Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Sk2It3OTLM8yCh3SrVIZf0TUHSs.roa
File: Sk2It3OTLM8yCh3SrVIZf0TUHSs.roa (raw, json)
Hash identifier: coD8slaUdlyy5Ll/9ahMuEW2QpMu6OO2si3MXiq/oEE=
Subject key identifier: 4A:4D:88:B7:73:93:2C:CF:32:0A:1D:D2:AD:52:19:7F:44:D4:1D:2B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E12C0F384E16A4C293C08C289F023F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Sk2It3OTLM8yCh3SrVIZf0TUHSs.roa
Signing time: Mon 12 Dec 2022 10:28:41 +0000
ROA not before: Mon 12 Dec 2022 10:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 188.162.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:2c:0f:38:4e:16:a4:c2:93:c0:8c:28:9f:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a4d88b773932ccf320a1dd2ad52197f44d41d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:56:28:7a:fd:24:e6:b3:2d:0b:cd:35:61:
88:15:53:29:d2:83:e1:f3:2e:e1:2a:5a:25:dd:0a:
4c:43:ee:c0:14:f8:04:a4:a1:94:0f:e1:e5:80:19:
83:01:7e:76:ec:49:5a:95:a2:37:2c:3c:6a:29:20:
a5:f9:55:a5:4e:85:44:4c:aa:5c:26:18:72:d2:3c:
38:f1:fa:67:e5:32:bd:ae:8a:37:ad:69:31:16:5f:
87:c2:c4:89:e3:e4:69:76:d7:1f:06:c5:c5:e6:ac:
89:62:b2:3f:a5:12:a4:8d:57:53:c7:3f:39:e3:fe:
62:5d:46:04:8a:df:9d:75:49:0c:2a:fc:13:dd:70:
ba:6a:fc:03:66:19:87:36:f9:e6:c7:fe:e8:9a:3f:
68:07:a5:c4:63:26:73:d9:e8:04:21:59:dc:95:5e:
2c:ee:82:05:2b:02:6d:79:3a:48:26:d6:e6:c2:3c:
ec:88:98:af:9e:81:ae:97:6b:25:fb:75:82:da:10:
8d:0d:13:66:bb:25:fe:c9:ea:0d:92:b4:da:a2:70:
39:e0:2d:8c:e9:16:d6:f6:fb:79:b6:c5:10:e3:29:
d5:24:4a:ac:7b:e9:b7:8c:ec:f8:90:a5:aa:99:fe:
88:bd:33:12:41:c9:87:48:20:8e:16:26:61:43:e7:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4D:88:B7:73:93:2C:CF:32:0A:1D:D2:AD:52:19:7F:44:D4:1D:2B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Sk2It3OTLM8yCh3SrVIZf0TUHSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:0c:a2:a5:d2:09:80:f7:19:1e:27:e6:bf:dc:81:80:64:6f:
c0:00:76:8c:e0:49:3c:a1:59:fb:82:a7:0d:7d:ce:5b:33:53:
ae:00:81:61:22:8f:43:41:d4:af:a4:17:e3:7c:4d:05:84:f7:
38:83:04:00:c5:08:d7:b0:10:02:75:61:85:49:05:78:8e:f0:
82:8c:07:e7:50:f3:0a:53:f0:04:f5:58:d3:5f:96:ad:cc:66:
5d:f9:d1:74:da:ae:c7:1b:c5:a5:7f:95:7b:54:4a:e8:fc:d5:
a6:37:20:4b:a0:a3:97:8f:cd:43:9b:bf:d7:62:21:86:49:af:
05:1b:24:3e:79:53:c6:40:e8:cf:03:17:99:3e:7c:36:ca:ea:
39:f6:77:2b:92:eb:5a:1c:21:97:59:da:16:37:2e:ec:ff:ae:
1a:dc:29:56:82:d9:ad:c1:20:9e:cf:be:62:57:70:68:41:5f:
b5:7b:41:5f:d8:f0:1d:82:94:17:d0:96:4f:eb:49:30:ce:10:
ec:9d:3a:28:22:9e:78:e0:ae:53:8d:0c:56:90:b6:dd:47:e2:
12:25:5e:9e:5b:43:b8:cf:87:a6:82:24:6d:d7:94:0d:46:54:
c5:e7:d8:96:e7:3f:d0:16:2a:59:b8:c4:ea:ea:0e:f6:dd:31:
18:56:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:56 2025 by rpki-client