Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/KoAFijn8neaSP9w5GQdCFxgJkZI.roa
File: KoAFijn8neaSP9w5GQdCFxgJkZI.roa (raw, json)
Hash identifier: Up6Q+u8vMu+dUtnJ2bI0W66qHvmRlOnAZUe9bPTZcZc=
Subject key identifier: 2A:80:05:8A:39:FC:9D:E6:92:3F:DC:39:19:07:42:17:18:09:91:92
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 19729D40
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/KoAFijn8neaSP9w5GQdCFxgJkZI.roa
Signing time: Sat 01 Jan 2022 01:56:27 +0000
ROA not before: Sat 01 Jan 2022 01:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3246
IP address blocks: 185.143.148.0/22 maxlen: 22
91.142.112.0/20 maxlen: 20
2a00:17b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426941760 (0x19729d40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Jan 1 01:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a80058a39fc9de6923fdc391907421718099192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:86:66:a2:97:19:a2:63:be:82:25:15:da:
a0:bc:b4:9b:29:61:16:de:bf:57:d4:95:28:ae:a6:
5e:70:17:6f:a7:a4:a0:2a:b1:3e:f1:88:64:87:67:
40:fd:0f:85:ff:32:42:46:bb:ad:da:9a:2c:d8:0a:
26:87:6a:45:6d:7b:8c:06:3e:9d:d2:37:1b:8f:ef:
5f:fc:11:91:37:55:3d:21:da:17:94:83:1a:0b:86:
2e:f5:23:17:25:9a:98:14:fc:e1:a0:a9:f6:53:be:
1a:54:af:be:b6:0b:4f:3f:cc:60:17:88:a8:5a:05:
07:7c:34:9e:c6:2e:f7:7e:31:6e:ec:f5:28:68:2c:
00:14:89:a5:a7:5e:27:ba:cc:74:4f:ce:71:9b:69:
8b:a5:12:29:62:b2:0c:bf:6f:10:58:a8:7f:59:f3:
5b:5f:df:39:1a:fd:a0:8f:4d:34:a8:d7:9e:1d:02:
38:43:60:4c:30:fb:14:f2:cc:fb:0f:a0:6c:98:93:
d4:78:01:93:a3:1c:d2:c4:89:c9:28:be:21:84:83:
1e:24:0c:fc:06:bc:19:03:e5:61:43:c6:0d:bb:e6:
df:84:70:f6:e7:55:cf:78:8b:11:e6:b5:eb:53:07:
39:23:e2:18:31:7d:fc:fc:3b:77:cb:dc:a9:b7:9d:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:05:8A:39:FC:9D:E6:92:3F:DC:39:19:07:42:17:18:09:91:92
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/KoAFijn8neaSP9w5GQdCFxgJkZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.112.0/20
185.143.148.0/22
IPv6:
2a00:17b0::/32
Signature Algorithm: sha256WithRSAEncryption
83:20:d6:d8:c2:ab:aa:41:0e:d1:fa:35:5b:73:80:b6:0b:cc:
a8:b8:56:32:86:a0:44:1f:29:64:f3:3e:a4:bb:87:b3:68:25:
ff:d0:4e:8a:53:cb:e7:d6:65:bd:63:e1:65:e1:31:ee:43:90:
ea:b3:7a:2a:11:89:6b:a5:58:8d:80:c6:45:3b:51:04:3c:85:
48:b9:b0:ae:13:94:8b:4e:16:20:7a:c3:0f:01:f0:10:58:71:
ca:08:cd:6d:f3:7b:38:73:d4:f8:e5:b3:94:c2:59:15:9e:1d:
a2:84:4b:18:a1:a2:f5:fd:46:dc:b5:6c:6f:27:12:2c:db:16:
50:66:4e:0f:95:c2:13:f0:77:88:8e:8f:1d:22:09:7c:19:27:
97:fc:ee:63:b8:16:47:ea:52:4f:f1:eb:f2:63:cc:56:da:93:
64:3e:d3:47:9b:87:46:74:9b:bd:25:8f:17:d5:24:15:48:f4:
14:5f:fc:e7:2c:7c:b6:49:c9:35:18:70:b1:0a:51:fa:6e:29:
52:b8:cb:90:78:5d:50:53:57:84:a4:03:ef:11:17:d7:d1:8f:
bf:bb:81:c2:5c:25:60:c2:66:cc:93:8f:15:79:f2:76:a1:48:
e0:f1:0b:5a:71:0a:cb:e2:f7:4b:bc:29:06:b6:74:e5:52:f4:
67:a2:30:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:14 2025 by rpki-client