Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ky6bmKfK-O75Q2HDrABH0fgVc1A.roa
File: ky6bmKfK-O75Q2HDrABH0fgVc1A.roa (raw, json)
Hash identifier: Icg3ig2daaDjSuPhnu9IItbl/YebhQItTfwEnyeL54w=
Subject key identifier: 93:2E:9B:98:A7:CA:F8:EE:F9:43:61:C3:AC:00:47:D1:F8:15:73:50
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 0184F75A9AA094F3891A77708C04E800EA4A
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ky6bmKfK-O75Q2HDrABH0fgVc1A.roa
Signing time: Fri 09 Dec 2022 14:47:00 +0000
ROA not before: Fri 09 Dec 2022 14:47:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.64.0/22 maxlen: 24
185.145.52.0/24 maxlen: 24
5.249.176.0/22 maxlen: 24
5.249.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:5a:9a:a0:94:f3:89:1a:77:70:8c:04:e8:00:ea:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Dec 9 14:47:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=932e9b98a7caf8eef94361c3ac0047d1f8157350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:7f:2a:cd:c1:98:9a:7c:97:1d:5a:0e:8d:
04:15:3f:62:39:b4:9f:73:5e:35:0c:fc:54:9f:2d:
eb:f9:0a:40:c7:95:7b:59:7a:1d:2e:bf:ae:2a:45:
a5:7a:a6:b4:7e:98:15:80:93:06:1f:91:e8:31:30:
19:ad:73:16:0b:c1:ce:e6:15:a6:1c:aa:a3:70:90:
b6:f9:18:f3:ef:38:49:3f:f8:2f:59:d4:fe:e0:67:
59:3e:50:a3:a0:77:49:a2:dd:ae:8f:2e:b9:d6:7e:
3e:b1:91:00:0c:b8:c2:43:9a:1a:70:25:fa:91:10:
d6:f0:17:a9:12:c2:8c:bb:00:eb:d2:e0:41:49:c6:
af:a7:41:45:bb:4c:9e:f1:4f:b0:63:2a:d8:a1:6e:
ba:48:f6:62:c4:6a:6e:46:cb:58:42:3c:61:c2:44:
e7:df:89:9e:20:bf:14:e0:66:75:c5:bf:14:6e:4c:
77:3f:94:e6:46:b1:dc:78:16:80:af:32:e1:9e:a6:
6b:f9:f0:fb:23:2b:ca:e7:7d:50:30:1c:dd:b6:83:
a2:e9:4b:f3:f0:41:1b:6e:77:4a:fe:46:1d:35:0d:
63:7e:4f:01:c9:07:d6:f2:6a:ef:55:b9:d9:2a:2c:
02:3c:97:ee:08:82:47:75:a5:7d:a5:b2:41:87:be:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:9B:98:A7:CA:F8:EE:F9:43:61:C3:AC:00:47:D1:F8:15:73:50
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ky6bmKfK-O75Q2HDrABH0fgVc1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.176.0/22
5.249.184.0/22
37.19.64.0/22
185.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
da:c6:de:37:bf:ac:9b:a9:92:3d:45:33:e6:a7:b8:42:26:55:
cc:8e:4a:c8:07:d6:f6:b8:a6:16:d3:e9:54:02:a5:1d:45:4b:
bf:c5:95:84:5d:c4:f9:b4:ff:66:8c:6b:44:42:71:b8:0c:f9:
00:a5:38:0c:72:48:c6:ad:fb:5d:5e:bb:6e:74:8a:7f:14:f8:
da:2d:9f:83:1e:01:09:80:ff:62:09:59:dd:cb:67:d2:16:cb:
4a:3c:98:e3:60:d6:d8:c5:1c:46:8c:03:db:1a:2a:5f:8e:fb:
9a:aa:4d:bb:5a:94:18:27:70:87:f2:c9:62:a7:0c:07:cf:ed:
d8:d5:a0:57:91:6d:1b:c5:7b:51:7f:81:4a:29:c1:d2:ef:c3:
80:98:a2:65:a3:6b:06:05:ef:4b:ef:44:0c:0a:d6:ab:80:7f:
07:ed:24:3f:e0:10:81:74:16:11:6d:89:38:e8:a8:62:c2:50:
a4:2c:8d:1b:fe:20:eb:ad:51:e1:ef:cd:98:ec:0d:6e:a2:a2:
43:81:4e:5b:cf:9f:7b:e8:37:11:e2:f8:26:3c:22:03:55:03:
52:9e:01:17:c2:e1:08:5e:57:11:99:21:23:e3:e3:20:30:20:
a1:3a:8d:08:3a:ce:18:36:0d:0b:6b:b5:24:8d:6f:12:88:36:
1c:e0:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org