Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/KNdoMa5peVa-5M5DfyZPRvOFhVI.roa
File: KNdoMa5peVa-5M5DfyZPRvOFhVI.roa (raw, json)
Hash identifier: fiWJti7GIDNdYhEEie2eQaC6CYsvpSjVdvmdWXGaFxE=
Subject key identifier: 28:D7:68:31:AE:69:79:56:BE:E4:CE:43:7F:26:4F:46:F3:85:85:52
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 809083
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/KNdoMa5peVa-5M5DfyZPRvOFhVI.roa
Signing time: Sat 01 Jan 2022 03:55:20 +0000
ROA not before: Sat 01 Jan 2022 03:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8271
IP address blocks: 62.48.0.0/19 maxlen: 19
2001:4bf8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8425603 (0x809083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Jan 1 03:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d76831ae697956bee4ce437f264f46f3858552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:97:a5:61:5c:fa:fc:c1:60:b5:71:9b:f4:
8c:cd:32:22:0f:b1:3a:9e:75:22:f2:4e:16:e5:e6:
da:cc:28:92:64:5e:00:93:88:a3:61:fe:85:e4:3a:
10:4f:fe:6d:98:9d:71:11:a1:ac:b5:83:e6:ed:0e:
54:ce:c1:18:85:60:4b:47:3e:1f:34:d6:eb:02:71:
6a:1f:57:86:39:46:a0:8d:46:60:af:52:fa:3f:80:
d4:c6:7b:8f:32:af:40:b1:46:a2:cb:27:7c:d2:87:
76:ff:4d:51:23:7a:9a:a7:9a:ab:e9:d9:05:4d:cb:
05:88:c7:d6:7e:29:5e:16:2a:33:9c:41:81:67:29:
4c:ab:9f:00:55:01:e0:d5:bf:ab:05:04:1c:14:eb:
14:0b:c9:38:fd:3e:33:fc:f8:be:da:0c:02:f9:bf:
f6:b7:d2:49:8b:37:e5:a5:e5:39:02:af:64:38:60:
7e:71:72:0f:19:c5:22:81:12:da:8b:74:2a:26:60:
94:c9:15:41:ae:10:e5:a7:9e:a7:03:2b:b6:b9:3d:
74:5b:24:ee:d0:3d:d2:99:10:95:00:fa:d2:e7:68:
94:55:42:92:e2:71:2a:00:ae:a1:04:88:40:49:46:
68:d1:23:dd:63:84:5f:5c:b2:d7:46:21:1e:96:56:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:68:31:AE:69:79:56:BE:E4:CE:43:7F:26:4F:46:F3:85:85:52
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/KNdoMa5peVa-5M5DfyZPRvOFhVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.48.0.0/19
IPv6:
2001:4bf8::/32
Signature Algorithm: sha256WithRSAEncryption
70:d3:24:f5:9c:90:34:78:97:cc:9a:f3:75:61:4e:8c:4f:e8:
9f:d1:12:f3:5a:bd:d2:34:83:5e:0a:26:08:fa:dc:0c:12:88:
1f:45:95:a2:62:72:dc:1a:ad:86:94:37:25:37:cf:ac:94:43:
54:31:84:eb:51:b0:f8:80:af:86:a9:9f:c2:b3:e3:8f:89:05:
8d:33:2b:17:7f:d9:e6:7f:1d:c5:c1:9a:19:9c:20:37:6a:09:
09:08:18:6b:92:62:4f:7b:38:5f:73:41:ff:eb:f3:2a:d9:ae:
3e:f1:86:c0:40:34:67:fa:db:fd:be:2d:8a:af:2d:12:71:dc:
15:38:a2:11:05:90:b2:7b:0e:cf:bd:a9:04:48:fd:c1:9a:44:
d9:34:cf:32:78:ca:5b:72:8d:1a:05:34:5f:de:04:97:04:a1:
21:58:a8:b9:85:a3:af:73:30:27:72:f1:d4:12:45:f7:12:71:
4e:ed:80:64:07:aa:f6:e6:de:c1:65:b7:1e:dd:b4:41:ed:33:
2e:dc:b4:17:ad:69:bc:03:d6:9c:22:f0:7e:5d:cc:9d:37:15:
0d:ab:01:59:09:20:31:23:09:9b:1f:db:5f:1a:ba:28:46:4f:
ec:c3:37:0e:0c:c9:46:60:3f:7f:d4:1b:1e:21:32:06:8f:ce:
6a:e8:c5:8b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAICQgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MjgxZmYzMTRmYzhhYWUzOTc1NDA3YjBhMGMxN2YyZmRlMzRkYzI2MB4XDTIyMDEw
MTAzNTUyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjhkNzY4MzFhZTY5
Nzk1NmJlZTRjZTQzN2YyNjRmNDZmMzg1ODU1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALe0l6VhXPr8wWC1cZv0jM0yIg+xOp51IvJOFuXm2swokmRe
AJOIo2H+heQ6EE/+bZidcRGhrLWD5u0OVM7BGIVgS0c+HzTW6wJxah9XhjlGoI1G
YK9S+j+A1MZ7jzKvQLFGossnfNKHdv9NUSN6mqeaq+nZBU3LBYjH1n4pXhYqM5xB
gWcpTKufAFUB4NW/qwUEHBTrFAvJOP0+M/z4vtoMAvm/9rfSSYs35aXlOQKvZDhg
fnFyDxnFIoES2ot0KiZglMkVQa4Q5aeepwMrtrk9dFsk7tA90pkQlQD60udolFVC
kuJxKgCuoQSIQElGaNEj3WOEX1yy10YhHpZWcO0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQo12gxrml5Vr7kzkN/Jk9G84WFUjAfBgNVHSMEGDAWgBSygf8xT8iq45dU
B7CgwX8v3jTcJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NvSF9NVV9JcXVPWFZBZXdvTUZfTDk0MDNDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvZDczNTkyLWU0NmQtNDU5OC04YjEyLWZhOTExNGE4MmFjOS8x
L0tOZG9NYTVwZVZhLTVNNURmeVpQUnZPRmhWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
ZDczNTkyLWU0NmQtNDU5OC04YjEyLWZhOTExNGE4MmFjOS8xL3NvSF9NVV9JcXVP
WFZBZXdvTUZfTDk0MDNDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBT4wADANBAIAAjAHAwUAIAFL+DAN
BgkqhkiG9w0BAQsFAAOCAQEAcNMk9ZyQNHiXzJrzdWFOjE/on9ES81q90jSDXgom
CPrcDBKIH0WVomJy3BqthpQ3JTfPrJRDVDGE61Gw+ICvhqmfwrPjj4kFjTMrF3/Z
5n8dxcGaGZwgN2oJCQgYa5JiT3s4X3NB/+vzKtmuPvGGwEA0Z/rb/b4tiq8tEnHc
FTiiEQWQsnsOz72pBEj9wZpE2TTPMnjKW3KNGgU0X94ElwShIViouYWjr3MwJ3Lx
1BJF9xJxTu2AZAeq9ubewWW3Ht20Qe0zLty0F61pvAPWnCLwfl3MnTcVDasBWQkg
MSMJmx/bXxq6KEZP7MM3DgzJRmA/f9QbHiEyBo/OaujFiw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:14 2025 by rpki-client