Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/kcunkpjwYzOKAK0eIQLVdc2PoXk.roa
File: kcunkpjwYzOKAK0eIQLVdc2PoXk.roa (raw, json)
Hash identifier: MsPDLY5Fr3cd/9tIur6J8npMXkMuOm93VGKtA9imd1w=
Subject key identifier: 91:CB:A7:92:98:F0:63:33:8A:00:AD:1E:21:02:D5:75:CD:8F:A1:79
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 03FAE450
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/kcunkpjwYzOKAK0eIQLVdc2PoXk.roa
Signing time: Fri 06 May 2022 13:25:34 +0000
ROA not before: Fri 06 May 2022 13:25:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 185.255.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66774096 (0x3fae450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: May 6 13:25:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91cba79298f063338a00ad1e2102d575cd8fa179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:87:c4:a9:de:6b:e3:ab:e6:ee:f4:59:a5:
06:74:fb:a0:04:cd:76:56:74:76:ee:e5:57:79:4c:
5c:3c:9a:26:91:50:6e:e0:dc:61:c2:2e:f4:20:9e:
1a:db:3c:ce:60:ff:25:43:19:4f:2e:9b:f2:31:ef:
00:91:4e:3e:f5:5c:2f:b0:8a:94:4b:16:59:96:d4:
23:89:28:ed:40:8a:0d:14:fb:33:49:5a:ef:f8:47:
f8:c7:6d:0d:8f:31:88:3a:da:5f:57:ed:f5:7c:70:
f6:f2:a6:86:f9:c5:c6:96:46:7f:c5:fc:e6:5a:91:
c4:8c:1f:24:f6:f1:b8:bb:c3:4c:5f:47:c9:4d:d6:
6c:51:be:1d:be:62:dd:3c:86:58:3c:fb:4f:e2:3e:
2f:43:1a:56:be:f8:a0:a6:01:25:35:6f:a7:46:56:
2b:45:b2:5e:d1:08:d8:2a:2a:f9:bc:89:6f:d5:f9:
fe:ab:c1:94:e0:9c:6f:e8:3e:e1:48:b5:fa:27:12:
08:ed:cc:5d:7c:51:8a:37:67:88:c7:1c:ba:b2:19:
8d:60:bd:1a:a5:9c:86:4a:86:6a:a8:c1:2c:a8:d4:
f2:ee:70:7f:8a:7f:b0:cb:41:17:04:69:ed:a1:a1:
0e:85:31:5d:90:9c:df:4d:65:f4:ca:52:51:92:c7:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:A7:92:98:F0:63:33:8A:00:AD:1E:21:02:D5:75:CD:8F:A1:79
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/kcunkpjwYzOKAK0eIQLVdc2PoXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:13:4a:8d:7a:b5:55:58:dd:9f:95:eb:0c:1c:88:2f:1a:ce:
96:c0:cf:08:09:cf:16:f1:69:2b:5d:ec:1e:64:ce:1c:0f:9b:
17:c6:b4:b5:ed:1a:7e:a2:61:92:a5:7d:14:47:bb:a1:69:7e:
63:24:65:2a:0d:0a:44:7c:bd:d9:a4:92:e8:0d:29:b2:78:6b:
a4:95:22:49:a1:00:1c:69:d4:e5:e9:bc:7e:a6:19:07:ca:5e:
6f:96:5b:c9:d7:06:f5:e1:62:83:3b:26:66:bb:9c:20:ad:60:
ef:a0:20:a6:75:11:68:c5:4e:93:0e:a5:db:33:65:e4:dd:6d:
ee:32:a7:76:b0:c5:82:ae:54:5d:c9:aa:c7:ff:7c:bd:b5:0d:
b1:4d:1e:5d:4c:24:c4:a8:5d:b5:88:83:a3:36:e9:f6:7c:7e:
d9:80:dc:bd:a3:d7:67:dc:06:f1:c5:c0:91:52:b8:df:05:1b:
30:9d:8f:4b:f5:fc:8a:39:0c:63:9a:96:50:a7:94:d7:f3:5e:
66:81:e4:d4:a6:18:de:06:bd:b5:bf:3c:53:6c:36:3f:08:b2:
b2:de:dc:a5:89:45:e4:c4:e8:72:17:c7:76:0c:e6:00:a4:46:
9c:36:2d:50:85:e5:43:7b:d8:cb:e5:fe:e0:e4:5a:67:8a:8a:
16:31:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org