Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/KklaUrECowIZChPg3dT1vrFz510.roa
File: KklaUrECowIZChPg3dT1vrFz510.roa (raw, json)
Hash identifier: r01QtukB9tGHFijmdtZEmGfWNxw4cp1VqAJm/XrSvDA=
Subject key identifier: 2A:49:5A:52:B1:02:A3:02:19:0A:13:E0:DD:D4:F5:BE:B1:73:E7:5D
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 0CD13C49
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/KklaUrECowIZChPg3dT1vrFz510.roa
Signing time: Sat 01 Jan 2022 01:57:56 +0000
ROA not before: Sat 01 Jan 2022 01:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206641
IP address blocks: 185.180.61.0/24 maxlen: 24
185.180.62.0/24 maxlen: 24
185.180.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215039049 (0xcd13c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Jan 1 01:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a495a52b102a302190a13e0ddd4f5beb173e75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:29:91:4f:c4:a0:14:ea:26:5b:cc:e6:52:
bf:60:7b:99:c6:96:48:6f:f9:18:36:a5:ae:c2:65:
42:56:1a:2c:3d:3a:62:52:c3:dd:82:be:68:d3:61:
55:c7:4a:36:e5:a4:2e:31:4d:56:ce:58:a7:a8:b0:
b0:bb:94:f1:06:37:17:f2:01:5f:af:9e:2e:fb:b1:
06:b2:ce:0f:2a:49:8f:b8:f6:c6:b1:1a:58:8d:c3:
db:7a:3e:17:66:be:83:6e:69:bf:20:b8:a6:73:c1:
ce:67:0b:39:ba:78:cb:2f:fc:df:7f:37:a9:00:47:
18:92:27:17:7a:04:31:76:b3:6b:48:eb:d0:49:20:
84:d3:24:dc:c8:27:17:79:58:e0:7d:88:fc:b8:00:
a5:9c:01:97:90:f4:cd:c1:55:4a:8e:b5:e5:3b:20:
27:79:66:eb:d8:af:b0:58:40:7e:c5:b7:eb:5d:cc:
24:0e:4f:32:fe:5a:d8:cc:d8:3c:ee:1c:e5:34:7f:
8e:73:93:be:8e:8b:40:7d:ac:9c:94:49:67:dd:e7:
46:e3:cd:80:27:85:05:1d:92:67:3b:72:3e:dc:8a:
1b:b0:49:e2:f7:c9:cf:bc:28:37:62:ed:b5:30:c1:
4a:f7:c8:90:c7:74:0c:98:9e:28:d5:9f:dd:f3:f0:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:5A:52:B1:02:A3:02:19:0A:13:E0:DD:D4:F5:BE:B1:73:E7:5D
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/KklaUrECowIZChPg3dT1vrFz510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.61.0-185.180.63.255
Signature Algorithm: sha256WithRSAEncryption
52:b9:4b:28:be:d1:d5:68:06:20:2b:13:fd:6f:1c:fc:fa:3a:
ed:00:59:5d:ac:b6:63:05:c0:38:66:15:1d:e5:8a:c3:c7:fa:
75:d3:ff:fc:9e:d2:64:d9:44:af:03:22:67:fd:ff:18:fe:21:
38:8a:b6:83:08:58:01:c1:a4:15:71:97:d0:5e:d1:90:58:2e:
71:a7:83:74:e7:b7:78:ab:2a:c4:69:f0:61:71:d2:17:8b:74:
40:5e:92:57:d8:bc:fe:20:58:b0:30:7a:de:7e:0f:ff:e8:0c:
8b:1f:93:46:0a:02:e0:98:34:88:a7:c7:be:45:89:f8:8c:80:
2f:92:39:a7:77:9e:96:de:a3:cb:f3:92:e1:bf:66:ff:4f:24:
2f:a0:5b:b4:78:3f:90:ec:2c:23:bb:82:2d:d1:b4:e2:cd:d1:
cd:eb:8d:76:08:f9:3d:93:5b:3d:41:6f:64:86:29:07:09:83:
92:e4:4a:9b:a2:06:3d:f3:0c:3b:7b:12:ea:42:72:85:8c:b0:
93:a8:f1:c9:da:a3:8e:f6:5d:a7:05:f7:da:a3:3a:bb:63:0b:
da:56:f9:00:a4:3a:2e:21:4a:29:f4:98:c8:8a:3f:b0:ef:03:
c7:bd:6e:bc:4f:3f:fe:68:62:e7:66:69:2a:cc:0d:df:21:18:
c7:02:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org