Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/KtboqnlB0p95oTSLLudT-AHhKpA.roa
File: KtboqnlB0p95oTSLLudT-AHhKpA.roa (raw, json)
Hash identifier: c3bMZCAuSzZ9SjvupA9yITzvalR6eKbSN4WhfQeYq0o=
Subject key identifier: 2A:D6:E8:AA:79:41:D2:9F:79:A1:34:8B:2E:E7:53:F8:01:E1:2A:90
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 09F9DF49
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/KtboqnlB0p95oTSLLudT-AHhKpA.roa
Signing time: Sat 01 Jan 2022 01:57:29 +0000
ROA not before: Sat 01 Jan 2022 01:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49879
IP address blocks: 185.226.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167370569 (0x9f9df49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 1 01:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ad6e8aa7941d29f79a1348b2ee753f801e12a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:db:63:95:16:4a:e3:68:63:50:32:b1:68:
6c:06:9b:04:51:9e:3d:81:ba:60:63:1c:39:b4:89:
08:71:c2:d5:3c:4d:87:94:c3:59:cf:5a:11:00:29:
5a:a2:31:4d:6e:56:47:f4:37:ac:f9:2d:2b:1b:b5:
13:a5:cb:05:2c:bb:53:16:d4:8b:f8:aa:4d:19:4b:
d0:32:b9:04:12:25:b6:a0:35:4a:0e:cc:8f:9f:bd:
a8:21:f4:79:94:ea:79:31:33:4c:3b:49:42:8a:5c:
b4:e8:01:ba:7e:1b:a2:07:75:5f:4a:e9:74:4f:49:
a8:67:28:b5:1d:09:ac:d4:50:32:38:63:af:2e:5b:
9d:17:53:5a:d2:c6:02:c2:3f:f1:ea:5b:22:c4:d4:
31:48:f8:43:ec:2f:92:e3:e8:2d:2d:eb:55:eb:8b:
16:6d:be:3b:38:2b:da:07:c4:fd:4c:7a:bf:39:9d:
95:0c:fc:1c:b6:24:35:ad:58:bb:eb:b2:3d:bc:92:
69:48:52:b4:20:31:e3:9a:28:9a:7c:f8:7f:65:cc:
31:c7:a2:22:a2:ec:ee:86:b9:6b:b0:f7:06:9a:40:
55:30:27:c0:0e:aa:bb:98:84:b3:b8:e4:d8:5c:b7:
9d:7e:65:4b:fb:00:2e:cc:6f:ce:c9:ee:fc:5a:10:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D6:E8:AA:79:41:D2:9F:79:A1:34:8B:2E:E7:53:F8:01:E1:2A:90
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/KtboqnlB0p95oTSLLudT-AHhKpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.162.0/24
Signature Algorithm: sha256WithRSAEncryption
74:49:6a:60:b8:c3:81:f3:d9:f5:ce:a0:ce:f3:c6:64:7c:50:
a2:10:c1:cb:dc:93:94:34:26:81:26:49:14:76:26:cd:da:da:
40:da:49:5a:72:dc:c7:a7:fd:7f:9b:87:f7:97:ac:2f:12:61:
19:6c:10:82:45:fc:64:1d:3b:3e:1d:26:fa:44:c2:e8:13:dc:
61:93:39:99:01:97:32:1c:e0:72:f4:7e:46:fb:2f:31:72:94:
73:18:cc:72:13:6a:4b:cf:42:e8:d2:71:07:78:a5:89:ae:ab:
ed:81:60:6e:9a:8a:37:d6:a5:ae:e5:1e:cb:59:3f:35:93:b1:
b2:1c:cc:b3:ba:a0:d8:dd:70:7c:bb:0b:6b:2c:0b:fe:de:0e:
0e:90:60:1d:09:fc:2f:e7:ca:b7:56:77:04:9b:93:67:ce:92:
98:74:94:af:7f:6f:13:84:74:47:ce:24:8e:a8:63:c7:f4:a6:
00:a3:87:12:e2:26:17:06:85:5a:cb:42:a4:ae:28:3b:85:48:
79:83:db:f8:9a:01:0c:40:d5:bd:d3:1a:7d:e6:be:f2:1a:8e:
7f:ad:80:d6:35:32:89:b5:09:dc:4c:c4:9f:17:52:37:40:eb:
74:60:9e:45:31:8b:8c:fd:08:e1:fc:c6:8c:58:ae:c8:6b:16:
c4:02:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:21 2025 by rpki-client