Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/KNchi4DOxfa2qDWMWPnJtb4AtBw.roa
File: KNchi4DOxfa2qDWMWPnJtb4AtBw.roa (raw, json)
Hash identifier: kG7ndZTC5Td+E4ryVLVIq7TVzztzMIXEdUIsMWcGSq4=
Subject key identifier: 28:D7:21:8B:80:CE:C5:F6:B6:A8:35:8C:58:F9:C9:B5:BE:00:B4:1C
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 0A0CDB75
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/KNchi4DOxfa2qDWMWPnJtb4AtBw.roa
Signing time: Sat 01 Jan 2022 11:02:03 +0000
ROA not before: Sat 01 Jan 2022 11:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35236
IP address blocks: 45.91.28.0/22 maxlen: 24
2a0e:25c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168614773 (0xa0cdb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: Jan 1 11:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d7218b80cec5f6b6a8358c58f9c9b5be00b41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:6d:e1:19:ea:f0:10:4c:b8:8e:9f:27:0a:
35:27:7d:68:38:e9:ce:df:e4:62:2c:8a:9d:b2:0d:
2d:cd:c7:61:04:25:2a:9e:2d:31:fe:b2:62:05:38:
a4:69:42:f1:9a:15:58:4d:e3:d8:c3:5b:ea:68:86:
98:b2:65:46:c0:36:ed:53:e7:84:c5:03:66:b4:ca:
73:f5:61:6c:77:7c:bf:a1:1c:ef:04:6b:c4:35:18:
e2:96:55:c3:55:d7:2e:56:97:f6:51:9e:98:a3:7f:
d3:99:2c:5d:13:57:68:e2:e6:b2:ac:be:26:99:64:
60:1f:cc:84:c8:53:85:26:ce:44:b0:64:98:3a:95:
bd:7a:18:58:94:47:82:59:b0:0c:10:71:55:49:02:
87:a7:d9:39:f3:4f:a7:12:42:fd:3c:56:ab:89:9a:
14:bb:23:e3:e3:9c:df:8c:cb:0f:d9:53:38:03:47:
a8:7b:c1:ba:5d:94:9b:68:f5:f6:be:9b:e6:24:c4:
14:e9:15:16:1b:b5:39:da:91:49:94:2b:aa:bb:03:
21:c3:a2:2b:ab:6c:5d:77:6b:d5:6f:15:3c:c8:b5:
15:ea:2e:73:d8:ce:65:4b:10:90:11:0e:58:01:70:
1c:7d:89:68:ca:c5:c5:7c:a2:93:ac:6d:c1:b9:bb:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:21:8B:80:CE:C5:F6:B6:A8:35:8C:58:F9:C9:B5:BE:00:B4:1C
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/KNchi4DOxfa2qDWMWPnJtb4AtBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.28.0/22
IPv6:
2a0e:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:d7:09:01:a7:4b:eb:65:66:35:bf:b5:78:5e:9e:72:40:73:
e7:c6:b7:4c:8a:ae:88:59:c9:b5:4a:43:b1:b8:03:73:f1:03:
9f:a2:4f:02:d3:a5:60:81:96:31:cb:f9:28:ef:d7:cb:9a:84:
19:73:01:e0:44:a4:cf:07:f4:32:01:cd:d8:81:f1:a3:f9:7a:
67:48:e9:c9:03:db:da:ea:63:46:b6:c5:6f:b1:8e:e4:ae:0a:
4f:32:53:a7:69:0f:9b:4c:2f:dd:bd:1b:c9:c5:8c:0f:a2:17:
d2:56:28:c8:4c:e3:23:9a:4a:5e:67:d9:bb:98:0e:b3:11:db:
89:9d:5b:c1:93:56:40:6a:04:27:28:c8:93:84:58:fc:7e:7a:
da:50:2b:62:95:2f:28:20:ea:b7:31:a7:2a:3f:97:69:2e:a7:
70:46:e6:8f:30:47:35:40:cc:5d:7f:57:37:cd:05:31:5c:f7:
12:cc:85:1c:52:54:dd:6c:b3:59:db:09:30:eb:f4:da:74:69:
3c:49:dc:5c:42:16:24:56:ac:79:4b:1f:9b:f4:29:67:bc:9e:
dc:ba:40:30:61:1f:fe:b7:3f:71:ef:4b:a6:90:5c:80:ba:c2:
ab:78:4f:23:b5:b8:da:39:1e:84:28:f9:cd:84:1e:04:47:17:
3c:23:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:02 2024 by rpki-client on console-fra.rpki-client.org