Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/kajIGeqwEB8tRG4ItOCJjMERri8.roa
File: kajIGeqwEB8tRG4ItOCJjMERri8.roa (raw, json)
Hash identifier: B4HJNKTpGWtl8oNZ9nYxTkHgFcRf/NwpuNnShcs0QO4=
Subject key identifier: 91:A8:C8:19:EA:B0:10:1F:2D:44:6E:08:B4:E0:89:8C:C1:11:AE:2F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0BA145C4
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/kajIGeqwEB8tRG4ItOCJjMERri8.roa
Signing time: Sat 01 Jan 2022 05:51:48 +0000
ROA not before: Sat 01 Jan 2022 05:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 194.163.84.0/22 maxlen: 22
195.179.240.0/22 maxlen: 22
195.179.244.0/22 maxlen: 22
195.179.252.0/22 maxlen: 22
195.179.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195118532 (0xba145c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 1 05:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91a8c819eab0101f2d446e08b4e0898cc111ae2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:4e:2c:0f:de:5b:82:e4:a2:3b:a4:74:9d:
e6:bc:f3:46:42:e0:b8:fd:b3:8b:13:8c:7d:e0:8f:
48:ba:1a:a5:75:0d:e0:2a:f6:7b:1d:04:11:60:11:
07:14:d3:e5:71:4f:60:4d:f1:b6:72:31:13:b7:8a:
cd:bf:c8:09:d1:88:ef:e3:39:00:33:00:85:fa:8d:
df:fd:e3:9a:d4:12:7c:83:12:1e:16:d7:4c:c7:79:
70:7c:d5:15:6b:4f:b7:62:41:2e:db:44:ae:70:87:
78:93:75:6a:9d:cc:b3:13:de:ad:56:27:c4:91:6a:
a8:95:d1:00:e7:68:79:26:b5:ab:71:8c:c9:49:f2:
04:f1:5e:72:9f:5a:45:70:08:20:d8:e4:44:60:3a:
29:1b:4b:e1:e4:ef:04:fb:26:df:2c:1b:8d:b0:f8:
25:93:a4:26:ec:ba:4a:63:43:26:72:96:31:28:6e:
e1:eb:63:3a:43:a1:49:61:b1:8d:2b:ed:fa:43:14:
3a:0d:3d:6b:cf:55:16:bb:43:b2:0c:34:b8:bb:f4:
e6:09:5e:37:0d:3c:98:e9:05:64:e9:74:cf:bb:ea:
a8:50:58:9f:29:ef:c4:32:4c:fd:70:1c:d6:66:64:
f3:9d:6d:fd:53:1e:6d:d8:75:dd:6f:7c:cb:d3:0f:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:C8:19:EA:B0:10:1F:2D:44:6E:08:B4:E0:89:8C:C1:11:AE:2F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/kajIGeqwEB8tRG4ItOCJjMERri8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.84.0/22
195.179.240.0/20
Signature Algorithm: sha256WithRSAEncryption
43:30:d0:29:3c:d5:c0:c3:67:08:cf:6f:7f:b9:36:cd:6c:d1:
44:e8:94:73:b6:84:6e:51:60:df:66:e4:06:c6:65:b0:6f:08:
e3:53:cd:26:55:3d:8b:11:08:bb:5b:51:09:73:34:06:61:b6:
d6:74:4f:a1:60:e4:57:d9:17:12:ea:40:03:a3:98:c7:d9:2e:
6e:b1:92:41:38:5b:2c:7f:5e:e6:38:46:be:cb:1a:ff:d2:56:
5a:8a:1c:0d:5f:af:b8:98:cc:0e:94:d9:36:10:93:80:ee:47:
04:77:42:2f:cc:69:71:13:66:23:b8:99:56:9d:c6:3b:e6:c8:
e7:06:41:28:68:e3:42:6e:7b:8d:1c:f8:64:04:d5:92:34:61:
de:b5:ac:93:8a:61:dd:6e:02:75:9d:1c:a1:f9:68:b0:e9:34:
5d:4a:b1:d2:44:45:0e:7c:cb:f6:0d:63:9c:69:ae:28:34:5a:
74:5a:a2:2b:f1:45:97:7f:e6:03:84:f3:69:af:da:fe:25:ba:
85:fc:1a:26:c8:04:eb:c0:68:ba:59:b3:17:80:c7:67:b4:f9:
0e:02:8d:f2:37:7c:45:c3:03:9a:39:40:4b:9b:48:06:62:11:
d9:f3:d9:eb:81:03:c2:54:5b:80:89:be:f9:14:8f:33:d1:4c:
40:31:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:24 2025 by rpki-client