Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/K5usF471m-keL3OQ50rpwuDzsNA.roa
File: K5usF471m-keL3OQ50rpwuDzsNA.roa (raw, json)
Hash identifier: aTtetBhGpVCVPEFEfwLffgri5odPW7Rf/G4gVJ8eYJI=
Subject key identifier: 2B:9B:AC:17:8E:F5:9B:E9:1E:2F:73:90:E7:4A:E9:C2:E0:F3:B0:D0
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 0183E495597BA2F6F47D04185AC95A0BC914
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/K5usF471m-keL3OQ50rpwuDzsNA.roa
Signing time: Mon 17 Oct 2022 06:15:36 +0000
ROA not before: Mon 17 Oct 2022 06:15:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35236
IP address blocks: 91.241.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:95:59:7b:a2:f6:f4:7d:04:18:5a:c9:5a:0b:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Oct 17 06:15:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b9bac178ef59be91e2f7390e74ae9c2e0f3b0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:10:24:f3:36:e6:53:36:af:78:50:a4:44:
bc:cc:3e:46:21:19:fa:15:30:64:35:cf:d9:e2:54:
ca:14:0d:5f:33:49:c5:f3:3f:06:4e:d0:e5:25:ad:
e1:4f:57:a0:c8:82:07:98:f5:15:df:1e:74:73:5b:
ab:62:f2:80:17:cd:6a:97:fe:7e:d3:62:9d:03:de:
af:52:7b:95:b7:64:a4:ce:25:e8:7b:08:41:bc:ae:
34:74:bf:12:14:2d:50:cd:85:ad:f8:2f:3c:c5:b6:
22:d2:6b:d1:03:53:72:d0:44:ee:67:0a:aa:54:f5:
57:aa:91:3a:5e:c2:71:20:c0:14:69:eb:f2:24:e5:
41:6b:a7:ef:c3:04:6e:a5:60:bf:b1:c4:89:cb:4b:
1c:90:9a:fc:36:f8:f2:f5:ad:ab:51:22:63:d9:36:
48:56:a5:0b:32:62:25:4b:97:7e:13:57:91:8f:64:
18:0f:84:f7:81:0d:b9:d0:2b:94:54:5a:81:0a:f4:
52:aa:24:8c:9f:1c:e8:5d:68:c1:57:91:88:0e:81:
fa:fd:45:75:7d:57:4a:13:40:47:90:2d:b0:b3:48:
bc:3f:80:82:74:09:42:85:b7:eb:96:89:40:4f:6f:
11:b3:3b:e9:76:d8:26:aa:05:4d:64:cb:da:f9:eb:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:AC:17:8E:F5:9B:E9:1E:2F:73:90:E7:4A:E9:C2:E0:F3:B0:D0
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/K5usF471m-keL3OQ50rpwuDzsNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:1a:31:3c:05:47:b4:98:b6:65:66:40:46:50:92:9d:48:a1:
98:79:f0:8e:fe:b5:91:eb:51:16:56:27:e5:ab:0e:49:8f:4b:
53:b4:51:d5:5b:95:ef:e2:58:dc:a6:1b:f9:11:d2:17:5c:70:
2c:61:6a:db:ee:54:ca:fe:f8:4a:48:0b:9d:0a:dc:2c:cc:cb:
4b:76:e1:09:55:c7:45:c1:ef:db:f6:7e:26:74:5b:9d:e5:72:
16:89:ab:e8:1e:38:9c:de:45:6c:fd:50:32:b0:c5:3e:64:4d:
bc:1a:88:1f:6d:39:ff:65:4e:6b:d1:08:4a:2d:3c:31:36:70:
61:db:9f:41:42:7c:a9:4d:dc:d1:81:40:57:18:ec:d7:4e:7c:
24:73:45:19:31:f0:cb:5b:8c:c4:fa:6a:b4:ee:2c:11:ff:32:
6a:d5:13:95:5d:75:14:93:91:1d:29:c6:0b:d9:e7:9b:87:ef:
1f:32:d8:32:09:4d:22:33:54:38:74:16:8a:b0:b6:90:e9:49:
50:68:52:04:d1:e7:c2:2b:1e:4c:08:40:42:d4:f0:88:32:90:
11:7d:e1:d8:b1:8d:13:26:e5:65:81:34:cf:11:a2:f7:3e:65:
6b:c8:72:a5:76:11:36:11:2e:2c:25:e8:28:d2:f6:f0:84:ca:
a6:76:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:24 2025 by rpki-client