Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/KKueZj074skVxGamj9O1Jcq4qP8.roa
File: KKueZj074skVxGamj9O1Jcq4qP8.roa (raw, json)
Hash identifier: YhfdD7x3t/03mmdXtsCgaVcOt0qWjW+Os/89/H84UQs=
Subject key identifier: 28:AB:9E:66:3D:3B:E2:C9:15:C4:66:A6:8F:D3:B5:25:CA:B8:A8:FF
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 087BE8CB
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/KKueZj074skVxGamj9O1Jcq4qP8.roa
Signing time: Sat 01 Jan 2022 12:04:27 +0000
ROA not before: Sat 01 Jan 2022 12:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48206
IP address blocks: 185.142.42.0/24 maxlen: 24
185.142.41.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
185.142.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142338251 (0x87be8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 1 12:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28ab9e663d3be2c915c466a68fd3b525cab8a8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:b4:35:73:51:ed:da:68:90:11:9b:21:6b:
d1:83:9f:c1:65:b1:33:9c:d3:f3:ed:ee:9f:94:a1:
67:e1:2d:40:00:f4:c9:4b:4b:ae:f1:91:8d:4d:e5:
d9:42:11:63:ae:f0:5a:41:01:e3:ed:a9:5b:39:f9:
c1:41:d7:2d:88:90:60:2f:70:52:88:61:3a:9e:56:
44:9a:73:78:6c:9d:f6:0d:73:4b:00:4b:ee:95:5d:
b8:c7:9f:37:ec:4f:f2:4e:7c:3c:04:9d:22:b9:f5:
88:4e:44:d8:67:31:a6:80:d8:d2:cf:e6:04:cd:c2:
3b:5b:b0:0d:ee:9c:aa:e4:60:7e:b9:ac:3c:9e:e5:
7b:bf:93:f5:0e:8b:d4:d3:d8:4e:0d:53:de:74:3a:
02:fd:cb:0c:c1:28:46:73:fa:6e:ca:b8:4b:24:e2:
8e:04:f9:f9:d4:18:4f:bb:99:a1:61:b5:1e:f7:30:
d4:1c:57:0a:33:53:ab:bd:d4:ed:fd:32:f4:4f:50:
50:3b:36:e1:cc:2f:a2:60:78:8e:b7:3d:0f:28:ed:
60:8e:a3:0f:fa:6a:d7:12:ce:71:07:82:aa:3c:f1:
43:ee:27:e1:82:8f:4e:04:b8:dd:80:b0:63:0e:fd:
98:4e:8d:59:29:b4:c9:3a:54:f7:7a:69:47:db:05:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:9E:66:3D:3B:E2:C9:15:C4:66:A6:8F:D3:B5:25:CA:B8:A8:FF
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/KKueZj074skVxGamj9O1Jcq4qP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:7d:3d:a0:34:f9:e1:13:4b:a9:4a:5d:a5:d8:60:98:56:a8:
65:4e:83:a9:41:1d:83:59:d5:62:ed:50:4d:0e:3c:3d:8f:e1:
e7:6b:d5:14:4e:cd:9e:4f:df:52:d6:a8:e3:92:01:07:a8:3d:
be:8d:e5:30:5a:54:56:0a:1b:a6:08:07:e6:35:b4:02:ea:54:
3a:7a:5a:fb:c5:a1:76:3b:7e:39:98:53:80:d9:56:0c:33:8e:
a3:5b:6f:2a:e3:5e:c2:19:3b:ce:ed:17:cf:17:59:99:ac:da:
9b:41:1d:fb:09:93:ca:62:9c:20:85:21:a3:a2:21:e6:7c:67:
f5:7a:b3:ad:e4:d1:d4:82:9e:ff:e9:b4:55:fb:e8:19:37:7b:
16:23:6c:b6:61:fe:0e:55:cb:b7:13:d9:2b:e9:49:a4:c2:0b:
48:db:60:eb:8d:7a:52:37:73:13:0f:20:25:38:a5:77:ce:db:
7e:95:1b:7b:db:9c:88:de:e9:db:af:2e:fb:3d:2e:e8:95:c0:
8c:09:2e:90:bc:a0:32:ae:58:3f:c5:97:de:b0:10:73:39:33:
0d:c2:d6:ca:78:61:7a:e0:f0:b2:a3:54:99:5f:a0:c4:fe:3e:
82:32:0d:30:28:da:55:67:e5:03:67:3c:7e:c7:0f:b4:6d:70:
8e:d5:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:21 2023 by rpki-client on console-fra.rpki-client.org