Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/KpGlbywkkALN313cKsLuVkaSKPw.roa
File: KpGlbywkkALN313cKsLuVkaSKPw.roa (raw, json)
Hash identifier: /9xJzWmA5i8xIT2wsrWhOa4ivCpIn/piE9vDiPKlAdE=
Subject key identifier: 2A:91:A5:6F:2C:24:90:02:CD:DF:5D:DC:2A:C2:EE:56:46:92:28:FC
Certificate issuer: /CN=f275358a9ffc9a69e4f1b1443ba481ef41badcac
Certificate serial: 0B6CB5FA
Authority key identifier: F2:75:35:8A:9F:FC:9A:69:E4:F1:B1:44:3B:A4:81:EF:41:BA:DC:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nU1ip_8mmnk8bFEO6SB70G63Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/KpGlbywkkALN313cKsLuVkaSKPw.roa
Signing time: Sat 01 Jan 2022 01:55:31 +0000
ROA not before: Sat 01 Jan 2022 01:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202374
IP address blocks: 185.248.68.0/22 maxlen: 22
2a07:e600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191673850 (0xb6cb5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f275358a9ffc9a69e4f1b1443ba481ef41badcac
Validity
Not Before: Jan 1 01:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a91a56f2c249002cddf5ddc2ac2ee56469228fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:8a:29:cb:b9:4d:40:c1:50:2e:8b:59:a2:
e9:13:09:5f:5c:71:c2:b2:93:81:f6:2b:ed:7b:e4:
89:c5:f8:e2:dd:97:80:87:fa:bd:07:c5:72:f6:7a:
1f:ee:82:16:ec:f7:43:5a:33:87:88:dc:fd:bb:bd:
cc:8b:03:93:07:f9:15:4f:47:58:7e:5f:e8:7d:51:
8b:42:09:77:fc:a8:c7:d7:66:a0:b2:b7:53:71:c4:
58:94:5f:d1:f5:35:9b:70:83:14:14:ac:16:f3:d2:
b9:3b:e6:24:b8:b7:69:ea:77:f9:fc:ec:e2:65:1f:
59:22:19:46:01:9b:71:dc:74:0b:de:d9:d4:fe:cf:
ca:a0:e7:ce:8a:1e:4b:75:64:26:3d:73:0f:f8:94:
c7:48:d4:a9:ae:a4:e5:8c:dd:5b:3e:46:7d:6d:c2:
d0:7e:0f:9e:94:fc:02:a0:d3:9e:1e:7e:18:95:21:
31:de:e2:f8:b3:ab:20:3c:58:7d:ed:b8:f0:fa:77:
c9:87:e7:3c:3e:8b:89:fb:79:2f:70:55:e6:19:97:
8e:8d:17:a0:30:e1:cf:26:e8:1d:3d:6e:5f:76:65:
2a:50:dd:98:69:f9:e8:e3:e5:57:b5:38:6c:33:13:
1d:ea:19:10:19:56:16:28:b4:12:79:43:22:c2:7f:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:A5:6F:2C:24:90:02:CD:DF:5D:DC:2A:C2:EE:56:46:92:28:FC
X509v3 Authority Key Identifier:
keyid:F2:75:35:8A:9F:FC:9A:69:E4:F1:B1:44:3B:A4:81:EF:41:BA:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nU1ip_8mmnk8bFEO6SB70G63Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/KpGlbywkkALN313cKsLuVkaSKPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1d70f1-74c5-4fd0-aee5-dc66ba580fb4/1/8nU1ip_8mmnk8bFEO6SB70G63Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.68.0/22
IPv6:
2a07:e600::/29
Signature Algorithm: sha256WithRSAEncryption
7c:72:94:4a:f5:97:d3:8b:5e:6f:b3:6a:15:5f:a8:90:de:35:
95:18:8d:4f:b7:e7:a8:a7:ac:89:92:58:89:5b:cf:c9:ed:48:
41:56:a1:73:0c:7d:e5:97:b3:2a:b7:15:31:cc:58:a0:0b:84:
9b:30:22:e8:af:17:b1:d1:2c:6a:fb:dc:a6:45:ec:44:79:d3:
0a:a2:f4:29:9a:75:81:bb:aa:26:d9:20:c0:70:d1:f2:44:f3:
31:00:24:1e:ec:91:f7:c0:38:22:42:f8:b2:27:06:cf:c6:9b:
a5:71:a6:12:b1:30:84:dd:ba:3e:43:0e:a6:e3:fe:5e:60:b5:
c2:d6:1c:c3:06:c8:c7:30:60:93:2e:e6:bc:f1:f1:67:5f:d4:
bb:eb:ed:15:ea:55:dd:96:11:2e:58:c1:10:ea:ed:67:3f:08:
d8:e0:d7:48:37:a1:3a:1c:be:dd:b4:ec:3e:72:76:bf:1e:4c:
b6:51:0f:a0:39:09:43:aa:d1:85:dc:25:c9:a1:f9:bb:60:db:
9f:e1:c9:8b:f0:30:f2:1f:ee:44:40:07:9b:ed:57:75:36:52:
f3:b8:60:ca:81:a6:97:c7:ff:f8:53:44:aa:76:09:5e:95:8f:
0a:18:4a:70:5c:bd:64:df:48:e7:c6:16:86:12:5e:d0:d6:52:
30:26:f6:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEC2y1+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Mjc1MzU4YTlmZmM5YTY5ZTRmMWIxNDQzYmE0ODFlZjQxYmFkY2FjMB4XDTIyMDEw
MTAxNTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmE5MWE1NmYyYzI0
OTAwMmNkZGY1ZGRjMmFjMmVlNTY0NjkyMjhmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOwxiinLuU1AwVAui1mi6RMJX1xxwrKTgfYr7XvkicX44t2X
gIf6vQfFcvZ6H+6CFuz3Q1ozh4jc/bu9zIsDkwf5FU9HWH5f6H1Ri0IJd/yox9dm
oLK3U3HEWJRf0fU1m3CDFBSsFvPSuTvmJLi3aep3+fzs4mUfWSIZRgGbcdx0C97Z
1P7PyqDnzooeS3VkJj1zD/iUx0jUqa6k5YzdWz5GfW3C0H4PnpT8AqDTnh5+GJUh
Md7i+LOrIDxYfe248Pp3yYfnPD6Lift5L3BV5hmXjo0XoDDhzyboHT1uX3ZlKlDd
mGn56OPlV7U4bDMTHeoZEBlWFii0EnlDIsJ/0UMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQqkaVvLCSQAs3fXdwqwu5WRpIo/DAfBgNVHSMEGDAWgBTydTWKn/yaaeTx
sUQ7pIHvQbrcrDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhuVTFpcF84bW1uazhiRkVPNlNCNzBHNjNLdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvMWQ3MGYxLTc0YzUtNGZkMC1hZWU1LWRjNjZiYTU4MGZiNC8x
L0twR2xieXdra0FMTjMxM2NLc0x1VmthU0tQdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
MWQ3MGYxLTc0YzUtNGZkMC1hZWU1LWRjNjZiYTU4MGZiNC8xLzhuVTFpcF84bW1u
azhiRkVPNlNCNzBHNjNLdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArn4RDANBAIAAjAHAwUDKgfmADAN
BgkqhkiG9w0BAQsFAAOCAQEAfHKUSvWX04teb7NqFV+okN41lRiNT7fnqKesiZJY
iVvPye1IQVahcwx95ZezKrcVMcxYoAuEmzAi6K8XsdEsavvcpkXsRHnTCqL0KZp1
gbuqJtkgwHDR8kTzMQAkHuyR98A4IkL4sicGz8abpXGmErEwhN26PkMOpuP+XmC1
wtYcwwbIxzBgky7mvPHxZ1/Uu+vtFepV3ZYRLljBEOrtZz8I2ODXSDehOhy+3bTs
PnJ2vx5MtlEPoDkJQ6rRhdwlyaH5u2Dbn+HJi/Aw8h/uREAHm+1XdTZS87hgyoGm
l8f/+FNEqnYJXpWPChhKcFy9ZN9I58YWhhJe0NZSMCb24w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org