Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/KfBBXR1SDCCxD40Uw_5ofcR684M.roa
File: KfBBXR1SDCCxD40Uw_5ofcR684M.roa (raw, json)
Hash identifier: gHvVmavnnuhaTQSF9Y9OVSJZJSOck3Bg7Daax0/MLgc=
Subject key identifier: 29:F0:41:5D:1D:52:0C:20:B1:0F:8D:14:C3:FE:68:7D:C4:7A:F3:83
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01846FE535F9EE07FF96D9F11F80E3278AB8
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/KfBBXR1SDCCxD40Uw_5ofcR684M.roa
Signing time: Sun 13 Nov 2022 07:30:03 +0000
ROA not before: Sun 13 Nov 2022 07:30:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207141
IP address blocks: 185.164.253.0/24 maxlen: 24
185.164.252.0/22 maxlen: 24
185.164.252.0/24 maxlen: 24
185.164.254.0/24 maxlen: 24
185.206.237.0/24 maxlen: 24
185.206.239.0/24 maxlen: 24
185.206.236.0/22 maxlen: 24
185.206.236.0/24 maxlen: 24
185.206.238.0/24 maxlen: 24
2a0b:1b40::/29 maxlen: 29
2a0b:b400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:e5:35:f9:ee:07:ff:96:d9:f1:1f:80:e3:27:8a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Nov 13 07:30:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29f0415d1d520c20b10f8d14c3fe687dc47af383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:3c:a7:ae:b8:33:0a:88:e1:e1:eb:e1:85:
d7:2f:82:70:a1:84:21:38:42:7b:b9:28:0c:65:7c:
17:10:20:7e:81:ed:35:ae:36:fd:05:b8:28:e7:f2:
38:2e:3e:5c:4e:83:e2:7d:4a:62:79:44:8f:c8:e8:
d2:d8:e1:ab:a6:fc:69:4a:6b:d2:3d:ff:81:69:3c:
51:21:df:a0:ec:2d:e5:4a:5f:3d:89:7a:c4:b6:d7:
90:04:52:95:c5:a9:db:58:57:92:2f:a0:6a:72:22:
53:c9:e6:20:9f:26:5e:5d:23:2d:5f:9f:3e:a2:67:
5e:7f:d6:e7:b9:05:0e:94:55:6d:ee:57:ab:a0:93:
06:87:e6:76:9c:d3:d1:73:e0:14:22:3a:b7:13:c0:
ec:3b:91:4f:f0:cc:f2:ce:fb:50:f3:71:50:5f:ac:
55:fe:cc:c5:03:45:8e:b8:22:29:83:02:ec:12:6f:
6b:71:06:36:3f:48:1f:f0:03:67:86:a5:30:7c:f3:
73:2b:4d:33:cd:0d:60:46:81:d7:a9:d9:4f:54:c4:
0a:6e:b9:6d:f2:cc:2a:9c:99:c3:66:78:d5:19:42:
4e:bf:06:bf:47:e4:7f:e1:a2:1e:61:b8:89:ce:3b:
54:f3:a1:d7:b5:bb:4f:ba:cc:53:7c:24:dd:fb:61:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:41:5D:1D:52:0C:20:B1:0F:8D:14:C3:FE:68:7D:C4:7A:F3:83
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/KfBBXR1SDCCxD40Uw_5ofcR684M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.252.0/22
185.206.236.0/22
IPv6:
2a0b:1b40::/29
2a0b:b400::/29
Signature Algorithm: sha256WithRSAEncryption
2a:fd:ac:8e:cf:8a:0d:b1:65:25:a5:f6:4e:7b:7b:18:79:42:
f8:68:61:60:c4:ab:4e:4c:b5:37:0e:96:5e:93:ad:bd:41:37:
2b:c1:65:13:f7:49:b7:b8:06:eb:06:60:19:c9:60:38:66:86:
c9:7c:4f:e3:39:f0:dd:0e:19:42:e3:3b:12:39:b6:2c:4d:d1:
7a:ba:ac:9e:74:e7:2a:70:bd:a0:34:ce:e6:36:92:b2:5a:03:
a5:80:75:a0:1f:42:30:a7:53:86:d9:c5:10:ca:ad:a2:d3:e7:
34:08:69:a6:da:a3:d1:d5:b6:cf:97:60:fd:90:fe:30:1c:97:
b0:fe:f9:e7:95:6d:09:db:09:2b:34:fb:11:ad:15:d3:5e:90:
c4:78:3b:09:02:1a:b7:17:3d:78:8a:04:81:d8:3d:30:2e:69:
a5:7b:ca:be:9e:cf:dc:8d:73:3c:c5:79:07:bd:cc:29:c7:88:
49:05:b2:6e:ee:3d:b2:57:5a:8c:82:d4:bf:f6:af:1b:a7:bb:
6b:e2:71:97:21:7f:ad:81:2f:53:7c:b1:7d:38:6f:1b:c5:50:
c4:66:1a:65:e1:df:5f:76:b7:64:b2:64:57:b3:3d:4c:ca:98:
b6:60:6a:80:bd:ea:67:59:ad:42:8a:b0:98:4f:98:53:b0:60:
3a:94:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:22 2025 by rpki-client