Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/kwKi7d_4A0YyzGq0WQVkPXfkFF0.roa
File: kwKi7d_4A0YyzGq0WQVkPXfkFF0.roa (raw, json)
Hash identifier: 4R+GUc9FTi+5IfLMXBC2rndmk9AG9zhmfX8g4Xn8ZN8=
Subject key identifier: 93:02:A2:ED:DF:F8:03:46:32:CC:6A:B4:59:05:64:3D:77:E4:14:5D
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: E1C990
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/kwKi7d_4A0YyzGq0WQVkPXfkFF0.roa
Signing time: Tue 08 Feb 2022 14:32:57 +0000
ROA not before: Tue 08 Feb 2022 14:32:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205201
IP address blocks: 194.28.130.0/24 maxlen: 24
188.120.122.0/23 maxlen: 23
188.120.123.0/24 maxlen: 24
188.120.121.0/24 maxlen: 24
188.120.122.0/24 maxlen: 24
188.120.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14797200 (0xe1c990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Feb 8 14:32:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9302a2eddff8034632cc6ab45905643d77e4145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:6c:1c:a4:db:b3:9e:7f:54:4e:4e:35:05:
e0:fd:92:00:b0:ad:07:a6:d5:9e:2b:86:a4:06:74:
57:98:5a:6d:66:f3:92:4b:d8:3a:c5:0b:72:20:5d:
2f:4e:82:0e:7d:37:e7:d7:04:c5:8e:a7:10:7f:01:
73:be:01:cd:74:86:8f:ca:ef:dd:50:3e:04:c6:b8:
c0:eb:c8:89:c6:d5:99:fb:ab:e0:84:27:c6:6b:cf:
63:62:d2:b3:e9:71:b8:c8:6e:80:c6:ed:56:d1:f7:
d7:67:78:72:b0:f1:d7:38:08:e4:c6:c4:ab:c6:3c:
04:c0:64:f4:9d:40:e2:d4:37:2b:d1:db:15:9c:ae:
99:7c:24:45:62:b0:20:fa:87:1b:ba:ee:88:02:2a:
96:72:75:4e:23:7b:ec:89:2e:fb:09:53:be:73:22:
13:c6:50:b9:07:91:46:81:d7:01:aa:3c:e5:de:26:
ae:46:91:90:f1:55:82:c3:59:aa:8f:7d:28:48:2d:
17:8d:bb:5e:de:20:ca:ec:bd:d5:05:33:92:fa:96:
28:e6:80:6e:89:30:02:6f:1e:b5:0e:3f:27:09:a6:
b3:9c:52:46:5f:10:4f:e1:76:33:71:7d:96:52:c7:
4d:ea:72:89:20:62:36:eb:2e:18:6c:ec:72:93:d7:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:A2:ED:DF:F8:03:46:32:CC:6A:B4:59:05:64:3D:77:E4:14:5D
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/kwKi7d_4A0YyzGq0WQVkPXfkFF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.121.0-188.120.123.255
188.120.126.0/24
194.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:bf:7a:70:a5:d1:0a:cc:61:4d:fb:e6:13:9f:ff:b6:9a:5d:
b9:36:41:e5:69:a8:dc:2c:6d:3f:5d:a3:de:bb:4f:13:cd:8e:
35:2d:73:b1:8e:a2:e5:ec:c4:94:c1:0c:e6:25:4f:85:94:8d:
6c:ae:0d:74:63:98:ad:5c:3b:82:6b:05:dc:d9:91:41:bf:5e:
14:76:65:57:6b:49:fe:e4:83:cf:13:6e:9e:62:40:f5:e2:c2:
1f:6b:bd:a6:31:69:6d:28:39:c8:4b:f0:21:c6:84:45:fe:22:
bd:42:e0:0f:d2:d6:aa:7b:af:ec:b3:13:eb:6c:f6:13:ce:ec:
ea:3f:c9:ba:b2:f7:74:a2:c2:f4:ae:ff:88:a6:70:a5:b0:54:
8b:38:73:cf:8a:3f:12:d3:85:5f:a5:ef:a3:2e:af:9b:dd:fd:
d3:04:70:03:d9:13:10:b7:48:26:f2:b3:6a:d2:46:3c:1e:d4:
1d:b9:5d:78:e7:ce:49:48:05:10:a1:c6:c0:07:39:e9:a9:ce:
60:dd:f0:de:d8:5e:93:00:ff:95:ff:71:60:5a:ac:f5:f7:ae:
d7:61:74:cf:e3:4c:a9:1f:eb:88:c4:55:e7:95:32:0f:3e:5a:
e0:d0:2d:2e:bf:36:2a:57:a6:e9:59:55:51:bf:7f:68:89:15:
50:35:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:33:33 2025 by rpki-client