Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/KKORE6_unfIIrJxuFv5DYcDmqH8.roa
File: KKORE6_unfIIrJxuFv5DYcDmqH8.roa (raw, json)
Hash identifier: /SOhNHNSuEwkXuyD17OGPIsVaQ2XBa7nGuvbx9/3Yuw=
Subject key identifier: 28:A3:91:13:AF:EE:9D:F2:08:AC:9C:6E:16:FE:43:61:C0:E6:A8:7F
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018608493727A4B0FAD23A12579E126323A6
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/KKORE6_unfIIrJxuFv5DYcDmqH8.roa
Signing time: Tue 31 Jan 2023 14:44:21 +0000
ROA not before: Tue 31 Jan 2023 14:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61996
IP address blocks: 95.169.217.0/24 maxlen: 24
95.169.215.0/24 maxlen: 24
95.169.216.0/24 maxlen: 24
95.169.214.0/24 maxlen: 24
95.169.220.0/24 maxlen: 24
95.169.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:37:27:a4:b0:fa:d2:3a:12:57:9e:12:63:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a39113afee9df208ac9c6e16fe4361c0e6a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:0c:41:5f:c3:99:96:92:86:fa:89:5f:aa:
6d:29:5d:60:73:16:a1:19:ff:67:ab:4a:75:5c:76:
c8:56:f4:a8:2d:82:21:af:a0:08:a9:69:29:0f:52:
7e:d5:35:0e:49:98:7d:93:ec:51:60:a9:89:ae:93:
6b:3d:32:79:96:fb:d0:eb:fe:c0:7d:76:39:3a:1b:
c3:c3:ce:41:69:19:48:f8:f8:e5:00:23:a3:f7:52:
48:c9:c9:c3:39:1f:bd:6d:b7:b4:87:cc:c1:bc:f9:
d1:25:2b:f5:0f:27:83:cd:4a:32:0b:79:6f:cd:de:
3d:56:89:06:d9:2f:98:82:a3:bf:37:50:82:54:c1:
22:12:0b:88:cc:25:41:4c:62:cb:6b:5e:94:e9:d9:
60:5d:65:a3:98:fe:1a:b4:2b:98:70:4d:53:93:b8:
a8:e1:21:6f:ed:b8:d1:a4:d4:06:f2:c1:d2:e3:d1:
89:4f:6a:76:a1:d2:0a:2d:00:f6:a4:2f:9e:ae:ab:
15:73:2e:44:ee:90:f4:10:b4:82:6e:d1:49:18:73:
7b:a5:91:2a:4c:c5:1b:a0:c7:bd:72:df:12:e6:e5:
e5:ed:8a:8b:ab:71:f5:d3:2b:ac:6e:b8:17:6a:8d:
22:76:4a:c8:eb:07:1c:4b:df:76:e5:71:52:ff:5e:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:91:13:AF:EE:9D:F2:08:AC:9C:6E:16:FE:43:61:C0:E6:A8:7F
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/KKORE6_unfIIrJxuFv5DYcDmqH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.214.0-95.169.217.255
95.169.220.0/24
95.169.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5f:db:5d:2a:e4:fb:14:4b:75:f1:cf:dc:70:f4:10:96:5f:
2b:44:f0:1f:48:2b:01:19:42:94:56:bf:5b:62:70:a3:0c:26:
41:d0:2d:f7:6b:3e:ef:c3:8c:a9:c2:04:25:75:11:53:3a:9d:
36:d2:29:60:75:b7:66:fd:e2:74:aa:a0:8b:6b:c7:b1:0a:43:
ce:df:d7:cb:09:d3:2c:7a:d8:e8:b4:73:cb:30:80:e0:10:09:
e3:36:b9:4c:96:b4:18:8c:f4:b3:de:31:6d:bd:e5:22:59:5c:
01:cb:04:31:9e:43:98:7e:d5:eb:12:11:4e:56:60:a5:76:7d:
de:06:b9:9c:e4:98:6d:fe:4d:6f:9e:aa:12:4e:03:a4:57:8d:
4b:bd:27:0f:80:5b:bd:0a:f4:60:35:73:4e:7c:18:08:0a:6a:
bb:30:11:86:91:ab:1a:b6:6c:56:11:d6:0f:8a:05:e9:ce:58:
95:93:61:09:97:7c:49:3e:22:32:9e:83:12:a1:16:90:aa:1b:
5d:4e:6f:9a:14:85:9d:00:ca:fc:6f:a6:ed:5f:7f:16:d8:c8:
c7:e8:1f:c9:af:47:0e:af:95:04:cd:28:5c:27:ee:76:19:91:
dc:fd:5f:cb:18:0e:f8:5f:2a:18:49:f0:84:ad:23:54:7a:ea:
ea:ba:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:38:55 2025 by rpki-client