Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/UwLAcFvHD7riOAn8uepS51_S_ko.roa
File: UwLAcFvHD7riOAn8uepS51_S_ko.roa (raw, json)
Hash identifier: lf2QpLCarAjvK8t6aIK9tm26PEzUbT3sj1b5jQHukF4=
Subject key identifier: 53:02:C0:70:5B:C7:0F:BA:E2:38:09:FC:B9:EA:52:E7:5F:D2:FE:4A
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018C595C3CEBD00D85895BFF9817F7C42BAD
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/UwLAcFvHD7riOAn8uepS51_S_ko.roa
Signing time: Mon 11 Dec 2023 14:51:06 +0000
ROA not before: Mon 11 Dec 2023 14:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203847
IP address blocks: 185.206.52.0/24 maxlen: 24
185.206.53.0/24 maxlen: 24
193.162.128.0/24 maxlen: 24
185.122.44.0/22 maxlen: 22
45.142.15.0/24 maxlen: 24
2a01:57e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:5c:3c:eb:d0:0d:85:89:5b:ff:98:17:f7:c4:2b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Dec 11 14:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5302c0705bc70fbae23809fcb9ea52e75fd2fe4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:de:18:0a:3d:4a:ae:b9:02:c3:94:29:ab:
9c:f0:a4:2d:62:1e:5a:8b:85:38:9e:2a:b1:4e:e9:
d3:87:f2:11:1c:3e:e9:4c:27:89:02:75:6e:f4:9f:
e4:49:f5:b6:e1:6a:5a:12:57:85:8e:e2:e5:bb:c7:
bc:da:5e:30:76:be:2e:be:bc:1c:ec:2d:55:73:17:
fb:4d:0f:2a:97:a7:20:b6:51:2a:8d:25:ec:a0:a8:
f5:0e:53:ad:c9:02:91:f7:97:e9:31:4b:95:63:cb:
83:a5:c1:bf:17:2b:1b:33:68:26:52:7f:8a:f0:0f:
89:5a:a9:f8:f3:4a:94:4e:18:68:23:67:df:b8:62:
cc:bd:64:5e:4b:2d:a5:bc:95:d0:e7:7d:89:f1:e2:
6b:99:be:dd:9c:3f:ad:3b:b9:2f:80:bb:f7:0e:2f:
1b:03:3c:b9:4c:41:ff:b2:76:d6:af:27:e0:0e:74:
48:ff:12:05:e5:82:43:c3:4d:71:29:05:58:29:f9:
93:38:e2:b9:d4:00:68:9d:33:66:bd:79:48:ae:a2:
87:9d:8b:b5:91:e8:e0:d7:66:ea:70:4b:b4:5e:53:
70:0d:34:e7:55:7f:f3:d9:54:42:c1:80:fa:ba:02:
2f:35:d2:8b:e1:c3:4b:ee:e3:ec:2e:56:e9:b6:f1:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:C0:70:5B:C7:0F:BA:E2:38:09:FC:B9:EA:52:E7:5F:D2:FE:4A
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/UwLAcFvHD7riOAn8uepS51_S_ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:a7:af:64:09:7d:49:a5:ec:e3:22:80:03:ff:97:c7:6f:e3:
dc:b6:d8:ad:8d:27:e6:47:2d:d2:d4:ff:41:f9:03:b5:2b:aa:
bc:58:14:f7:4c:35:ab:99:35:c4:c1:5b:26:ad:d7:ae:29:86:
29:a0:01:8e:8d:77:c4:8c:3b:c6:e8:1e:ab:7d:7f:3f:16:64:
17:71:a2:be:e4:9d:60:79:6c:36:c4:34:63:7e:41:6f:d6:73:
94:cb:71:9d:db:81:4c:0b:0f:94:f1:89:a7:bd:3e:69:0a:d9:
d7:70:08:27:ed:34:b9:04:de:92:e7:3b:52:e6:8e:7d:81:da:
df:f5:6a:ce:9f:2f:c9:db:9b:0a:44:fe:8f:2a:a7:73:64:8f:
7c:67:32:6b:53:df:c6:49:bf:9a:8d:9b:f9:aa:fb:8c:80:44:
01:10:f1:6e:cc:6e:2b:51:3d:c9:d5:ac:4d:8a:47:50:41:50:
b5:d8:55:c6:60:92:e0:e3:6d:8c:47:7b:36:9e:54:d4:23:a8:
db:81:46:96:44:01:67:8a:52:3d:c9:86:a9:1a:4f:87:b7:c6:
59:c0:70:33:5c:88:8d:22:b8:0d:03:00:7d:c2:4e:e2:9b:8f:
36:69:b0:66:e2:39:a2:9a:5b:75:15:3e:8e:ff:67:4e:7b:18:
b6:15:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:31 2025 by rpki-client