Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KcxjdIZLIQjMD5OYpfi62adXg7A.roa
File: KcxjdIZLIQjMD5OYpfi62adXg7A.roa (raw, json)
Hash identifier: IB+ODycGqMbFpr2vOz4JQ9FBqPuCbt7y4P9tUYgqwWU=
Subject key identifier: 29:CC:63:74:86:4B:21:08:CC:0F:93:98:A5:F8:BA:D9:A7:57:83:B0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018BAA92048B4038EC2D8E68B1FC7500FA8E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KcxjdIZLIQjMD5OYpfi62adXg7A.roa
Signing time: Tue 07 Nov 2023 16:16:18 +0000
ROA not before: Tue 07 Nov 2023 16:16:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47726
IP address blocks: 92.38.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:92:04:8b:40:38:ec:2d:8e:68:b1:fc:75:00:fa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 7 16:16:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29cc6374864b2108cc0f9398a5f8bad9a75783b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:1b:b8:74:8b:05:02:1d:4c:50:f3:c4:8b:
7b:1a:8f:cf:f0:14:c2:d2:73:3d:68:b5:69:8a:46:
f0:cb:4a:51:d2:f8:aa:2b:14:93:2e:d5:f8:53:42:
dd:b9:d0:7c:e5:87:dd:70:98:c7:36:fa:83:e2:ca:
41:f0:cf:3c:12:dc:e3:ac:17:f6:88:8a:e4:7d:c8:
c2:fd:33:00:17:5b:bf:b9:16:5e:f3:37:c5:ca:c1:
a0:23:79:dc:1b:d4:b2:7f:e3:2f:54:7e:10:a3:d7:
13:88:d1:e6:11:d4:bc:33:b3:60:67:77:59:e5:54:
17:22:23:f7:0d:0c:66:5d:ce:42:46:e4:5a:56:55:
05:1e:9b:10:c8:bc:29:ef:59:5f:9e:82:f2:18:2e:
d1:7a:88:01:92:ac:33:94:8a:ba:a7:0a:b3:fb:7e:
4b:17:f7:08:f6:ba:eb:b4:3e:98:42:ba:34:ef:6a:
01:c8:af:8c:3a:39:63:1b:78:4d:2a:e2:88:fa:51:
7c:9d:29:ae:ba:16:77:3b:49:83:51:a2:13:7c:e4:
ee:84:48:b3:59:f5:ca:67:5e:7f:a7:f3:23:42:e6:
45:c9:06:54:37:8b:0d:7e:b6:98:26:c6:67:4c:b8:
3a:b1:84:56:f2:ba:27:16:0f:c5:7d:0c:82:8d:4b:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:63:74:86:4B:21:08:CC:0F:93:98:A5:F8:BA:D9:A7:57:83:B0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KcxjdIZLIQjMD5OYpfi62adXg7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:c5:b2:31:b6:c7:c5:2a:38:13:5c:d0:15:1f:89:67:e8:bf:
5c:54:91:ee:81:7b:c7:9a:96:e2:d8:f4:a7:10:e7:b9:b2:59:
0b:70:e1:d3:57:85:a6:7e:25:3e:50:11:9f:97:79:01:c0:98:
7a:51:1a:31:69:06:d7:28:2d:6f:c2:ed:0c:75:f8:35:fd:ef:
3c:42:42:55:38:dc:6c:38:ac:34:88:ae:18:a8:47:02:a9:68:
50:8f:5a:03:9a:b1:1e:82:71:6a:c2:a0:df:74:7c:38:ee:80:
53:49:66:e3:8d:7a:55:2b:ad:0e:c6:00:9b:0b:d3:af:50:55:
d4:5c:28:b2:ba:d2:e9:ac:a1:d0:2f:2a:de:5f:00:89:27:47:
91:f3:4a:40:bb:ab:5e:c2:6f:89:ec:5b:8c:5c:2a:d5:b5:e2:
9d:ed:08:f4:5f:e2:f9:8a:d3:ff:7f:a3:dc:87:40:b0:b3:62:
7d:e0:4c:1e:30:72:14:be:cc:08:64:d7:3c:b1:aa:1f:8c:b3:
38:1a:40:9f:d4:7b:c7:e3:f3:4b:81:05:87:ab:fd:f3:1d:0c:
6e:93:f7:80:85:11:77:d3:79:a9:10:bf:83:1d:09:b7:d7:49:
a0:34:25:44:29:ea:98:0b:55:d7:11:e2:6a:32:61:57:1f:32:
18:ec:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:48:58 2025 by rpki-client