Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KfDYEwzZOrXk2aUEFCZAuky1Vtc.roa
File: KfDYEwzZOrXk2aUEFCZAuky1Vtc.roa (raw, json)
Hash identifier: rD0ZNMFV7He/nvXXz9CLdJmKmYTxUn4kEsMQYMn2Ywo=
Subject key identifier: 29:F0:D8:13:0C:D9:3A:B5:E4:D9:A5:04:14:26:40:BA:4C:B5:56:D7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 033BA252
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KfDYEwzZOrXk2aUEFCZAuky1Vtc.roa
Signing time: Sat 01 Jan 2022 16:04:33 +0000
ROA not before: Sat 01 Jan 2022 16:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205135
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54239826 (0x33ba252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29f0d8130cd93ab5e4d9a504142640ba4cb556d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:23:3b:f2:a3:f4:76:41:07:04:f7:1f:84:
bd:15:58:43:76:a4:4d:0f:b6:1a:3b:8e:2b:e2:7f:
d8:b5:6c:65:0a:c1:36:e7:84:63:d1:cd:0d:10:e2:
20:50:67:6b:7c:04:e1:96:3e:e8:32:60:e3:bd:c3:
ea:97:e7:6d:d3:0d:31:3b:b7:9c:95:a2:ce:21:79:
9e:3e:8b:6b:d0:76:03:dc:00:dc:a5:7a:e0:bf:66:
25:d6:59:d4:69:52:28:d7:cb:b3:0f:01:37:a5:d8:
45:16:83:a4:8f:d5:6f:30:fa:da:93:96:90:b6:37:
37:8e:ac:45:17:ac:cf:59:ac:1c:92:cd:a9:b9:b6:
a1:fa:41:e5:3d:0a:42:d3:9e:9b:9b:8f:18:d9:55:
85:97:72:9b:1b:49:dc:47:0d:ce:2d:73:83:cc:2f:
69:8a:45:da:fc:fd:de:3a:12:a4:7d:ef:ce:81:f6:
dc:69:b3:eb:6a:1f:ec:31:fa:c4:cb:9e:43:ed:3e:
aa:d8:b9:bc:1b:af:c6:53:e4:95:24:ed:bd:ad:38:
bb:92:97:e2:22:d6:90:26:ff:ca:51:d2:59:6b:58:
cb:fd:fe:18:fd:7c:b8:f8:8e:c5:1c:f7:bf:0e:21:
6c:d1:42:6b:f8:08:a0:f1:2f:9a:06:1a:10:96:65:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:D8:13:0C:D9:3A:B5:E4:D9:A5:04:14:26:40:BA:4C:B5:56:D7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KfDYEwzZOrXk2aUEFCZAuky1Vtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0a:ab:68:fd:9f:d7:a4:1f:7f:6f:43:27:09:b3:c3:67:5a:
b7:27:bb:4d:5e:7d:c4:61:9f:54:ab:54:fd:50:4a:86:38:d6:
3e:61:db:b1:52:20:ca:8c:ac:60:58:e6:22:e1:41:2e:61:b8:
2d:92:47:6f:1a:34:83:59:50:f4:ce:c1:01:d3:86:dc:43:bb:
7a:38:3e:15:9a:84:8a:43:a1:bf:80:75:22:ef:6e:a8:65:0c:
7d:0a:8c:b7:0b:53:fb:91:03:26:ac:33:96:a8:b0:62:ff:ab:
7b:39:c6:e2:54:d7:20:17:6a:5f:3b:bc:30:2b:4a:f4:75:cb:
10:1e:3e:1c:22:ba:25:e0:57:87:07:1d:ba:28:89:e4:ec:83:
a2:a2:a8:92:73:c3:87:d0:d6:32:43:39:ba:8d:cf:88:49:f6:
22:2d:b2:39:fc:ad:13:22:39:f1:44:0d:b2:f0:9c:f1:98:10:
5a:d2:d9:0c:32:b5:33:15:a8:01:52:21:f9:e0:e1:1c:07:90:
97:91:51:61:54:7d:16:50:a0:78:b6:c6:e8:5e:7e:3b:f9:ce:
ea:c8:b6:40:d7:a2:9b:66:af:57:df:16:8a:1f:9e:69:57:eb:
4a:24:55:7a:a6:f9:5e:fb:65:d3:eb:c4:78:61:7a:cf:26:2a:
e6:4d:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org