Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Kraaep3fE4wJ4FTX9YLYMtSE99c.roa
File: Kraaep3fE4wJ4FTX9YLYMtSE99c.roa (raw, json)
Hash identifier: SHPcJEihszBRs+7Mqz9zoi6MXEQmM5Obq6E2fory6RA=
Subject key identifier: 2A:B6:9A:7A:9D:DF:13:8C:09:E0:54:D7:F5:82:D8:32:D4:84:F7:D7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D56278E99A9C39AA6BF95D55AFD5B9E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Kraaep3fE4wJ4FTX9YLYMtSE99c.roa
Signing time: Mon 31 Oct 2022 09:18:51 +0000
ROA not before: Mon 31 Oct 2022 09:18:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201016
IP address blocks: 195.144.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:56:27:8e:99:a9:c3:9a:a6:bf:95:d5:5a:fd:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:18:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ab69a7a9ddf138c09e054d7f582d832d484f7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:9a:e6:2a:3f:4f:09:5e:2f:30:20:82:87:
38:1a:47:3e:9c:c7:43:99:93:6f:65:ac:c6:e4:28:
44:46:8c:76:78:3c:f6:e3:4c:a1:ce:24:3b:0a:8a:
8d:ce:b8:de:a2:d9:57:f9:ee:ba:cc:bc:db:b0:33:
ad:34:a6:e3:b8:22:45:01:a9:1b:34:45:79:8a:55:
e4:21:86:56:0b:bf:14:18:93:39:62:4a:50:d6:b0:
b0:10:d2:1e:c2:ef:84:99:eb:c3:e0:51:44:3f:f4:
ab:78:62:50:ec:2b:0e:c5:01:4b:e7:4d:53:fc:53:
a4:e6:31:e1:a2:ab:ed:0a:83:b3:cf:09:8e:4b:34:
ad:c1:f3:e4:ca:a2:af:5f:8e:e3:7c:4e:05:1b:35:
0d:e6:34:32:16:df:37:45:bf:19:de:4d:e2:4b:c4:
ef:08:1a:4e:0e:11:07:87:c6:54:c1:6e:f8:34:16:
7d:28:f0:bc:cf:8b:a0:1c:d6:a5:2f:02:91:c3:d5:
bd:7c:1f:01:d3:48:4d:c6:7d:9e:5f:44:6e:52:4f:
bf:4a:12:6d:16:f4:0a:bb:ef:33:93:e8:72:7d:32:
36:70:11:82:8b:e6:e3:4d:44:ba:1f:e6:4a:98:39:
cc:e6:31:d1:9a:7c:b0:de:d7:c7:73:ec:a0:88:8e:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:9A:7A:9D:DF:13:8C:09:E0:54:D7:F5:82:D8:32:D4:84:F7:D7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Kraaep3fE4wJ4FTX9YLYMtSE99c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.243.0/24
Signature Algorithm: sha256WithRSAEncryption
93:84:fe:dc:3c:3c:02:b5:67:5c:6a:01:00:ef:b8:0c:4d:6d:
ef:f5:51:8a:f5:12:d9:02:1c:16:fa:12:d2:2e:47:ab:92:f8:
f1:1c:58:5f:e0:6c:3f:ca:88:d9:40:72:d1:53:0a:d6:48:4f:
a4:92:05:cb:01:19:68:dc:9f:01:a5:1c:28:0d:f9:be:d4:fa:
e0:08:df:8c:6a:26:1a:8e:bd:6c:0b:02:1e:7c:34:81:ba:5e:
8c:dc:a9:e9:ce:3a:0e:c5:b2:a1:b1:d8:da:77:07:3d:be:a3:
83:5b:36:d8:78:d1:22:60:83:18:fa:00:33:16:8b:9e:95:7f:
d6:ec:1d:8b:5b:3f:b2:45:1c:51:48:67:13:80:bf:f0:0b:28:
68:56:f9:f2:cb:63:e6:98:ff:c3:3c:88:b2:2d:dc:72:f8:0e:
d7:8c:42:75:67:d7:0e:5b:0f:00:eb:36:81:46:d9:07:03:66:
23:40:47:cf:c5:2b:e6:e0:a7:a4:fb:53:b3:55:fd:c5:30:83:
1b:12:19:dc:e9:e9:81:c4:ac:79:38:f4:7e:e5:b9:b2:44:a0:
6e:71:03:ed:f9:0a:34:9a:0d:4b:c9:56:28:f2:21:89:0e:78:
13:3e:6a:ff:fd:bf:1b:d6:04:df:d9:d2:ae:0f:4e:98:aa:af:
ad:f0:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:50 2025 by rpki-client