Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/K-OS7raxecN5bveNFefRx5jBxE8.roa
File: K-OS7raxecN5bveNFefRx5jBxE8.roa (raw, json)
Hash identifier: 9jY/sTS18HOOPVyC4Q2uqAKYSRYk2spSNxgVQS2TywU=
Subject key identifier: 2B:E3:92:EE:B6:B1:79:C3:79:6E:F7:8D:15:E7:D1:C7:98:C1:C4:4F
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 04055BC1
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/K-OS7raxecN5bveNFefRx5jBxE8.roa
Signing time: Sat 01 Jan 2022 08:01:28 +0000
ROA not before: Sat 01 Jan 2022 08:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209782
IP address blocks: 185.126.203.0/24 maxlen: 24
185.126.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67460033 (0x4055bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 1 08:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2be392eeb6b179c3796ef78d15e7d1c798c1c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:06:6b:8d:9a:2d:9f:7b:2b:15:f3:06:f2:
5b:69:c5:a7:f4:90:0d:55:58:74:44:3b:41:44:3d:
19:65:a0:b3:1e:cd:f8:84:d0:1e:7a:4a:ca:21:85:
36:98:04:27:9c:1a:59:56:c5:00:95:b2:f8:39:e4:
69:c1:4c:28:64:19:8a:95:a4:c5:0c:7b:ba:b8:2c:
89:c3:9f:75:d5:4d:44:04:ac:27:88:50:40:13:19:
96:a4:de:b3:45:67:16:a6:af:be:69:ed:87:4e:7b:
72:21:83:a3:eb:00:ee:8d:6f:42:00:af:70:43:bd:
37:e1:c4:af:70:50:2b:12:d8:24:2e:c9:9d:46:1c:
a4:ba:4a:6e:20:19:f7:8d:a9:db:e4:1e:6a:dd:e9:
db:63:e6:cf:8c:6c:aa:e5:ea:8a:ee:c9:9d:cc:ed:
cb:b0:ae:b8:0c:87:d4:46:88:cd:85:11:98:37:42:
89:56:a6:ee:46:b1:57:7e:ae:63:2b:7e:5d:9f:1a:
04:3b:1c:36:61:a7:69:77:ee:24:62:5f:85:8a:d9:
a6:e2:1c:29:de:6d:1b:ec:a1:be:c6:06:b6:6a:d7:
1a:b9:0b:45:10:75:85:2a:7e:c7:c7:cd:6c:6e:cc:
54:04:06:0f:e7:4c:58:4f:d0:4f:d5:c0:0b:4d:04:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:92:EE:B6:B1:79:C3:79:6E:F7:8D:15:E7:D1:C7:98:C1:C4:4F
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/K-OS7raxecN5bveNFefRx5jBxE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.202.0/23
Signature Algorithm: sha256WithRSAEncryption
41:ac:e3:b7:c5:53:53:f0:a8:6e:8d:d4:48:82:f2:c1:98:66:
13:54:98:68:95:7b:72:bc:38:cb:fd:f3:47:68:cb:a1:ee:68:
b5:3f:87:44:75:4d:13:63:57:b6:54:21:f4:11:50:1f:d1:9c:
18:f6:8c:63:71:10:58:26:ae:75:83:7a:aa:de:2d:24:cd:13:
f0:3d:d8:71:4a:96:b0:0c:e1:9a:a9:b6:80:ee:81:be:03:14:
b7:e3:dc:ca:9a:1a:b6:e0:d5:0c:1c:ad:eb:2f:fb:37:4f:55:
e9:9d:48:c2:77:77:22:30:6a:d0:61:88:6c:e4:23:e0:3e:b2:
9f:1d:73:ce:7a:5f:19:31:1e:80:e1:18:df:6d:1c:0a:17:28:
3f:ee:0b:17:3e:63:0c:2b:85:16:62:fe:29:5b:6f:0b:13:6c:
7e:99:d7:44:ab:79:72:f6:0d:fa:15:83:4a:94:6e:8f:95:2d:
84:2c:6e:69:a7:04:93:aa:e5:fb:25:8a:70:4b:34:f6:a6:6c:
2e:2e:60:d2:95:3a:8e:35:72:60:87:12:42:9d:cf:1a:90:63:
a5:23:f8:d6:6c:d5:0b:f0:2b:c8:fa:41:19:6a:f1:7a:09:01:
82:21:bd:cc:32:85:96:7c:b3:41:9f:21:31:2c:3d:1c:1d:25:
06:ae:ad:c2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAVbwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTNlMGNkOGIzZTA0NGVkYjgyM2FlZjY4OGFhZmIwYjc1ZGU4Njc1MB4XDTIyMDEw
MTA4MDEyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmJlMzkyZWViNmIx
NzljMzc5NmVmNzhkMTVlN2QxYzc5OGMxYzQ0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMn2BmuNmi2feysV8wbyW2nFp/SQDVVYdEQ7QUQ9GWWgsx7N
+ITQHnpKyiGFNpgEJ5waWVbFAJWy+DnkacFMKGQZipWkxQx7urgsicOfddVNRASs
J4hQQBMZlqTes0VnFqavvmnth057ciGDo+sA7o1vQgCvcEO9N+HEr3BQKxLYJC7J
nUYcpLpKbiAZ942p2+Qeat3p22Pmz4xsquXqiu7Jnczty7CuuAyH1EaIzYURmDdC
iVam7kaxV36uYyt+XZ8aBDscNmGnaXfuJGJfhYrZpuIcKd5tG+yhvsYGtmrXGrkL
RRB1hSp+x8fNbG7MVAQGD+dMWE/QT9XAC00EbacCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQr45LutrF5w3lu940V59HHmMHETzAfBgNVHSMEGDAWgBQpPgzYs+BE7bgj
rvaIqvsLdd6GdTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tUNE0yTFBnUk8yNEk2NzJpS3I3QzNYZWhuVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvNmRhMWMyLTI1MmQtNGJkMi1iNTZjLWJiMjE3Y2MzYjc4ZC8x
L0stT1M3cmF4ZWNONWJ2ZU5GZWZSeDVqQnhFOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
NmRhMWMyLTI1MmQtNGJkMi1iNTZjLWJiMjE3Y2MzYjc4ZC8xL0tUNE0yTFBnUk8y
NEk2NzJpS3I3QzNYZWhuVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbl+yjANBgkqhkiG9w0BAQsFAAOC
AQEAQazjt8VTU/Cobo3USILywZhmE1SYaJV7crw4y/3zR2jLoe5otT+HRHVNE2NX
tlQh9BFQH9GcGPaMY3EQWCaudYN6qt4tJM0T8D3YcUqWsAzhmqm2gO6BvgMUt+Pc
ypoatuDVDByt6y/7N09V6Z1Iwnd3IjBq0GGIbOQj4D6ynx1zznpfGTEegOEY320c
ChcoP+4LFz5jDCuFFmL+KVtvCxNsfpnXRKt5cvYN+hWDSpRuj5UthCxuaacEk6rl
+yWKcEs09qZsLi5g0pU6jjVyYIcSQp3PGpBjpSP41mzVC/AryPpBGWrxegkBgiG9
zDKFlnyzQZ8hMSw9HB0lBq6twg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:14 2025 by rpki-client