Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/KmlGv5yB7L3P9MUMhCk7k80Yxnc.roa
File: KmlGv5yB7L3P9MUMhCk7k80Yxnc.roa (raw, json)
Hash identifier: b3BgdTSk01wE/LO0bvKe3Dk5PWhcX6b0eWbfnVDy5HQ=
Subject key identifier: 2A:69:46:BF:9C:81:EC:BD:CF:F4:C5:0C:84:29:3B:93:CD:18:C6:77
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0185C59ED6D417D4B92CCCE607D0B6702AFC
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/KmlGv5yB7L3P9MUMhCk7k80Yxnc.roa
Signing time: Wed 18 Jan 2023 16:03:19 +0000
ROA not before: Wed 18 Jan 2023 16:03:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6898
IP address blocks: 185.155.176.0/22 maxlen: 22
31.44.32.0/20 maxlen: 20
185.155.184.0/23 maxlen: 23
193.221.216.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.16.0/23 maxlen: 23
77.220.64.0/19 maxlen: 19
46.21.18.0/23 maxlen: 23
46.21.29.0/24 maxlen: 24
46.21.31.0/24 maxlen: 24
193.222.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:9e:d6:d4:17:d4:b9:2c:cc:e6:07:d0:b6:70:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 18 16:03:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a6946bf9c81ecbdcff4c50c84293b93cd18c677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:c1:34:28:13:55:11:14:8d:96:01:bc:6e:
38:a3:8d:26:e1:e5:34:2a:3d:d6:fc:8a:05:32:64:
1d:fe:33:97:50:7f:2d:65:af:7c:03:90:c5:34:c6:
04:ca:c0:ef:cc:8f:34:99:15:63:bd:51:68:f4:a0:
9d:a7:b4:75:75:29:da:51:74:bf:2c:a1:2f:7a:b5:
b6:65:77:90:5f:32:c6:73:75:40:7f:d5:03:78:0c:
6d:02:d8:25:9e:3c:25:76:6c:dc:7d:96:f8:ba:57:
a6:b3:40:a5:63:9b:dc:1a:96:62:26:85:2d:98:84:
28:c3:f0:9a:1d:c4:cc:71:0c:81:e9:c2:9e:7e:f4:
70:ce:96:89:1d:8c:4f:dd:d2:df:6c:19:8d:9b:5f:
14:1c:6e:7d:20:f7:6c:36:d8:6e:5c:67:ff:2b:00:
20:1c:1e:7b:08:39:46:13:4f:1b:f1:ac:0f:ea:ea:
9a:6e:0a:ac:5e:4c:00:f8:66:81:71:93:64:08:a8:
44:e9:ba:e0:de:6d:69:bd:3a:a8:35:50:28:37:12:
02:45:32:c4:7d:47:3d:29:ec:25:e5:fb:de:58:47:
98:e8:23:70:3d:d2:69:e7:c7:ad:13:c7:4e:74:db:
a2:83:0b:d7:61:b0:89:58:0c:fb:9c:7a:3a:7c:b4:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:46:BF:9C:81:EC:BD:CF:F4:C5:0C:84:29:3B:93:CD:18:C6:77
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/KmlGv5yB7L3P9MUMhCk7k80Yxnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.16.0/22
46.21.29.0/24
46.21.31.0/24
77.220.64.0/19
185.155.176.0/22
185.155.184.0/23
193.221.216.0/23
193.222.104.0/23
Signature Algorithm: sha256WithRSAEncryption
67:e7:bb:2f:36:22:7a:ed:ab:06:ed:c6:bd:36:07:3b:46:dc:
7f:8f:e4:6f:21:e1:d1:6a:f7:2a:e1:9d:35:13:7c:7c:c2:ab:
54:eb:99:09:31:b2:e7:f9:26:b5:b0:73:6b:9f:33:d6:5a:fa:
46:4c:c5:80:8c:8a:77:e0:49:e6:6a:9b:45:e3:20:78:87:59:
1b:34:e9:74:73:c1:64:e5:84:15:7d:07:3f:62:37:2d:6e:33:
6c:16:c2:03:f8:12:c0:69:d2:a7:f4:d9:3e:6e:d6:16:b3:31:
76:12:72:72:2c:0b:55:06:0d:a5:46:18:35:01:52:ab:40:54:
c1:be:3b:6d:87:6f:7b:57:9d:4c:0a:ce:70:6d:c0:0f:ad:57:
10:62:1c:6e:25:db:9f:72:88:f5:77:02:63:52:d0:c9:ac:e6:
9d:85:7e:2f:32:b7:4b:40:c5:c0:f7:6c:e3:e2:d2:d7:79:36:
3d:98:80:45:f5:45:94:21:7e:cb:1d:45:e1:b5:8a:60:82:4f:
e5:86:1d:0c:c3:68:4e:87:47:36:c3:28:f0:05:67:e1:94:b8:
48:0e:f9:ae:11:d4:1f:37:66:8f:c4:cd:9a:d4:22:55:ca:c7:
da:4b:38:aa:e8:66:df:8a:46:d3:9c:0a:3a:c9:06:d7:cb:e5:
e4:59:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:31:09 2025 by rpki-client