Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/KibCSfuL1u__z9_4CVMkXzA4_nc.roa
File: KibCSfuL1u__z9_4CVMkXzA4_nc.roa (raw, json)
Hash identifier: pCknpovfHfDJpInhd6VBYV1XZQbSbh1xLGHI8I2Ehd8=
Subject key identifier: 2A:26:C2:49:FB:8B:D6:EF:FF:CF:DF:F8:09:53:24:5F:30:38:FE:77
Certificate issuer: /CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Certificate serial: 0270B2AA
Authority key identifier: AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/KibCSfuL1u__z9_4CVMkXzA4_nc.roa
Signing time: Sat 01 Jan 2022 03:57:49 +0000
ROA not before: Sat 01 Jan 2022 03:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51790
IP address blocks: 193.3.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40940202 (0x270b2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Validity
Not Before: Jan 1 03:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a26c249fb8bd6efffcfdff80953245f3038fe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:e8:e1:46:d1:81:27:09:26:fc:44:b8:fd:
c6:a4:62:1b:6f:86:23:a0:26:c3:9b:71:44:16:a1:
78:33:e8:a7:82:7f:05:8f:25:cc:26:33:c4:47:36:
c0:9f:a3:ee:52:42:61:0c:85:27:88:2f:00:fa:0c:
6e:5b:75:58:df:e0:46:7c:92:d7:f5:73:23:e8:22:
9e:43:2e:5b:2c:b4:46:2b:1d:9b:ae:29:ca:8b:c6:
b5:42:29:85:8e:0b:4d:80:61:53:a9:18:e6:c3:cc:
7c:89:0d:a1:a0:fa:c0:f4:47:b6:3f:78:a7:ee:92:
bb:df:03:59:95:d7:c9:26:d0:e7:fe:54:93:d7:56:
33:ed:87:4a:4a:9e:36:40:7a:5f:ae:7c:ae:8a:b4:
42:10:b8:cd:1e:60:a4:02:be:5c:bd:6d:84:bc:b2:
b1:1f:bb:0f:d9:0a:91:6a:de:ea:34:28:bd:54:3a:
6d:ac:27:18:ce:19:a2:18:57:4b:67:a0:e1:5f:58:
e5:98:69:49:e0:52:b7:33:5b:bb:ce:14:d8:df:27:
7f:25:92:50:3a:d7:79:19:02:cb:5f:0b:32:5e:57:
cd:9d:00:2c:10:1f:72:46:78:eb:60:d3:21:48:27:
66:3f:1f:1b:c4:48:19:cf:60:a6:c7:83:e0:3e:8f:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:C2:49:FB:8B:D6:EF:FF:CF:DF:F8:09:53:24:5F:30:38:FE:77
X509v3 Authority Key Identifier:
keyid:AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/KibCSfuL1u__z9_4CVMkXzA4_nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2d:0d:e6:dc:e8:ce:5b:86:2e:e6:aa:c9:a8:c6:67:3a:75:
1b:e1:07:8b:62:60:1f:06:87:51:46:b2:df:53:96:48:07:ec:
60:ba:0d:52:29:78:28:f4:21:07:41:48:37:7f:81:45:b3:fc:
bd:98:f1:ca:f8:e2:42:d8:f6:35:cd:e9:d0:95:c7:f7:03:54:
a4:8b:c8:48:65:dd:29:b0:75:18:90:3e:f7:0c:cd:c2:6b:c3:
e0:4a:dc:6f:65:d0:3a:84:56:11:d9:94:39:c8:ef:a9:97:40:
4a:66:9c:6c:82:6c:93:76:bd:f1:ac:65:02:e6:50:34:f1:ec:
32:29:d8:5d:02:13:72:01:37:12:04:37:41:e5:4e:34:7c:bc:
bc:f4:45:bb:a5:60:34:36:70:95:a6:94:3a:d8:74:ba:99:c9:
be:14:84:d7:85:23:d6:0a:05:44:7d:ec:77:60:08:99:2e:4c:
89:3a:58:c6:78:f1:94:df:df:90:3f:a2:9b:f6:be:f4:19:f2:
f4:04:3b:30:99:50:55:53:94:62:fd:1d:39:db:3b:86:d3:69:
01:a6:fa:50:ac:43:8f:29:12:b5:e5:9a:38:f4:c0:64:2d:33:
66:6e:3c:29:de:77:0a:ba:7b:8c:cd:37:d0:0d:7f:3b:b7:9d:
e7:a8:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org