Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/kKEFLDOhzdeEsdTSSuugaGumlTs.roa
File: kKEFLDOhzdeEsdTSSuugaGumlTs.roa (raw, json)
Hash identifier: 6WK4tyKTyAYWlTiujgKBRQrx8V4Lc5N5PG9z2qJ5m7A=
Subject key identifier: 90:A1:05:2C:33:A1:CD:D7:84:B1:D4:D2:4A:EB:A0:68:6B:A6:95:3B
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 03D8E944
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/kKEFLDOhzdeEsdTSSuugaGumlTs.roa
Signing time: Sat 01 Jan 2022 04:52:58 +0000
ROA not before: Sat 01 Jan 2022 04:52:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8426
IP address blocks: 176.111.104.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64547140 (0x3d8e944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jan 1 04:52:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90a1052c33a1cdd784b1d4d24aeba0686ba6953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:a3:1b:3a:9a:14:8f:e6:b2:29:9f:16:9c:
06:20:74:5b:8e:30:25:73:4d:01:61:3b:46:e9:42:
0e:b3:01:7f:42:6d:36:b4:af:7e:ac:2a:0e:a0:65:
70:8b:61:55:39:f2:ab:c2:d0:97:78:8c:73:2e:d4:
3f:b4:5e:ee:e6:a5:4c:66:74:58:d8:54:9e:c0:61:
ca:6c:ac:8a:ea:96:fd:1d:a0:12:a2:b3:9c:82:3f:
ea:7c:b4:81:ae:9a:b1:28:b6:da:d5:37:ba:12:68:
ca:8a:6f:5b:58:63:e3:9e:dc:af:47:2e:19:af:f7:
f1:33:90:b4:bf:7e:31:3b:85:c6:16:75:73:89:14:
40:40:fa:dc:d0:a0:72:9d:6b:69:a9:3a:7d:f0:c9:
61:1d:c0:68:b5:b5:cc:82:f8:e2:31:80:ea:18:ac:
4b:3a:f7:54:db:af:f5:e3:07:27:92:70:ea:b5:ed:
4d:6f:d4:88:a5:94:60:bc:41:07:fb:ac:72:b3:c9:
eb:e1:7a:47:ce:af:56:8b:b2:2f:63:85:84:18:89:
3c:b2:dd:53:2c:6e:ff:0f:3d:d2:f4:a3:48:0f:69:
34:24:1d:0a:69:aa:43:b5:f8:c7:01:98:2e:66:d7:
f8:22:31:1c:e1:9e:5d:52:42:86:5a:47:73:e8:fb:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:05:2C:33:A1:CD:D7:84:B1:D4:D2:4A:EB:A0:68:6B:A6:95:3B
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/kKEFLDOhzdeEsdTSSuugaGumlTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.104.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:14:d8:95:12:1c:d4:20:b2:86:8e:bf:11:61:3e:06:d2:3f:
bb:a8:b2:d8:0a:80:8c:04:bd:6b:68:19:73:e9:f5:a2:eb:1c:
85:64:c0:23:82:e1:fb:56:12:a8:1c:23:61:21:18:de:75:87:
fc:48:15:9c:d3:ef:02:0c:c7:ff:8d:4f:33:1b:28:b6:60:88:
cb:55:f9:80:ac:41:6b:7f:57:c5:a6:08:c4:84:0a:66:85:7a:
08:28:1d:d6:5c:bd:db:13:da:e6:71:e8:30:3f:49:3a:78:3e:
16:a9:12:b7:a1:74:43:9e:00:aa:16:7b:0e:ec:af:77:2a:b0:
90:86:40:56:51:25:e0:22:1c:0d:6a:10:aa:b6:d0:47:81:e9:
13:d4:81:86:6a:21:03:be:43:06:2c:60:ae:ce:5c:80:ff:f3:
28:a6:65:e6:d0:3a:6a:ef:b3:69:1d:cc:a0:9a:34:51:4a:e6:
fe:03:be:4d:d5:ed:5a:2c:5b:c7:b4:ca:c2:f6:2b:32:ab:8e:
17:7b:24:e2:66:27:1f:e5:72:ba:ce:62:12:68:7f:6c:72:45:
7d:49:83:2d:0f:94:42:53:33:48:b7:6c:fa:b2:28:07:07:be:
37:67:a7:c8:f6:ec:49:e2:fb:7b:4a:ce:1a:53:1b:af:7f:cb:
78:56:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:30 2025 by rpki-client