Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KJip5LOS9vf25dOAwMuDfFeJor8.roa
File: KJip5LOS9vf25dOAwMuDfFeJor8.roa (raw, json)
Hash identifier: 5eXRmbt1h0vSebBUCrERuFJZfyOERkGhZiz/08oX26Q=
Subject key identifier: 28:98:A9:E4:B3:92:F6:F7:F6:E5:D3:80:C0:CB:83:7C:57:89:A2:BF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183080D2A0FBBC9F68F66B0E6E091F397D9
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KJip5LOS9vf25dOAwMuDfFeJor8.roa
Signing time: Sun 04 Sep 2022 10:30:23 +0000
ROA not before: Sun 04 Sep 2022 10:30:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204339
IP address blocks: 45.95.200.0/24 maxlen: 24
2a0d:2dc2::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0c:aa42::/32 maxlen: 32
2a0b:7782::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0c:aa41::/32 maxlen: 32
2a0b:7781::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
2a0b:da00::/32 maxlen: 32
2a0c:aa46::/32 maxlen: 32
2a0b:7786::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0c:aa43::/32 maxlen: 32
2a0b:da06::/32 maxlen: 32
2a0b:7783::/32 maxlen: 32
2a0c:aa40::/32 maxlen: 32
2a0b:7780::/32 maxlen: 32
2a0d:2dc6::/32 maxlen: 32
2a0b:da04::/32 maxlen: 32
2a0d:2dc5::/32 maxlen: 32
2a0c:aa45::/32 maxlen: 32
2a0b:7785::/32 maxlen: 32
2a0d:2dc7::/32 maxlen: 32
2a0b:7784::/32 maxlen: 32
2a0b:da05::/32 maxlen: 32
2a0c:aa44::/32 maxlen: 32
2a0b:7787::/32 maxlen: 32
2a0c:aa47::/32 maxlen: 32
2a0d:2dc4::/32 maxlen: 32
2a0b:da07::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:0d:2a:0f:bb:c9:f6:8f:66:b0:e6:e0:91:f3:97:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 4 10:30:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2898a9e4b392f6f7f6e5d380c0cb837c5789a2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:7f:d3:27:ca:ac:07:0b:10:7e:3a:c0:10:
31:13:52:11:8c:12:1e:35:e4:d5:24:5b:19:fb:10:
99:23:37:70:9a:87:1a:7b:e6:de:d7:1c:6b:e5:ba:
1b:19:1d:18:02:36:a0:2b:05:8b:bd:2f:83:2b:46:
ef:66:e6:ed:c4:80:b0:3e:f0:bc:be:65:0e:d4:8d:
49:f5:9e:87:08:f9:86:9f:2b:93:60:a9:63:f5:9a:
3b:5b:8f:39:87:35:be:8b:f2:78:32:ee:9e:33:3b:
1b:08:c3:15:43:bc:7e:7e:80:7a:b2:df:0d:b3:14:
a6:62:d6:3f:3e:15:64:d2:c2:07:5d:07:20:e8:e7:
7f:a0:78:fd:ec:9f:dc:3c:ef:4c:61:29:02:62:bd:
6c:bc:14:8c:f8:59:d4:6f:e0:41:9c:0d:c6:54:84:
3a:da:ee:1f:38:78:e0:d3:39:f1:5e:00:d9:f5:7e:
c9:5a:68:02:8a:f1:1d:75:6f:ec:13:54:64:23:04:
c3:82:8c:8c:00:7b:db:5c:c4:06:10:c7:48:b2:24:
11:d0:92:40:4c:e0:97:71:fa:13:dc:6a:fc:eb:de:
4a:07:73:f2:3a:48:cc:ea:a6:ad:c8:78:68:fb:ce:
34:88:b0:0f:ed:70:15:db:e7:04:e9:db:f3:e4:a1:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:A9:E4:B3:92:F6:F7:F6:E5:D3:80:C0:CB:83:7C:57:89:A2:BF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KJip5LOS9vf25dOAwMuDfFeJor8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/24
IPv6:
2a0b:7780::/29
2a0b:da00::/29
2a0c:aa40::/29
2a0d:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
95:fb:07:df:5a:50:24:0a:4a:5c:4e:44:49:da:39:e1:fe:47:
80:e9:91:7e:15:05:58:cf:51:88:af:01:7c:a5:c0:41:48:d8:
8f:85:a2:bd:f6:41:d8:c5:01:e0:1b:c7:04:57:34:0e:89:43:
cf:74:d1:e6:45:a4:c3:55:f3:88:13:a2:8d:a2:c0:01:10:8d:
da:4c:bd:7b:55:2b:95:08:a8:2f:c2:51:cb:a6:6c:6d:ce:fa:
23:9c:8f:88:f5:94:50:04:0a:bc:59:31:1e:e5:2b:ff:5f:66:
8c:d2:63:2c:85:8b:54:cd:d2:8b:bb:aa:50:16:da:d7:a0:f8:
59:1c:fc:7f:c7:e1:4b:5e:94:93:a3:02:9f:2c:6c:aa:39:e8:
c0:ba:61:34:2e:2c:be:3e:f7:59:23:51:4f:33:68:4f:9d:7d:
07:14:cf:ac:0c:df:01:fd:1e:ea:8c:d4:d2:86:5c:86:8e:fa:
fc:88:e9:08:1b:e5:78:90:52:98:e0:43:4f:19:3b:e3:9b:d4:
94:7c:92:46:cf:51:3d:1e:6c:58:45:a9:2c:da:21:6c:58:25:
f1:33:81:03:c7:08:b5:74:d4:21:97:d0:c3:62:95:0b:c2:d3:
25:d6:7c:1a:4c:87:8b:78:7c:0e:36:fc:b9:47:fd:92:56:21:
29:b4:10:aa
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYMIDSoPu8n2j2aw5uCR85fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwOTA0MTAzMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk4YTllNGIzOTJmNmY3ZjZlNWQzODBjMGNiODM3YzU3ODlhMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozJ/0yfKrAcLEH46wBAxE1IRjBIe
NeTVJFsZ+xCZIzdwmocae+be1xxr5bobGR0YAjagKwWLvS+DK0bvZubtxICwPvC8
vmUO1I1J9Z6HCPmGnyuTYKlj9Zo7W485hzW+i/J4Mu6eMzsbCMMVQ7x+foB6st8N
sxSmYtY/PhVk0sIHXQcg6Od/oHj97J/cPO9MYSkCYr1svBSM+FnUb+BBnA3GVIQ6
2u4fOHjg0znxXgDZ9X7JWmgCivEddW/sE1RkIwTDgoyMAHvbXMQGEMdIsiQR0JJA
TOCXcfoT3Gr8695KB3PyOkjM6qatyHho+840iLAP7XAV2+cE6dvz5KHxSQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCiYqeSzkvb39uXTgMDLg3xXiaK/MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvS0ppcDVMT1M5dmYyNWRPQXdNdURmRmVKb3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAMBAIAATAGAwQALV/IMCIE
AgACMBwDBQMqC3eAAwUDKgvaAAMFAyoMqkADBQMqDS3AMA0GCSqGSIb3DQEBCwUA
A4IBAQCV+wffWlAkCkpcTkRJ2jnh/keA6ZF+FQVYz1GIrwF8pcBBSNiPhaK99kHY
xQHgG8cEVzQOiUPPdNHmRaTDVfOIE6KNosABEI3aTL17VSuVCKgvwlHLpmxtzvoj
nI+I9ZRQBAq8WTEe5Sv/X2aM0mMshYtUzdKLu6pQFtrXoPhZHPx/x+FLXpSTowKf
LGyqOejAumE0Liy+PvdZI1FPM2hPnX0HFM+sDN8B/R7qjNTShlyGjvr8iOkIG+V4
kFKY4ENPGTvjm9SUfJJGz1E9HmxYRaks2iFsWCXxM4EDxwi1dNQhl9DDYpULwtMl
1nwaTIeLeHwONvy5R/2SViEptBCq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org