Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/kgr9k3vOnmmGtwVeX8Yd1BViYnk.roa
File: kgr9k3vOnmmGtwVeX8Yd1BViYnk.roa (raw, json)
Hash identifier: 5EUSQ70GOZfRlT0lZ+pFFPEwQ95tD4hFdZGXfoAf964=
Subject key identifier: 92:0A:FD:93:7B:CE:9E:69:86:B7:05:5E:5F:C6:1D:D4:15:62:62:79
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 06BD19C3
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/kgr9k3vOnmmGtwVeX8Yd1BViYnk.roa
Signing time: Sat 01 Jan 2022 06:55:30 +0000
ROA not before: Sat 01 Jan 2022 06:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48438
IP address blocks: 91.210.248.0/22 maxlen: 24
194.26.164.0/22 maxlen: 24
31.43.128.0/19 maxlen: 22
2a0c:b440::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113056195 (0x6bd19c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Jan 1 06:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=920afd937bce9e6986b7055e5fc61dd415626279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:15:40:f1:5f:53:23:5b:16:ce:be:67:f9:
18:a1:88:dc:ec:ee:b5:60:10:dd:49:81:47:f7:72:
97:6b:1f:69:8c:12:2f:44:ec:fe:fa:86:55:a3:ee:
9b:c6:c0:e0:3c:df:66:3f:0d:41:7c:0e:a3:8c:8c:
0e:0c:95:84:a0:7d:5a:da:9a:01:05:af:5b:dd:87:
5e:0a:60:3f:24:f1:fd:19:63:5e:12:c7:f6:b5:f8:
fe:ef:20:a1:84:5f:19:60:87:bc:31:a8:5f:0c:0b:
bb:67:f7:5e:bb:c4:4a:f6:8c:8d:6b:dd:fd:d9:d3:
fc:a2:f7:9b:bc:0a:b1:cb:3d:c2:b6:23:0b:c3:f5:
d0:fd:80:0a:8e:8b:c7:51:3b:94:c1:58:b7:14:18:
bb:3a:1c:f9:c4:d4:96:80:0f:d3:59:e9:78:a3:33:
9d:ff:88:6f:87:6d:ec:ab:a9:cc:17:cd:4c:f9:58:
d2:70:c7:45:5c:32:8c:1b:ef:0e:07:3c:ba:3f:c0:
a8:15:f2:ff:eb:a8:47:21:9c:30:2c:57:8a:30:38:
5d:33:d6:04:29:da:70:1f:bd:17:0e:6d:71:60:fe:
d0:ce:61:22:15:18:17:08:71:5f:1f:67:c4:83:08:
ce:2a:0d:23:e4:e9:2b:0a:be:d1:ee:f1:24:4b:1e:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0A:FD:93:7B:CE:9E:69:86:B7:05:5E:5F:C6:1D:D4:15:62:62:79
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/kgr9k3vOnmmGtwVeX8Yd1BViYnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.128.0/19
91.210.248.0/22
194.26.164.0/22
IPv6:
2a0c:b440::/29
Signature Algorithm: sha256WithRSAEncryption
aa:0c:5b:ee:c7:f3:68:67:e1:96:01:e1:90:cb:9b:55:fe:f1:
5c:f5:71:d8:74:98:10:44:d6:75:b5:01:41:5a:09:93:44:3b:
a3:97:4a:d2:28:24:4f:04:dc:85:65:a9:47:5b:a9:47:0b:5d:
79:0b:ed:cd:23:a3:60:ef:e2:39:af:22:40:e4:0d:38:54:9c:
f3:11:87:70:76:a2:2c:1f:f5:91:c2:cc:41:6c:59:53:2f:52:
ee:8d:b4:a0:4e:bb:4a:b4:19:19:17:1e:fa:35:20:42:2e:0b:
4d:c9:77:36:e7:2b:58:41:af:5b:cb:15:fe:65:c6:76:4b:41:
12:f3:46:d3:a8:29:31:d4:46:b2:e6:6c:2e:cc:3c:86:bf:ac:
77:83:89:82:60:7d:49:83:e4:82:93:fd:ef:9d:b2:6a:0b:d8:
df:48:7e:55:ab:2f:42:27:8c:54:91:fe:b1:fe:fe:85:10:c2:
58:38:f1:dd:3c:47:e8:f3:1b:47:25:d7:7a:c7:c4:ef:47:7d:
8c:aa:20:98:f3:f1:0e:01:20:6c:4d:35:a4:f7:52:af:3f:3b:
99:e8:b7:16:53:8a:ca:f5:c6:9d:ec:0f:4a:a0:4f:70:b7:32:
73:bb:3a:52:e7:f0:6a:0e:96:d6:47:e3:bb:ac:d9:db:a5:79:
91:9f:14:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:49 2023 by rpki-client on console-ams.rpki-client.org