Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/kjs9bnaUc81UJPmqaTOERtnwsjg.roa
File: kjs9bnaUc81UJPmqaTOERtnwsjg.roa (raw, json)
Hash identifier: bgO2MxMeq2abnz22hjHZnw6w8Bdgvq90IrMI8bsFGRs=
Subject key identifier: 92:3B:3D:6E:76:94:73:CD:54:24:F9:AA:69:33:84:46:D9:F0:B2:38
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01E0D229
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/kjs9bnaUc81UJPmqaTOERtnwsjg.roa
Signing time: Thu 12 May 2022 09:04:10 +0000
ROA not before: Thu 12 May 2022 09:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.83.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31511081 (0x1e0d229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: May 12 09:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=923b3d6e769473cd5424f9aa69338446d9f0b238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:bd:a4:68:8a:e2:b7:70:b1:81:44:ee:8a:
4d:8f:c1:9c:a0:4e:22:ea:7f:e9:38:5f:99:0a:67:
6a:14:43:a7:d5:d2:91:95:9a:95:3a:fc:e5:97:65:
a9:e4:5f:8a:76:9c:a7:3b:ca:61:5e:07:5b:41:5b:
1c:e6:f3:ee:10:05:85:91:43:28:06:03:e7:38:af:
d2:b8:6f:26:0c:47:86:8d:ee:60:3e:fd:97:39:00:
c6:bf:b4:17:95:46:55:e1:e3:76:95:0b:51:36:34:
31:4a:f8:e7:49:e8:a8:e0:c6:32:d9:bf:8f:e2:1e:
07:fb:b0:bb:e1:b8:76:ae:99:4a:7b:fa:60:7e:a9:
fb:f4:8a:f0:ab:99:ae:4f:a7:b0:53:09:e7:16:d5:
07:ad:01:5c:3c:72:db:18:7c:93:43:a3:b2:e2:b1:
9a:11:c1:a2:4c:a1:d6:85:cd:5a:f4:71:b9:55:87:
08:41:27:84:aa:7e:df:d1:7c:df:c4:e7:7d:e1:5c:
33:83:c4:c7:14:db:71:24:e6:0d:ff:fd:21:c6:4b:
41:11:a6:9f:0f:72:db:48:a8:1b:26:ab:69:66:de:
ee:87:34:6e:1b:22:fd:7c:35:cc:5c:7a:a9:1e:3e:
fb:76:c4:5c:c3:0b:3a:b0:6a:72:a6:75:2c:b4:0b:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:3D:6E:76:94:73:CD:54:24:F9:AA:69:33:84:46:D9:F0:B2:38
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/kjs9bnaUc81UJPmqaTOERtnwsjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1b:a6:77:2e:83:43:c4:9f:f2:b7:d3:50:7c:07:05:a7:48:
0f:4c:d7:22:3d:41:b0:3c:43:5d:d5:c7:90:fc:7a:f7:1e:0f:
4d:28:71:5b:0f:73:01:02:9f:b0:bd:fc:5d:d3:32:9d:42:26:
b6:7c:77:2e:7e:d6:74:3b:29:e5:a3:86:65:08:f0:6b:0b:2a:
29:73:e3:99:ab:60:b1:b6:71:32:76:52:77:09:f5:17:34:89:
b1:49:8e:fd:03:55:26:9a:0a:be:88:da:c9:d2:96:0b:bd:3d:
81:1a:22:d1:f7:34:67:b8:d1:21:fe:fd:f7:5e:80:8a:b1:bc:
98:f9:4f:95:14:58:61:8f:db:39:93:21:7b:1c:63:bb:8c:d8:
bc:14:b2:9a:44:38:90:02:43:6e:20:07:97:9f:42:dd:ef:fa:
b3:f8:17:b9:63:11:a9:1b:32:c0:21:44:08:d0:41:4d:60:ca:
a2:e4:0e:6f:58:54:61:c1:80:a2:7d:98:7e:a6:43:ac:66:93:
b2:6e:e7:c4:fb:26:24:06:62:b5:8b:57:83:18:0a:75:ec:9c:
ac:3d:f5:1a:9a:6a:fe:09:b7:ea:ef:10:6b:a1:63:3a:10:db:
61:28:5a:df:83:b1:40:c6:a1:b5:30:44:94:5e:2d:4c:c0:cd:
5c:5c:1b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org