Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/kRS-JxWce3gvaHQp6wsbPPCMZPQ.roa
File: kRS-JxWce3gvaHQp6wsbPPCMZPQ.roa (raw, json)
Hash identifier: m7VJ1/n4q5ydrnzAVsikxITThB8lmxgLiERxh3LnuOE=
Subject key identifier: 91:14:BE:27:15:9C:7B:78:2F:68:74:29:EB:0B:1B:3C:F0:8C:64:F4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 018CAF791940CCDBAD7EA69053E1C16AF8D8
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/kRS-JxWce3gvaHQp6wsbPPCMZPQ.roa
Signing time: Thu 28 Dec 2023 08:09:58 +0000
ROA not before: Thu 28 Dec 2023 08:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59796
IP address blocks: 160.79.120.0/24 maxlen: 24
5.252.32.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:79:19:40:cc:db:ad:7e:a6:90:53:e1:c1:6a:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Dec 28 08:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9114be27159c7b782f687429eb0b1b3cf08c64f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:77:12:6d:d4:75:2e:08:07:7b:37:b3:9f:
16:87:4c:57:7b:ce:a9:da:96:ad:1d:b8:46:87:6d:
e7:67:37:ca:c3:e1:a2:40:26:53:6e:0a:e5:4d:f7:
31:cf:3a:66:4b:1e:93:05:bf:d0:69:02:e6:db:ec:
21:dc:aa:d5:b4:40:f8:66:ab:fe:6f:ea:44:ab:7d:
70:85:ee:90:ed:f8:17:ed:fd:34:4d:91:61:3a:d0:
0c:db:51:88:3e:54:58:bb:0c:05:38:1e:55:7b:d5:
06:58:69:7e:0d:0e:82:9a:71:71:ad:f5:74:ee:61:
db:b1:be:37:b9:06:b6:08:dd:f2:d7:b9:96:b1:5d:
24:1c:11:2c:8e:4c:f3:e2:45:f4:6c:fd:e5:e2:60:
67:a2:f8:cf:07:2a:22:6a:d8:5e:41:52:d3:57:63:
84:43:fa:d5:49:a6:3c:ba:b5:b6:0c:b8:4a:58:b6:
82:6f:7e:6d:05:1c:7c:64:95:90:c9:60:99:9f:6f:
65:14:eb:53:0f:d2:e7:0c:e1:2a:28:ee:1c:92:2e:
82:8d:3e:08:fd:9c:61:0e:a6:5b:71:a8:d4:4f:ec:
a0:16:ee:22:c3:1c:8f:05:d2:81:31:3c:ef:d7:8b:
b6:20:36:a9:92:c6:3c:f5:4d:fb:fa:ff:a0:24:0a:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:BE:27:15:9C:7B:78:2F:68:74:29:EB:0B:1B:3C:F0:8C:64:F4
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/kRS-JxWce3gvaHQp6wsbPPCMZPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
160.79.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:25:62:92:48:d1:c4:90:b0:c2:02:68:38:ab:16:4c:78:5f:
f8:d3:f5:f4:8d:02:61:2d:60:ad:41:6e:7a:4b:59:9f:8c:08:
fc:72:87:d0:63:a7:f6:7f:c9:43:9b:8d:be:ed:6d:65:d8:fd:
f6:5b:6b:21:a6:4d:23:62:53:c1:11:58:ab:ba:6d:20:1d:70:
55:4b:8a:fa:c7:8c:b6:ad:df:99:27:86:cb:c5:a0:28:00:21:
aa:8d:80:f5:b5:d1:48:31:45:6f:e3:e3:7d:95:2a:34:54:9f:
bf:0f:e6:58:c3:49:33:1c:31:92:b3:0e:f8:3f:93:dc:e9:9f:
db:e1:32:d4:2d:82:a2:50:97:ea:56:99:d3:0d:80:bf:75:40:
1f:3f:d1:b7:f3:18:c1:0b:49:06:cf:31:aa:4d:6c:d6:5e:35:
34:75:99:cd:53:e4:c2:8e:d7:2d:8e:a9:63:99:47:73:05:19:
94:73:48:d5:59:76:c4:1c:d6:67:bc:1d:d4:3a:7d:0f:67:e3:
29:54:c8:14:4f:8d:fe:10:3e:b5:70:0a:9c:2c:e1:b6:8a:b6:
a9:43:94:a3:17:8b:fe:e7:ab:fd:17:f3:00:d4:bd:12:11:92:
85:88:a0:f4:42:c8:f3:07:bb:4b:36:e1:65:a3:19:fb:af:77:
62:34:f3:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyveRlAzNutfqaQU+HBavjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjMxMjI4MDgwOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTE0YmUyNzE1OWM3Yjc4MmY2ODc0MjllYjBiMWIzY2YwOGM2NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GZ3Em3UdS4IB3s3s58Wh0xXe86p
2patHbhGh23nZzfKw+GiQCZTbgrlTfcxzzpmSx6TBb/QaQLm2+wh3KrVtED4Zqv+
b+pEq31whe6Q7fgX7f00TZFhOtAM21GIPlRYuwwFOB5Ve9UGWGl+DQ6CmnFxrfV0
7mHbsb43uQa2CN3y17mWsV0kHBEsjkzz4kX0bP3l4mBnovjPByoiatheQVLTV2OE
Q/rVSaY8urW2DLhKWLaCb35tBRx8ZJWQyWCZn29lFOtTD9LnDOEqKO4cki6CjT4I
/ZxhDqZbcajUT+ygFu4iwxyPBdKBMTzv14u2IDapksY89U37+v+gJAr1KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJEUvicVnHt4L2h0KesLGzzwjGT0MB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEva1JTLUp4V2NlM2d2YUhRcDZ3c2JQUENNWlBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBfwgAwQA
oE94MA0GCSqGSIb3DQEBCwUAA4IBAQAVJWKSSNHEkLDCAmg4qxZMeF/40/X0jQJh
LWCtQW56S1mfjAj8cofQY6f2f8lDm42+7W1l2P32W2shpk0jYlPBEVirum0gHXBV
S4r6x4y2rd+ZJ4bLxaAoACGqjYD1tdFIMUVv4+N9lSo0VJ+/D+ZYw0kzHDGSsw74
P5Pc6Z/b4TLULYKiUJfqVpnTDYC/dUAfP9G38xjBC0kGzzGqTWzWXjU0dZnNU+TC
jtctjqljmUdzBRmUc0jVWXbEHNZnvB3UOn0PZ+MpVMgUT43+ED61cAqcLOG2irap
Q5SjF4v+56v9F/MA1L0SEZKFiKD0QsjzB7tLNuFloxn7r3diNPPU
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:22 2025 by rpki-client