Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/katEz4z6e6ZR6XCa7b8ClNiVgIU.roa
File: katEz4z6e6ZR6XCa7b8ClNiVgIU.roa (raw, json)
Hash identifier: MeK/moTpVFEn4Nb+DE8w59mp8GkHiSYRaHiZmoM0kHU=
Subject key identifier: 91:AB:44:CF:8C:FA:7B:A6:51:E9:70:9A:ED:BF:02:94:D8:95:80:85
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 01835F0907430EBD4ABE034626A58F05226C
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/katEz4z6e6ZR6XCa7b8ClNiVgIU.roa
Signing time: Wed 21 Sep 2022 07:52:50 +0000
ROA not before: Wed 21 Sep 2022 07:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203306
IP address blocks: 5.63.185.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:09:07:43:0e:bd:4a:be:03:46:26:a5:8f:05:22:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Sep 21 07:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ab44cf8cfa7ba651e9709aedbf0294d8958085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:90:76:51:85:a5:5a:da:98:52:c8:4b:e8:
11:26:e0:9d:00:cb:34:f4:eb:0a:18:ce:68:a9:49:
58:5a:68:98:c3:42:e9:de:dc:21:a2:64:8d:19:2f:
56:51:3d:48:8e:76:e5:34:b3:b6:f5:65:39:5e:e5:
55:3e:39:2c:7a:ff:9e:d0:0c:82:14:ce:89:8d:63:
bf:cb:44:1b:7c:36:bc:bc:5f:4a:9c:2e:a0:30:e0:
ed:61:b2:19:82:f2:ff:52:e7:9c:d2:f3:8b:91:b9:
24:32:cd:c3:d9:0e:e7:20:5a:23:9d:04:c2:5a:98:
93:95:7e:7a:75:d4:72:d4:81:dc:56:33:01:48:21:
5d:13:da:cc:14:09:26:23:7b:4f:d9:c3:e1:89:7d:
4a:ac:47:95:80:57:97:29:23:74:16:60:03:86:b3:
e5:ea:0d:79:7f:c8:f5:4c:99:64:4e:be:35:0b:33:
2d:90:e2:11:5a:0f:8c:c5:ee:b3:99:25:99:aa:9a:
9b:d2:76:36:b4:ca:75:aa:1d:38:f7:d1:fc:3d:e0:
c5:ec:46:a6:d0:73:0e:60:17:0f:1d:bf:ef:95:4d:
63:4f:a1:ba:68:70:88:3a:e1:3b:9f:4b:fc:42:a9:
92:48:bb:3b:4d:b2:e5:c1:73:f6:f0:a8:2d:2f:54:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:44:CF:8C:FA:7B:A6:51:E9:70:9A:ED:BF:02:94:D8:95:80:85
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/katEz4z6e6ZR6XCa7b8ClNiVgIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.185.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6a:2a:ff:32:a5:53:e2:e0:1c:68:9f:30:8d:38:0a:92:c0:
0c:0e:8d:31:16:8a:21:4f:4e:2d:38:c0:a6:98:2d:e0:62:00:
2e:70:32:45:2c:b8:46:3e:c7:e2:36:97:19:da:c1:85:b3:e1:
ac:2c:0d:a0:ad:d9:a0:6c:96:26:62:5b:50:ca:0c:8a:22:c5:
95:5f:f5:32:48:99:d9:63:3a:89:d0:12:8d:01:3b:1b:92:4b:
95:db:0d:67:3f:47:e9:2b:57:7a:08:33:e4:33:6b:b6:ea:1d:
1b:19:4c:c6:a7:93:a9:36:76:30:0f:ef:a3:44:d1:ea:a8:b7:
a3:6f:fa:14:26:81:fc:9b:04:27:63:3f:a3:10:ca:b1:97:78:
99:05:d8:37:66:a5:a9:12:02:3c:c2:ee:eb:cd:0a:f9:b0:81:
02:5a:85:b7:89:13:af:1e:e7:42:c1:4e:e4:11:8e:de:1d:b7:
ce:74:1f:8e:fa:58:e5:72:a1:5e:05:6f:98:eb:70:be:4e:2c:
b0:9f:8c:26:de:7f:5a:d2:71:7f:1f:11:a5:b6:e5:b1:03:93:
92:08:bf:2c:5f:65:ca:8e:4e:05:2e:bd:4d:08:d3:d3:7c:0b:
65:e1:77:dc:11:96:ec:c9:dd:d3:7f:a4:b1:12:76:7b:31:f7:
0f:22:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org