Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/KtJJLZDo6O2nQ6cW2lm7VfeLekU.roa
File: KtJJLZDo6O2nQ6cW2lm7VfeLekU.roa (raw, json)
Hash identifier: WM9egM7e06QSDXWQJ1g+iSwq7+Jto9OIGVNAqo7vBYI=
Subject key identifier: 2A:D2:49:2D:90:E8:E8:ED:A7:43:A7:16:DA:59:BB:55:F7:8B:7A:45
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 06CC9252
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/KtJJLZDo6O2nQ6cW2lm7VfeLekU.roa
Signing time: Sat 01 Jan 2022 02:56:47 +0000
ROA not before: Sat 01 Jan 2022 02:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28839
IP address blocks: 193.138.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114070098 (0x6cc9252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Jan 1 02:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ad2492d90e8e8eda743a716da59bb55f78b7a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:ff:df:43:56:a6:27:e4:6f:dc:94:76:9b:
17:b7:cc:30:09:c2:32:7f:3d:69:a9:be:32:1b:bf:
81:f7:e9:c1:f5:75:94:77:7f:7b:18:b6:89:8c:95:
97:16:57:38:b6:0d:38:d0:6e:32:87:09:62:dd:94:
5c:8a:41:16:34:e7:41:5d:53:64:cf:69:55:6d:2a:
cf:78:6b:82:85:18:d0:b5:34:b8:5b:d8:11:f3:79:
08:99:3a:46:dc:4f:d7:e2:7f:57:c3:7f:2c:32:ac:
27:d2:96:a9:6c:d9:6b:4e:eb:3c:fa:51:43:71:ff:
76:8a:31:8d:5b:46:d2:e1:86:64:ef:f6:b1:3f:08:
8e:fa:80:a6:ed:c4:fe:5a:18:20:31:a0:e4:51:ed:
51:1a:b3:a6:e2:64:eb:fb:5e:1f:1c:1b:e0:d2:f6:
6c:91:43:0e:03:eb:d9:11:7f:fb:97:25:d1:e6:f8:
e4:0f:7a:24:36:ce:c8:e5:df:25:c7:1b:be:8b:9d:
03:a7:9a:4f:dd:8e:60:d0:0f:83:e0:ef:8a:77:a5:
ec:9a:33:52:c4:20:e1:96:00:f0:3e:9a:d4:97:75:
48:40:e2:f3:d3:94:26:d0:5f:b4:5c:80:8a:ba:39:
57:fa:bf:b9:e8:46:44:af:fe:71:6d:b9:f3:97:20:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:49:2D:90:E8:E8:ED:A7:43:A7:16:DA:59:BB:55:F7:8B:7A:45
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/KtJJLZDo6O2nQ6cW2lm7VfeLekU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:72:a8:cf:da:84:9e:0e:ae:af:99:28:c0:73:b3:91:dd:6a:
74:8e:1a:7d:a7:9f:c0:f4:15:2f:61:b7:a9:88:e9:b4:02:f3:
ef:d3:b4:26:23:60:81:66:9e:b8:e9:da:e6:b4:4f:c7:92:e7:
eb:4e:01:57:2e:f7:5a:22:1d:69:ac:61:ed:2d:50:f8:d1:c1:
bf:e2:7e:4e:a4:12:3b:4e:66:52:71:da:d1:d3:d5:4b:5e:63:
12:0d:ea:5c:cd:e8:12:31:dd:5f:02:12:48:81:ee:c9:3a:b6:
87:3b:bb:2c:cb:46:cc:99:b0:14:46:11:a0:bc:64:2a:db:9e:
dd:85:80:ff:90:2a:eb:78:4b:f3:b1:69:b7:2f:7e:4d:ab:19:
e7:58:95:25:b9:03:8c:ca:29:75:8d:0a:c9:3e:d5:4f:07:d6:
95:df:c5:02:f0:17:0e:55:e2:b3:e2:26:3a:81:41:13:c0:27:
2a:4d:bc:b2:cd:33:28:42:96:b6:f4:96:a2:bc:5b:6d:f1:48:
88:b9:9d:4f:56:68:6b:40:8a:14:5e:52:93:40:5d:cd:aa:31:
e8:e5:fb:5c:58:30:f6:af:20:36:da:95:05:ba:76:30:d9:dd:
cb:d1:18:be:1d:b8:1a:ef:5b:c2:95:f5:c2:b5:ed:55:88:82:
d8:54:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-fra.rpki-client.org