Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/KKIM7p-XhxEAcS-4UuhhSybKUug.roa
File: KKIM7p-XhxEAcS-4UuhhSybKUug.roa (raw, json)
Hash identifier: oIoLj8DCc9MpsxvXZske76WXv7AFIlr6aPBaWDgSi6A=
Subject key identifier: 28:A2:0C:EE:9F:97:87:11:00:71:2F:B8:52:E8:61:4B:26:CA:52:E8
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 0677237D
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/KKIM7p-XhxEAcS-4UuhhSybKUug.roa
Signing time: Thu 12 May 2022 07:43:03 +0000
ROA not before: Thu 12 May 2022 07:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50628
IP address blocks: 2a09:7140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108471165 (0x677237d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: May 12 07:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28a20cee9f97871100712fb852e8614b26ca52e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:11:fd:b3:cf:37:bf:38:57:61:b7:9f:ae:
22:37:11:41:81:57:f8:07:40:f8:12:f4:2a:0f:8b:
38:ba:4d:c0:a7:bb:fc:a9:67:46:19:0d:97:a8:dd:
6f:ce:aa:d2:32:b7:4f:05:2c:01:14:5c:61:4a:40:
b4:54:8f:66:f7:4e:ce:f9:a6:a8:2c:58:d2:03:8a:
41:07:7f:d3:e9:d4:58:dc:db:83:ab:fb:59:db:da:
0d:9b:94:f4:bf:04:02:64:5e:87:19:b7:c5:8a:f3:
06:ca:bd:97:e6:e9:73:13:61:64:c2:91:60:91:1d:
81:07:2d:88:5d:a9:e3:68:3a:e6:e8:13:9a:50:70:
f1:e9:04:80:50:c5:ea:76:13:7b:42:42:dc:f0:c8:
50:f7:f6:48:66:51:d3:6d:1c:01:44:11:f1:73:bf:
d6:66:b5:2d:36:5e:e2:07:b2:eb:f6:bb:44:69:25:
c6:69:8d:42:85:c8:97:af:d1:e1:4c:e2:b8:20:28:
e9:e0:07:e8:fa:e9:ef:a5:8a:40:3d:78:28:41:08:
23:a8:36:dc:41:a0:40:11:96:9a:de:00:c1:6b:67:
ed:33:68:c6:9b:16:29:0f:f8:f1:dd:b1:56:2b:1b:
dc:04:30:0c:fa:df:19:a2:64:fc:06:a9:9e:0e:d0:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:0C:EE:9F:97:87:11:00:71:2F:B8:52:E8:61:4B:26:CA:52:E8
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/KKIM7p-XhxEAcS-4UuhhSybKUug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7140::/29
Signature Algorithm: sha256WithRSAEncryption
2c:33:40:6e:23:2f:cc:39:bb:8d:76:c4:7f:2a:59:1b:43:5e:
03:aa:67:67:a9:d8:ec:75:cf:13:3b:a2:fc:46:94:32:a1:5c:
f5:e7:4b:b7:42:dd:1e:61:46:d5:25:56:67:63:2b:60:2a:36:
b5:d9:9b:53:9e:17:c7:66:03:1d:09:80:68:ea:13:e2:3f:d9:
02:f8:4d:23:dd:7a:0a:74:d7:84:04:17:36:f9:40:ec:86:88:
8c:69:9f:90:72:06:63:d4:6e:1e:1d:6a:c8:b5:79:bb:5d:b9:
eb:5f:84:19:fd:e4:f1:ae:ad:b6:6b:59:29:c4:65:c4:bb:79:
ed:53:95:1f:f6:00:d4:8e:f7:c4:ba:f6:a9:ec:0c:bd:22:03:
e2:8e:bf:a5:3b:4a:8e:43:b9:c3:d1:d2:31:21:32:12:a5:f7:
cc:aa:ec:64:df:f2:b8:fb:08:c7:9a:c1:b7:4e:63:b7:89:56:
3d:fc:62:5b:f5:3c:22:45:8b:61:e7:40:2e:50:27:03:90:78:
7b:18:a5:41:92:61:ab:48:c6:07:54:6f:f3:43:c9:25:44:ef:
ce:47:39:ae:b8:59:7a:26:ef:be:e9:c4:66:f1:8a:d5:d3:ca:
a5:87:be:4a:fc:a4:4e:d3:38:ee:bc:f2:f2:81:2a:f9:a9:2f:
c2:bb:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:53 2025 by rpki-client