iz_jVOWcQVOBD8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.214.0/24
212.37.192.0/19
IPv6:
2001:4b90::/32
2a02:d50::/32
Signature Algorithm: sha256WithRSAEncryption
c6:46:82:ae:c9:a5:fb:2d:3a:72:ad:81:20:1e:04:c8:3e:2f:
36:8b:65:1b:fc:b7:af:12:25:a4:6f:0c:9f:52:15:56:f2:93:
1c:b1:be:57:20:65:15:52:3c:8c:78:c2:45:39:7f:63:ef:69:
9b:a8:b5:7f:7b:e9:0c:71:cf:72:1d:55:56:6a:34:b3:85:74:
63:86:a9:a1:69:82:86:fd:b5:77:d9:32:87:2f:7b:30:0a:c8:
30:48:cd:6f:b2:29:a3:44:01:9c:45:38:43:37:eb:73:8c:28:
2c:4c:f7:4a:44:f1:1a:d2:0d:5a:2c:c4:c2:62:dc:cd:6c:32:
37:fd:10:db:6c:0e:a5:1c:15:65:84:d3:3a:15:2c:13:7a:3c:
2f:07:c8:30:f8:50:32:72:b6:db:c9:93:26:c0:f5:f4:10:04:
f2:80:9b:e8:23:b3:d1:12:3b:07:6a:d1:a2:2e:f3:87:da:51:
e1:4e:58:91:89:19:f1:0a:20:80:0a:e8:f0:c4:46:bd:b5:07:
4a:96:1f:e0:6d:1e:7d:4f:a2:26:af:8e:9f:73:8e:ec:e1:c0:
dc:88:56:7e:fd:bf:86:58:65:64:97:6a:85:a4:72:f4:00:5d:
ba:0b:72:64:8c:5a:5b:49:89:2b:cf:e7:ce:b3:87:f8:28:e7:
ba:61:97:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org