Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/KmHOS9mILHY3rtjdqQ4Y3B5_rmo.roa
File: KmHOS9mILHY3rtjdqQ4Y3B5_rmo.roa (raw, json)
Hash identifier: hzIueu/saAeBWP4li1oRFpN/EGBZric+LAvGF2D9jJI=
Subject key identifier: 2A:61:CE:4B:D9:88:2C:76:37:AE:D8:DD:A9:0E:18:DC:1E:7F:AE:6A
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 0184C4033EF4D2E64AEE869BAB94487E2557
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/KmHOS9mILHY3rtjdqQ4Y3B5_rmo.roa
Signing time: Tue 29 Nov 2022 15:30:57 +0000
ROA not before: Tue 29 Nov 2022 15:30:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35244
IP address blocks: 95.157.0.0/18 maxlen: 18
195.234.128.0/24 maxlen: 24
46.128.0.0/16 maxlen: 16
94.139.0.0/19 maxlen: 19
94.139.0.0/20 maxlen: 20
83.243.112.0/21 maxlen: 21
194.105.96.0/21 maxlen: 21
94.139.16.0/20 maxlen: 20
193.25.118.0/23 maxlen: 23
109.125.64.0/18 maxlen: 18
77.47.0.0/17 maxlen: 17
195.46.44.0/22 maxlen: 22
85.233.32.0/19 maxlen: 19
185.169.204.0/22 maxlen: 22
88.215.64.0/18 maxlen: 18
2a02:2455::/33 maxlen: 33
2001:4c50::/32 maxlen: 32
2a02:2457:300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:03:3e:f4:d2:e6:4a:ee:86:9b:ab:94:48:7e:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Nov 29 15:30:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a61ce4bd9882c7637aed8dda90e18dc1e7fae6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:08:69:48:02:1b:ca:9f:2b:3d:cb:7e:ff:
80:ad:81:49:a9:cd:9d:81:be:8a:e7:d0:0e:94:9b:
b6:fd:7c:d7:60:68:21:6a:62:f2:5b:2a:88:ce:0f:
ee:65:b0:60:c7:66:8d:bd:fd:97:d3:25:e4:27:14:
07:25:dc:d0:94:96:41:fa:8d:99:1d:d7:fc:b4:52:
20:37:99:6e:4c:63:e0:c1:21:3e:af:ba:48:2f:ed:
28:97:51:77:f1:f3:01:59:80:49:09:d2:db:01:5d:
94:b3:b7:91:06:ad:0a:c2:91:2f:c5:62:e8:3c:a6:
13:26:78:9b:c1:fd:11:84:a8:6e:66:c4:60:c2:f5:
0b:b9:39:36:e3:ad:ce:80:61:12:0d:67:18:c8:e8:
55:bc:79:41:78:8b:ca:fa:04:cb:c1:30:35:6c:34:
08:e6:de:b0:45:37:ab:bd:b6:36:c3:81:69:9a:cb:
42:f5:d3:30:6e:aa:be:bb:18:bb:62:b9:25:8d:cb:
77:9e:06:1e:5b:62:f2:87:8d:77:1e:38:ff:13:48:
0f:b8:84:0c:57:39:29:5f:fb:39:ac:16:de:5a:12:
2c:c4:c4:24:fb:a8:cd:14:aa:76:46:8a:cb:dd:77:
53:b4:f6:8f:e4:82:d9:60:31:c4:2c:42:15:03:35:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:CE:4B:D9:88:2C:76:37:AE:D8:DD:A9:0E:18:DC:1E:7F:AE:6A
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/KmHOS9mILHY3rtjdqQ4Y3B5_rmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.128.0.0/16
77.47.0.0/17
83.243.112.0/21
85.233.32.0/19
88.215.64.0/18
94.139.0.0/19
95.157.0.0/18
109.125.64.0/18
185.169.204.0/22
193.25.118.0/23
194.105.96.0/21
195.46.44.0/22
195.234.128.0/24
IPv6:
2001:4c50::/32
2a02:2455::/33
2a02:2457:300::/40
Signature Algorithm: sha256WithRSAEncryption
15:4c:98:41:96:98:bd:c0:a4:1b:61:a5:3a:5b:cc:4b:9f:ba:
6b:4d:a0:0b:8c:b6:18:c6:db:f6:c9:f4:03:79:0b:10:62:79:
31:d5:38:05:14:57:ff:a6:7a:98:e8:f6:8c:16:05:4c:23:a8:
0e:c9:ae:ba:4e:6a:3a:40:4a:f5:5a:44:9b:e2:a9:ef:d1:4b:
0b:34:14:6e:19:ac:50:5f:52:99:e7:da:c1:a1:42:c5:27:a9:
67:f7:ac:13:1b:a8:8d:e9:c1:1f:dd:9a:02:76:b7:ae:03:23:
2f:fc:97:3a:37:2c:62:ce:d3:4b:bb:11:ad:84:78:d7:6e:e7:
ad:46:52:24:4a:dc:b6:2a:7c:d0:ac:40:6a:14:3b:1c:c5:f3:
c6:1e:c8:1a:32:4e:f2:29:6d:e6:6b:47:80:3d:d0:c0:79:94:
50:f8:1c:5f:97:3a:b6:20:2a:a4:31:2f:bb:bb:c3:11:b9:4a:
04:f2:83:6e:aa:56:b0:ee:2a:7d:fa:24:ef:67:51:c2:ea:3f:
4e:45:64:a6:bb:ac:e7:44:f6:4b:45:21:c1:77:80:a6:91:97:
1e:da:b9:7e:60:6e:a7:d4:f1:2d:bf:cf:ca:23:78:c2:a4:1c:
7c:9f:fb:7d:d3:07:e2:ec:01:a1:02:f4:d6:95:7e:85:4a:2f:
23:90:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:52 2023 by rpki-client on console-ams.rpki-client.org