Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/krYVMgp_4nKG6HPP0O-BmazhHgM.roa
File: krYVMgp_4nKG6HPP0O-BmazhHgM.roa (raw, json)
Hash identifier: 7oEORD2qW8+3pif7nvA1CmiS56JvYDGW2qI7Voy4Pdg=
Subject key identifier: 92:B6:15:32:0A:7F:E2:72:86:E8:73:CF:D0:EF:81:99:AC:E1:1E:03
Certificate issuer: /CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Certificate serial: 0146F92D
Authority key identifier: 74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/krYVMgp_4nKG6HPP0O-BmazhHgM.roa
Signing time: Sat 01 Jan 2022 11:53:47 +0000
ROA not before: Sat 01 Jan 2022 11:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.249.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21428525 (0x146f92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Validity
Not Before: Jan 1 11:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92b615320a7fe27286e873cfd0ef8199ace11e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:bd:77:e1:4c:3d:c6:2d:dc:35:9a:1e:50:
25:d2:70:a2:79:ef:f3:3f:ac:e4:67:ff:88:90:ed:
68:6d:59:29:7f:85:1e:24:39:2c:8b:ae:0e:57:0c:
28:cf:bb:db:83:50:ff:7c:94:6d:8c:ae:2f:94:d9:
80:ec:a1:0b:84:82:a4:fe:33:de:a7:0d:a2:2b:36:
e2:54:9a:a1:18:32:63:17:18:14:ca:82:ec:26:49:
dc:34:6e:03:4b:c1:bc:d1:88:8a:19:81:a6:0c:42:
ee:56:53:af:60:d4:db:f3:97:c5:2e:2b:d8:bb:68:
2b:18:04:48:2f:54:36:40:88:c6:36:ca:c1:16:15:
ad:e7:ba:d1:c9:78:2d:cb:01:f6:fd:c9:9a:37:09:
8f:a7:5e:26:30:1d:86:b5:d8:f4:31:2b:cc:ef:31:
a9:ac:93:d9:07:27:3c:46:5f:46:0c:8d:f8:14:0e:
c2:53:42:67:f1:1b:95:c4:46:25:aa:cf:56:24:7e:
e8:a5:7b:5e:36:21:ea:6a:39:88:42:fc:03:1f:43:
c3:8c:a0:56:e8:5e:a3:23:de:e9:eb:12:3b:15:4f:
dd:ea:69:8a:41:3b:ae:10:2b:89:7a:88:93:17:77:
11:59:ff:27:6b:2f:2e:ba:d0:96:7c:80:5c:6c:40:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:15:32:0A:7F:E2:72:86:E8:73:CF:D0:EF:81:99:AC:E1:1E:03
X509v3 Authority Key Identifier:
keyid:74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/krYVMgp_4nKG6HPP0O-BmazhHgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/dEzxFE5JWIfkin47tksXiDX7PcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.53.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:01:2c:78:b2:74:9e:6d:9d:c6:ce:8c:dc:18:55:f1:de:d0:
b0:65:ad:a3:04:e6:e7:a1:a7:ec:a4:61:18:fb:a7:43:c6:26:
84:03:d7:05:4b:b2:0c:fc:f8:98:76:2a:9a:ab:17:d9:c5:56:
40:53:cd:7d:88:50:ed:24:b4:bd:89:68:71:e9:08:06:68:fd:
a7:fc:06:95:55:e5:8b:b7:d6:7a:96:8f:59:32:7f:37:1f:ae:
27:40:a1:44:d7:44:8b:ff:6c:dd:c7:c2:76:98:93:7c:b5:73:
fb:e4:9a:81:d8:4c:88:4e:11:90:54:08:64:53:43:48:40:89:
b6:af:06:aa:a0:63:fd:db:8f:40:55:b6:47:c6:e4:78:ad:97:
03:1e:f9:eb:29:57:a3:29:80:3c:7f:e3:5c:74:06:ff:18:cb:
35:cc:4c:ad:2d:c0:46:ad:cb:27:2a:08:92:c2:74:b4:e1:46:
84:66:6d:86:6a:20:6d:8c:09:9a:4e:eb:6b:86:b5:e1:e1:5c:
85:d1:35:c4:d1:15:51:b0:0e:52:65:67:dd:ef:f2:90:75:16:
57:2b:fb:92:c9:79:82:b4:23:73:fc:38:b5:d9:dd:18:48:c5:
08:47:97:ed:79:3a:99:07:bd:0d:23:dd:51:08:fe:b6:4d:fb:
9d:00:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:27 2023 by rpki-client on console-fra.rpki-client.org