Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KY5cT162VU1bm3-s_UQst7JjEaM.roa
File: KY5cT162VU1bm3-s_UQst7JjEaM.roa (raw, json)
Hash identifier: mP48Nm5mb3pe9NCdZEZHLJ5MkEIKcEGogCtdIDy7xrI=
Subject key identifier: 29:8E:5C:4F:5E:B6:55:4D:5B:9B:7F:AC:FD:44:2C:B7:B2:63:11:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 44046142
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KY5cT162VU1bm3-s_UQst7JjEaM.roa
Signing time: Wed 25 May 2022 13:48:13 +0000
ROA not before: Wed 25 May 2022 13:48:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205078
IP address blocks: 193.180.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141137730 (0x44046142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 25 13:48:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=298e5c4f5eb6554d5b9b7facfd442cb7b26311a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:a7:f8:03:19:88:73:a2:6c:79:6b:c9:36:
ff:7e:87:86:f0:a9:1e:f2:4a:9e:bc:35:68:e3:f8:
a5:fa:19:62:47:a1:1c:5f:fd:8e:4b:33:89:90:a8:
63:df:7f:69:e1:79:e5:60:32:9e:cf:db:d5:06:d9:
8c:26:10:26:45:7e:94:81:5a:e6:66:ce:0e:e5:8f:
b1:46:34:fd:33:f8:46:07:81:f0:97:73:47:04:c8:
49:6c:3d:1a:38:73:6a:4f:d9:0e:14:90:c9:27:91:
0e:5f:c0:3b:54:72:25:96:e1:3d:42:0d:2d:d8:f1:
05:5e:ab:11:80:f2:1b:81:10:12:7f:57:17:3b:91:
34:c6:7f:c0:32:ab:0c:1e:ce:36:67:ac:84:0a:fa:
c3:a3:5b:a3:43:23:5e:97:bb:e5:36:23:64:88:d9:
b4:20:63:cb:76:d8:59:30:9a:b4:bf:4d:87:35:b6:
9d:60:bd:fb:77:29:5b:c3:a7:16:88:27:67:33:68:
c7:06:0d:e1:5c:0c:e7:df:91:9b:22:84:0c:e0:84:
3f:ef:ca:d1:2c:e0:f0:51:77:2a:04:59:7e:a2:29:
66:1c:4f:aa:07:18:a5:02:a0:88:59:4b:50:95:cc:
3c:0e:65:0e:36:d8:69:46:11:75:2c:35:bc:e8:43:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:5C:4F:5E:B6:55:4D:5B:9B:7F:AC:FD:44:2C:B7:B2:63:11:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KY5cT162VU1bm3-s_UQst7JjEaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ae:aa:19:74:e2:86:bd:4d:fe:00:e4:ec:53:19:f1:8a:77:
ee:d2:e0:ca:0f:90:5d:3b:c5:13:a7:f3:df:56:3f:d4:ce:e2:
e0:1c:74:a4:0b:4f:3f:23:b3:35:e2:b2:03:61:ce:e7:15:0b:
79:77:3b:bc:72:46:f8:78:c0:9b:b5:7a:55:0f:70:13:b3:75:
c9:fa:c7:4d:5e:a7:08:b7:b0:15:52:88:4e:d3:26:8c:f8:b1:
bd:eb:c1:76:81:aa:5b:fd:f1:fd:d4:59:25:4d:e7:96:43:be:
fa:d5:a7:69:ad:fd:57:a4:55:6e:87:e8:3d:3b:52:d4:4e:4d:
19:3c:5a:73:6f:ba:4b:d5:b4:58:8e:ab:2b:b7:50:46:b0:5d:
1f:16:59:b4:48:64:c7:09:9e:f8:67:db:6e:14:4a:6e:36:ea:
90:e7:47:bf:02:17:e1:e1:f8:6d:ae:4f:fb:e5:4a:59:f7:f7:
5a:20:7e:4b:7f:fb:f6:82:65:48:01:cb:71:2a:d1:a7:45:ae:
13:52:30:e4:ba:36:53:3e:ce:ce:b2:47:63:2a:2c:85:60:5e:
13:0a:af:ef:84:94:a3:02:78:aa:9c:e2:9d:72:93:f5:99:42:
07:26:46:14:bc:75:f7:b1:8e:eb:6d:b2:13:96:fb:6f:13:93:
3e:e8:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org