Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/KyCKu1mwFAT_ygq137hSzHPRu0I.roa
File: KyCKu1mwFAT_ygq137hSzHPRu0I.roa (raw, json)
Hash identifier: k+vKaRBQQDNH7nHRo4OZOS3QL+hhwkXnL46m5zjztW8=
Subject key identifier: 2B:20:8A:BB:59:B0:14:04:FF:CA:0A:B5:DF:B8:52:CC:73:D1:BB:42
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 01839D967D199005FA079AE52EA73C2046C7
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/KyCKu1mwFAT_ygq137hSzHPRu0I.roa
Signing time: Mon 03 Oct 2022 11:23:48 +0000
ROA not before: Mon 03 Oct 2022 11:23:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16265
IP address blocks: 194.169.245.0/24 maxlen: 24
176.103.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:96:7d:19:90:05:fa:07:9a:e5:2e:a7:3c:20:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Oct 3 11:23:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b208abb59b01404ffca0ab5dfb852cc73d1bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:e5:18:5e:37:14:1e:aa:83:2e:3d:b8:83:
be:d0:2c:43:af:2f:42:b4:95:6c:fc:70:2a:14:25:
31:b9:3d:a8:76:de:37:27:be:18:e4:e8:00:ea:fa:
0b:86:6a:2a:ce:fd:fe:43:5e:67:5e:c1:59:1e:2a:
da:ed:79:c5:ad:64:c4:5b:c9:17:ee:e5:c2:5a:cf:
80:ac:ce:8d:94:37:f1:eb:db:a4:45:eb:0b:7e:e9:
75:9d:82:b4:42:50:f5:be:5c:3f:d6:8a:ef:30:47:
c2:be:2e:de:34:0e:64:eb:a8:bd:9f:70:1b:93:e4:
7a:63:a9:97:65:0c:c4:12:8f:13:83:95:6e:32:98:
03:01:59:64:5e:06:c7:b4:f9:50:4e:ee:29:af:65:
42:8f:05:16:e9:eb:a3:52:c7:16:aa:5c:fc:4d:2d:
18:5d:8b:84:59:7a:04:98:bc:2c:a0:44:cd:3e:ac:
9c:4e:e8:de:54:d0:9a:f6:c2:99:36:c8:85:b3:9a:
74:a3:de:51:33:2b:83:64:5c:14:05:bb:ce:4b:58:
f9:ef:52:85:6c:93:34:1b:29:92:b2:90:d5:4b:2e:
64:29:37:03:d0:ad:a7:ad:52:8e:93:fc:c5:0f:84:
c2:e8:1a:c5:b4:7f:4e:db:a5:7c:61:e6:71:af:c3:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:8A:BB:59:B0:14:04:FF:CA:0A:B5:DF:B8:52:CC:73:D1:BB:42
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/KyCKu1mwFAT_ygq137hSzHPRu0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:68:7a:c8:85:7b:cf:9c:42:7a:da:8f:7a:3d:72:65:d8:b7:
ab:0b:27:6a:d1:38:2b:d8:a4:53:d0:8c:c5:e5:6b:73:3e:a5:
63:10:f2:0c:a5:2e:26:0a:08:41:a8:ec:d8:93:6a:8c:ce:6f:
2a:93:4d:cc:99:d1:94:cc:aa:51:f4:49:03:1a:37:e3:b5:99:
aa:8b:4d:58:e7:b8:04:88:19:ad:ec:21:90:31:0d:ad:4d:dc:
5c:3e:ec:73:59:0a:ef:c2:c6:35:9c:70:f5:62:54:96:91:eb:
53:c2:84:0a:18:49:8c:bf:df:f8:cf:c2:96:24:ca:ad:26:a9:
81:e5:18:07:92:5c:a4:d1:04:65:7d:c0:f7:ef:d9:fa:d3:bc:
36:a3:e6:54:48:7f:2d:e7:22:c4:a3:3a:f0:4a:1e:be:c5:35:
dd:42:18:16:33:c5:32:77:eb:62:6f:80:3b:8d:20:93:6c:16:
82:44:18:62:53:78:c8:65:4e:91:f8:57:d2:74:70:4a:ed:3f:
f2:4a:42:d2:31:fe:18:20:09:f8:df:fb:0c:e6:fb:e0:b4:ce:
1a:d7:c3:5e:ca:c1:9a:25:69:b0:ce:34:f5:bd:80:d3:5e:5c:
c0:3a:3b:6b:7c:bd:70:ad:95:f7:95:e8:c8:43:56:15:5b:bf:
7e:f5:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org