Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/KTNJ_LBYvNeh8GGp7wHTmXjrZRA.roa
File: KTNJ_LBYvNeh8GGp7wHTmXjrZRA.roa (raw, json)
Hash identifier: jsNDHDPPZoS7aUgleBuzA4y9ipJ8ZSnnne12NkYqh1Q=
Subject key identifier: 29:33:49:FC:B0:58:BC:D7:A1:F0:61:A9:EF:01:D3:99:78:EB:65:10
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0186DB918ABAC57DE90A3B0D2BCC1850D55D
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/KTNJ_LBYvNeh8GGp7wHTmXjrZRA.roa
Signing time: Mon 13 Mar 2023 15:23:13 +0000
ROA not before: Mon 13 Mar 2023 15:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 195.234.1.0/24 maxlen: 24
195.234.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:91:8a:ba:c5:7d:e9:0a:3b:0d:2b:cc:18:50:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Mar 13 15:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=293349fcb058bcd7a1f061a9ef01d39978eb6510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:56:9e:f0:4b:fb:5e:5a:08:e3:8c:d2:b8:
1a:8f:8b:6d:93:a9:fb:15:74:4b:f8:73:9d:17:7a:
b3:57:6b:42:28:90:89:9c:22:4a:8d:b4:77:b2:b0:
a2:52:2c:a8:8f:65:6a:9c:c2:66:aa:c4:8e:02:47:
04:49:bd:cc:c4:7f:fb:27:6d:a2:41:a3:48:8c:20:
51:6f:a4:da:77:99:2b:1c:bf:62:6f:7c:76:5f:dd:
84:eb:c4:30:53:76:0a:bc:a1:d9:07:b0:50:21:d2:
ef:71:2b:97:f3:69:24:00:b9:77:a3:6a:4d:32:c2:
d7:c9:ff:a4:17:cf:ea:aa:f7:d5:ee:47:3b:57:a8:
70:91:f6:3b:7b:88:bf:f1:5f:1c:91:1c:52:4e:03:
fa:5f:10:09:a3:7b:7a:c1:b2:b1:cd:57:0c:d1:a3:
17:ee:23:ff:f5:1a:d4:54:02:c0:5a:62:0e:90:75:
2c:86:3f:ea:d7:a9:eb:e4:b2:81:32:6b:ad:08:07:
dd:97:c3:66:8a:1b:b7:3f:c6:f7:2b:52:63:a1:80:
2b:d8:83:04:ea:e6:4b:e8:de:32:8e:ae:ff:3a:79:
7c:4c:f7:7d:d6:6e:9e:7b:fe:11:24:ed:15:23:b4:
94:03:e0:ff:80:b9:4e:5f:15:c7:f0:e0:ec:f3:8c:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:49:FC:B0:58:BC:D7:A1:F0:61:A9:EF:01:D3:99:78:EB:65:10
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/KTNJ_LBYvNeh8GGp7wHTmXjrZRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:ea:38:fe:6e:fc:20:6a:d3:dc:61:84:9a:a6:e2:0c:3f:2c:
56:3f:51:e4:1a:80:a9:b8:fd:f0:bc:cb:7d:62:82:44:33:ac:
9d:94:71:18:34:cd:5a:ba:f5:3f:cd:e5:8e:f3:57:bf:6a:ce:
1d:77:9e:b2:e9:77:d2:95:c9:c5:3b:57:b0:7b:a3:6f:c2:80:
a6:ea:36:fa:d7:88:30:e0:17:6e:98:7b:1a:73:6a:20:1f:ff:
92:bb:9d:90:ed:30:38:78:17:14:f0:5e:4a:06:fd:9b:a7:d4:
06:53:8f:3a:b4:72:5a:80:24:6b:5c:91:b1:0f:d4:15:f3:63:
c1:3b:19:46:c9:08:ed:6e:a5:ff:d3:7d:06:7e:15:b1:d3:00:
e6:06:16:e6:a1:cd:3f:fb:f2:b1:6c:be:05:0d:3f:7d:08:89:
72:8c:c9:a1:12:c7:a0:75:e3:22:77:51:1c:be:d8:85:de:ec:
59:f0:12:24:e3:93:6c:49:3c:f5:ca:2c:8a:ad:7b:69:c8:c7:
6f:38:42:16:3d:c8:5a:d1:d7:60:74:0f:82:3f:33:be:04:04:
6c:47:3b:45:3b:99:78:50:34:1b:9b:35:67:47:cc:00:98:ad:
3d:aa:f8:82:47:69:98:ae:83:4e:2a:c9:32:10:63:17:27:d9:
13:65:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:33 2025 by rpki-client