Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/Kxydrc70oz3Ivlt_ZyU5VT_xjJE.roa
File: Kxydrc70oz3Ivlt_ZyU5VT_xjJE.roa (raw, json)
Hash identifier: +F0pqbXsfvzwOXRkXzMY9PmRlkrgKa03MPRHVBrnZm4=
Subject key identifier: 2B:1C:9D:AD:CE:F4:A3:3D:C8:BE:5B:7F:67:25:39:55:3F:F1:8C:91
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 020F4AC0
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/Kxydrc70oz3Ivlt_ZyU5VT_xjJE.roa
Signing time: Sat 01 Jan 2022 09:56:27 +0000
ROA not before: Sat 01 Jan 2022 09:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201454
IP address blocks: 45.140.0.0/22 maxlen: 22
185.73.24.0/22 maxlen: 22
2a05:3f00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34556608 (0x20f4ac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Jan 1 09:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b1c9dadcef4a33dc8be5b7f672539553ff18c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:aa:1f:ca:e2:a8:1f:76:af:d8:3e:0a:25:
24:c2:56:62:a4:7b:28:16:f7:fb:96:b2:f9:1b:7c:
58:34:e3:c9:dc:fc:1f:a9:b8:85:26:63:03:ef:c9:
83:69:56:80:97:26:74:db:e7:d3:2d:19:76:15:4f:
73:4c:fb:5e:63:fb:88:e6:97:ef:6b:0b:7e:69:6c:
c2:7a:74:e1:81:6c:50:3f:52:24:52:79:ec:cc:ef:
fd:5f:78:5b:e5:4a:46:34:bc:10:d6:e3:70:57:75:
47:b7:c8:0c:5e:45:63:0b:a9:a3:8c:48:14:f0:ce:
e0:94:fd:fc:fe:70:82:98:f6:6a:11:ee:6b:76:9d:
1f:7a:af:11:ee:fb:c5:39:c9:a9:86:04:51:79:05:
e5:22:fe:40:b8:63:16:3a:aa:fa:10:3b:c0:f3:10:
5d:76:dd:d3:49:15:e4:8e:55:50:09:b5:56:34:92:
57:04:4a:db:c4:91:83:c0:4a:bc:68:88:71:b9:96:
ad:11:53:40:1f:b6:6b:fa:fc:94:a6:2d:f8:2d:b0:
03:f2:72:2e:25:dc:6b:23:58:d8:70:63:12:d4:86:
f7:ee:c7:39:3c:2a:2e:e4:18:60:95:ee:47:5e:e0:
3e:8f:26:72:32:df:53:6b:54:e4:4c:0a:8a:35:26:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1C:9D:AD:CE:F4:A3:3D:C8:BE:5B:7F:67:25:39:55:3F:F1:8C:91
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/Kxydrc70oz3Ivlt_ZyU5VT_xjJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.0.0/22
185.73.24.0/22
IPv6:
2a05:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
0a:23:b6:94:9b:a1:cd:17:a6:f3:34:cf:46:ab:6f:7f:54:3b:
ab:7c:04:49:0e:52:37:26:db:5f:f9:84:55:db:38:3e:74:4a:
8b:f3:cb:fa:99:21:ee:bb:f6:bd:88:d4:ad:3a:ea:84:c1:d4:
24:d0:d1:51:9e:b0:47:26:68:17:0b:90:0c:0b:e3:22:60:e1:
23:42:cc:ea:53:da:28:b1:90:a3:f7:92:1e:37:b8:ad:c3:f0:
2b:4a:24:14:aa:4e:0e:f4:33:b6:c3:b0:ce:b9:d8:35:65:7c:
f8:e0:36:16:aa:de:b7:ea:d1:cf:e3:47:11:3d:97:41:cd:8e:
0d:ce:8a:a7:68:1c:06:f7:6b:a8:d0:3b:07:1c:30:66:ad:63:
ab:0c:35:85:d7:79:ba:38:a7:ec:e5:a6:ee:98:82:06:f9:0e:
f2:a0:b1:7d:0b:14:26:2f:7b:49:19:f8:d4:52:c6:12:f5:f9:
bf:66:9e:b8:b9:af:80:3e:c3:22:a6:0b:85:ee:59:07:0b:68:
d5:2f:b8:0e:12:22:17:5c:72:41:da:c9:5c:17:2e:e9:78:e6:
2b:08:26:da:9f:e0:11:3c:69:fb:b4:44:2d:97:e4:56:c6:04:
0d:c9:18:8a:6b:14:a7:64:82:d9:19:19:c8:82:63:b3:66:59:
0c:38:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:52 2023 by rpki-client on console-fra.rpki-client.org