Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/krM667KE0SCKcfdUC7ape3sg5Fo.roa
File: krM667KE0SCKcfdUC7ape3sg5Fo.roa (raw, json)
Hash identifier: fZQM5PZGT2VOTVChf5CoP+KKbptKLzMYS+0yiA1ru88=
Subject key identifier: 92:B3:3A:EB:B2:84:D1:20:8A:71:F7:54:0B:B6:A9:7B:7B:20:E4:5A
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 018571BA1C186854BD0B15655B2923FC2491
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/krM667KE0SCKcfdUC7ape3sg5Fo.roa
Signing time: Mon 02 Jan 2023 09:05:00 +0000
ROA not before: Mon 02 Jan 2023 09:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35236
IP address blocks: 91.241.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:1c:18:68:54:bd:0b:15:65:5b:29:23:fc:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jan 2 09:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b33aebb284d1208a71f7540bb6a97b7b20e45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:b3:2f:a3:73:75:3c:83:10:05:5c:cf:cd:
85:2b:1d:15:5d:19:15:13:90:05:f2:78:11:41:0d:
73:55:0a:79:4d:62:8c:3c:96:0b:71:21:1c:ee:c7:
a5:43:eb:b0:d2:96:5c:13:c6:1e:4a:a5:4b:ef:de:
cf:95:88:46:10:be:71:2a:4f:f4:2f:7e:1a:d3:2c:
25:80:b5:f0:15:da:38:1d:25:0c:5c:a1:d1:bb:60:
f8:79:e8:b5:70:cd:99:43:c4:8b:06:01:30:d3:d9:
86:2b:bb:a8:ec:53:10:da:ba:e6:ff:be:0d:28:a9:
b7:5a:7f:98:83:d9:dc:fe:c6:b2:da:55:d9:ca:05:
a7:f4:6a:e6:4f:8e:a0:92:d4:09:b6:29:e9:80:4c:
c3:49:5a:f4:ee:0c:94:60:42:af:38:7d:49:22:cf:
70:bd:1d:35:ed:ee:8f:90:27:c4:e2:ff:0d:a3:61:
ac:5b:ad:4e:16:ea:89:bc:36:47:28:3e:0b:8c:dd:
72:fe:a6:72:19:39:16:e5:44:56:cf:7e:ef:75:51:
1a:d7:0e:1f:3e:1f:77:05:4c:8b:94:ce:8f:8f:da:
53:99:11:3c:7e:bd:07:30:4c:04:b3:b7:2f:e8:af:
3f:2c:a3:7e:7a:1c:48:ea:28:de:96:cc:9b:76:81:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:3A:EB:B2:84:D1:20:8A:71:F7:54:0B:B6:A9:7B:7B:20:E4:5A
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/krM667KE0SCKcfdUC7ape3sg5Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:2a:91:cd:2f:bb:60:a6:8b:d5:0f:3d:66:8c:a6:22:67:12:
a8:e8:a3:4c:b9:cc:68:8b:ea:53:f1:b5:b9:04:5b:1a:f6:e3:
b2:3e:67:d7:05:df:54:f9:20:1d:4c:76:59:a7:53:9f:6d:16:
43:5e:9c:25:a2:bc:20:53:ec:02:3b:68:06:18:ed:7f:72:7d:
cd:79:1c:52:ec:2c:bd:26:e9:d7:0d:5a:b0:06:a0:ff:d3:5c:
ed:80:16:6d:a1:a6:ca:aa:28:45:04:65:23:7a:e0:46:c7:55:
ae:4a:e9:fa:fe:be:3d:c4:4f:98:f0:18:d0:83:1e:1a:d5:27:
dc:fa:32:13:78:56:63:ff:5b:ab:63:79:9e:1e:70:06:b4:e4:
ad:95:9d:6d:d5:14:cb:13:d8:4e:4d:5d:54:dd:12:c9:04:23:
63:49:63:11:f5:44:da:d7:e5:7c:2e:a2:45:70:10:bc:f7:3e:
66:33:09:0e:39:9f:d8:f3:a0:3e:6d:b1:ae:40:0b:9c:cc:6a:
7b:8e:f0:a9:fd:c6:27:cb:59:e3:d8:1d:04:6a:7e:55:bd:c3:
8c:0b:43:ab:dc:6d:9e:47:6e:a6:d9:30:2a:1f:4a:fc:41:6c:
44:8f:d7:25:f1:2f:d2:a1:cb:c4:52:88:f2:0b:14:45:82:3a:
95:6b:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:26 2025 by rpki-client