Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/KZ6mchv3-HmZZNjYIA_RUVtjcaQ.roa
File: KZ6mchv3-HmZZNjYIA_RUVtjcaQ.roa (raw, json)
Hash identifier: CF9ltF4ZqHoz+ia2q9PoWGKQovX4rFMvDqm5PjhUBi0=
Subject key identifier: 29:9E:A6:72:1B:F7:F8:79:99:64:D8:D8:20:0F:D1:51:5B:63:71:A4
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018572C3769D3A3E69D58BBE3947146CB89C
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/KZ6mchv3-HmZZNjYIA_RUVtjcaQ.roa
Signing time: Mon 02 Jan 2023 13:54:50 +0000
ROA not before: Mon 02 Jan 2023 13:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50247
IP address blocks: 185.129.124.0/23 maxlen: 23
185.129.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:76:9d:3a:3e:69:d5:8b:be:39:47:14:6c:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 2 13:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=299ea6721bf7f8799964d8d8200fd1515b6371a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:b1:da:76:a2:88:57:be:5a:c6:e8:b7:64:
71:a3:0b:f0:8a:7a:74:b7:3d:f3:fc:cf:22:6b:c6:
da:2d:52:c6:9d:8c:21:d1:77:34:0e:f3:58:fe:44:
e2:22:7a:cc:49:a4:72:e2:3b:c0:a4:cc:6b:db:1c:
30:1a:2e:77:95:04:8b:53:0c:64:6b:9e:3f:a7:d2:
ab:f8:e1:0f:ab:89:3f:0a:0d:40:95:7b:7a:46:80:
c3:af:79:77:5d:8f:f1:b0:26:c4:9f:17:26:50:1e:
64:dd:de:1c:ef:76:3d:02:c0:c7:43:c9:22:8a:0c:
09:2a:9a:98:29:0f:f6:b7:e8:3c:91:bf:b3:dd:1b:
f6:e3:e6:e5:9f:9f:f6:7c:4f:be:e8:ed:12:ce:d4:
36:78:94:97:2d:e9:20:b9:84:00:31:c4:06:c6:21:
60:54:03:71:7c:49:95:70:88:f2:bf:57:ef:2e:fd:
8b:96:5f:55:5a:15:15:ee:df:d7:4c:d8:f4:28:6b:
e1:ea:08:d9:8f:71:4a:5f:4a:bb:6f:08:2e:5b:47:
97:06:e8:b8:77:41:3c:f2:98:4c:3a:78:7c:da:19:
3b:b5:0f:51:e0:23:b8:8f:42:85:ba:15:33:67:33:
86:60:ab:98:08:8a:fb:b7:5b:04:07:71:a1:3a:4c:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:A6:72:1B:F7:F8:79:99:64:D8:D8:20:0F:D1:51:5B:63:71:A4
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/KZ6mchv3-HmZZNjYIA_RUVtjcaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:49:87:b6:b6:b1:04:da:6b:95:f2:8e:d3:bf:ba:ea:a4:c4:
9b:27:4a:92:3f:9e:c7:2f:74:89:79:5c:9e:00:5c:4e:d6:0e:
73:3e:8f:19:9d:47:0e:bc:a3:c9:f0:69:ec:7e:6e:63:17:0e:
8c:4d:e6:73:80:52:2e:e3:8e:13:ff:8f:87:34:77:6f:76:72:
10:c2:c6:06:08:5e:9d:4d:88:29:36:5c:6a:bb:40:21:89:b0:
fb:5b:e5:60:3a:fb:52:6d:a9:7e:7b:0c:2e:fa:9b:62:d9:d4:
ec:cf:ca:ed:ab:2c:a9:1c:89:b7:43:d9:62:64:d6:d4:43:c4:
8e:ec:24:f1:d7:cf:35:1f:78:5a:0e:f7:05:b9:76:fa:83:9e:
c8:54:dd:81:06:7a:2b:14:de:0c:06:77:96:32:bb:05:cc:b0:
88:c9:c4:5c:b1:69:fc:c0:54:9a:df:ad:ea:8d:57:da:53:45:
da:4e:52:5b:f5:18:3f:46:f1:d0:e9:e7:a2:0e:f1:82:72:bc:
db:3c:92:4c:2f:94:17:b5:55:f4:a9:58:0e:46:9e:49:a7:6f:
4f:1e:bc:8a:70:97:0d:7b:fd:32:01:62:70:ea:aa:91:18:ce:
b9:88:05:f2:1c:17:62:64:35:18:47:f7:94:58:82:17:af:f7:
50:ad:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:39 2025 by rpki-client