Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/KYGosb5SYKScm4pT6HMMgY8FpNE.roa
File: KYGosb5SYKScm4pT6HMMgY8FpNE.roa (raw, json)
Hash identifier: UX3Jal4MnyJ0Zp8hj0A1Y3XeLVg/vvL68RfTEUleDqQ=
Subject key identifier: 29:81:A8:B1:BE:52:60:A4:9C:9B:8A:53:E8:73:0C:81:8F:05:A4:D1
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 0185F3CC90C3DE52AAD8ACBE7C299404C84E
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/KYGosb5SYKScm4pT6HMMgY8FpNE.roa
Signing time: Fri 27 Jan 2023 15:15:47 +0000
ROA not before: Fri 27 Jan 2023 15:15:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8788
IP address blocks: 193.138.87.0/24 maxlen: 24
212.26.128.0/19 maxlen: 19
194.32.109.0/24 maxlen: 24
194.32.110.0/24 maxlen: 24
178.211.96.0/19 maxlen: 20
194.32.108.0/24 maxlen: 24
194.32.108.0/23 maxlen: 23
212.26.140.0/24 maxlen: 24
212.80.32.0/19 maxlen: 20
2a00:e780:2::/48 maxlen: 48
2a00:e780::/32 maxlen: 32
2a00:e780:a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:cc:90:c3:de:52:aa:d8:ac:be:7c:29:94:04:c8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jan 27 15:15:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2981a8b1be5260a49c9b8a53e8730c818f05a4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:60:3b:31:48:78:2f:a9:a0:36:d1:a7:e3:
4f:ae:1e:6e:e3:06:7e:2d:b8:c2:3f:6b:53:1e:f4:
70:29:2b:2b:d1:ff:59:d6:81:ad:33:a4:b6:af:b8:
bb:16:6f:30:60:8b:51:43:bd:4e:28:39:9e:fa:a4:
7b:12:99:f6:42:05:9c:2f:dd:ee:23:1d:fc:54:8c:
38:f4:1e:a9:66:4f:d9:54:4f:28:0c:86:ec:b3:56:
e1:91:a3:bf:23:79:dc:4d:50:de:f5:28:4c:b7:b4:
40:c2:18:1b:07:f8:ac:fa:32:5e:1d:ee:d6:97:0d:
28:b0:fe:83:6e:bf:c6:ca:4a:f1:22:b9:89:37:55:
09:e5:03:ba:b3:6e:3e:f0:4d:e5:33:75:7e:46:4f:
34:18:6d:96:93:de:cf:2f:c4:b1:d1:5a:e8:ca:45:
2e:f6:8e:5e:0d:49:d5:5e:d7:bd:53:ce:5f:83:d5:
6f:fc:bc:0b:4b:1f:7b:d6:bf:ab:e7:00:dc:03:0b:
50:39:65:3f:58:ac:8c:12:f0:e4:44:dd:70:a8:2a:
07:6f:05:ae:9b:ac:af:ca:e3:a0:2e:84:6a:ac:27:
37:d3:62:93:f4:c0:7e:fd:af:bd:93:33:41:75:f3:
a2:44:8b:01:bc:3a:ad:8b:e3:2c:71:2d:56:3a:c5:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:A8:B1:BE:52:60:A4:9C:9B:8A:53:E8:73:0C:81:8F:05:A4:D1
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/KYGosb5SYKScm4pT6HMMgY8FpNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.96.0/19
193.138.87.0/24
194.32.108.0-194.32.110.255
212.26.128.0/19
212.80.32.0/19
IPv6:
2a00:e780::/32
Signature Algorithm: sha256WithRSAEncryption
90:03:15:85:52:41:b6:88:6c:a0:94:c3:52:d3:d1:1c:ae:de:
41:d4:06:01:98:64:fa:55:30:b8:2e:59:17:57:a8:f7:c4:1f:
79:69:f0:dd:02:29:1f:8b:ca:0f:c4:5f:b4:0c:93:2a:33:df:
30:e1:53:bd:fa:ce:b3:85:6d:49:ad:6f:0f:f2:10:8a:ff:b4:
34:ae:4b:1a:64:66:8c:83:49:04:de:c2:c5:a3:da:18:be:51:
f1:4c:4e:b5:7a:9f:71:b0:cd:05:f1:6e:2b:e6:2f:3f:ca:7b:
c4:bc:63:7e:d9:37:26:49:7d:b6:1b:37:08:00:64:a4:40:b6:
3c:cb:f4:12:72:df:ba:9a:7e:d1:e4:f8:ed:64:77:4c:b9:6b:
b9:0f:1e:51:db:46:9c:4d:69:58:f3:2e:6c:d8:05:46:a4:f5:
5b:5b:0d:cc:f8:b4:4f:ba:e2:c4:e4:ed:01:52:14:c1:18:d5:
c9:c1:24:02:b2:0e:6d:03:1c:16:e9:2c:52:54:c8:28:52:4b:
f6:0d:04:d9:c8:c7:1e:91:a1:04:70:c4:51:0e:af:22:3f:4b:
a1:67:33:61:79:fc:38:b1:9b:27:d6:8b:f7:aa:19:a4:31:9f:
8e:d2:29:9e:7a:26:90:e1:e7:e7:01:bf:37:9c:a3:94:7e:b5:
b9:ab:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:50 2025 by rpki-client