Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/KklCUywVSQRrdRLH8M3znxQBqIk.roa
File: KklCUywVSQRrdRLH8M3znxQBqIk.roa (raw, json)
Hash identifier: 5i8/TcCxx6Ojr0LHJTEqiCURkYGLGqQGLwOyOZYeMDQ=
Subject key identifier: 2A:49:42:53:2C:15:49:04:6B:75:12:C7:F0:CD:F3:9F:14:01:A8:89
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 01889EF934DE823B65655A65C32E57D0875E
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/KklCUywVSQRrdRLH8M3znxQBqIk.roa
Signing time: Fri 09 Jun 2023 07:05:12 +0000
ROA not before: Fri 09 Jun 2023 07:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25238
IP address blocks: 195.234.206.0/23 maxlen: 23
195.234.204.0/23 maxlen: 23
195.234.204.0/22 maxlen: 22
2001:67c:2620::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:f9:34:de:82:3b:65:65:5a:65:c3:2e:57:d0:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Jun 9 07:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a4942532c1549046b7512c7f0cdf39f1401a889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:b4:9e:0b:02:56:74:8c:ba:e0:50:27:ea:
ca:60:0c:b0:cd:e3:17:7b:70:d2:50:f0:97:e8:db:
d9:dd:98:72:ba:c3:ca:b8:2b:fb:e2:41:a8:70:65:
3d:f9:3e:1b:21:69:6a:60:9a:c1:26:8f:94:e6:79:
45:4b:23:03:41:04:97:f0:e4:47:ea:4e:b3:78:1f:
a4:5b:42:53:44:4c:dc:76:3a:49:b9:53:4f:87:82:
86:9f:12:ca:2c:b3:c9:28:f4:0a:cc:b0:c2:e7:68:
c4:38:42:89:dc:03:02:ff:d1:05:e3:21:07:d7:5c:
11:77:0c:3f:0f:a0:09:53:0f:9a:2b:4f:05:00:62:
d0:60:fd:ff:57:95:10:6b:9e:aa:ce:7d:4b:a5:cc:
a6:93:ec:0a:32:8a:83:a3:70:3b:27:e2:d4:91:2d:
0b:66:b2:ef:65:f3:a1:e3:88:a3:7d:2c:17:32:41:
f2:4b:e8:c3:91:f9:f2:53:bc:c9:bc:28:1f:93:21:
40:eb:06:a6:cb:8f:8b:ba:e1:91:ef:f8:ec:5f:64:
53:6b:7b:c0:4f:18:cc:9c:ee:0d:3b:e1:2c:d0:90:
5c:dd:6e:ee:af:09:6f:78:44:20:fa:15:f9:e9:5e:
25:95:9e:8f:5c:4d:1a:3e:98:4b:93:66:23:f6:47:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:42:53:2C:15:49:04:6B:75:12:C7:F0:CD:F3:9F:14:01:A8:89
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/KklCUywVSQRrdRLH8M3znxQBqIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.204.0/22
IPv6:
2001:67c:2620::/48
Signature Algorithm: sha256WithRSAEncryption
32:ed:4a:35:3b:df:36:ba:9f:00:23:79:b6:a6:d1:7e:93:8e:
88:d5:31:63:4f:6e:9c:31:8c:87:b0:42:f5:62:7a:77:2a:97:
3f:07:59:67:87:4e:27:54:a5:db:b5:e4:d0:27:14:fa:f7:f5:
e2:46:da:ca:c4:39:d4:af:68:58:79:a4:83:45:31:2c:04:d3:
17:7c:de:12:97:54:91:1a:62:38:7f:bf:bb:a5:c8:7f:30:8f:
24:2b:a0:3f:70:97:4e:e8:68:92:e9:3c:b4:e8:31:c1:83:d4:
b6:b8:95:61:7b:5b:76:09:6d:6a:69:23:49:ce:4d:10:a3:3f:
ef:fc:9e:7c:b7:03:48:09:6b:59:65:48:c8:67:da:bb:8f:92:
3d:fb:32:3e:4b:0b:8d:ab:10:21:46:ed:92:aa:29:d6:53:77:
4a:fe:ab:d6:0c:b3:9c:c8:ea:e2:b1:60:f5:a2:5a:eb:6f:6a:
e1:96:0e:d1:af:cb:a2:c4:3c:de:47:4c:ef:99:e4:47:09:74:
0f:4f:a6:c3:ba:02:24:ed:c3:96:fe:70:0b:c2:29:c0:02:00:
ee:13:04:e6:35:62:d9:a4:03:2a:b5:1e:32:1d:d6:08:e1:30:
70:88:38:b2:c3:cf:2d:a3:e9:70:96:b6:e4:30:be:2c:41:39:
63:8e:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:48 2025 by rpki-client