Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/KPt2zKiQ3fqqvCAzW_ZP6l5TG5c.roa
File: KPt2zKiQ3fqqvCAzW_ZP6l5TG5c.roa (raw, json)
Hash identifier: zLxjRI/5RfgOfuKUZLjCryDI2FvlI5Ebvs5BVyojc0w=
Subject key identifier: 28:FB:76:CC:A8:90:DD:FA:AA:BC:20:33:5B:F6:4F:EA:5E:53:1B:97
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 018A2C93D160DDCAB2A74847BC120DD130C0
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/KPt2zKiQ3fqqvCAzW_ZP6l5TG5c.roa
Signing time: Fri 25 Aug 2023 12:03:19 +0000
ROA not before: Fri 25 Aug 2023 12:03:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31726
IP address blocks: 185.117.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:93:d1:60:dd:ca:b2:a7:48:47:bc:12:0d:d1:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: Aug 25 12:03:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28fb76cca890ddfaaabc20335bf64fea5e531b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:62:72:07:a2:ff:ad:d6:d7:43:21:ef:55:
a0:c4:8c:46:60:b7:e2:00:8a:a7:76:73:5f:5c:18:
be:5b:67:9b:53:f0:a9:f7:a4:7c:4f:9c:0f:61:87:
78:bb:f4:80:8c:9f:7c:12:bb:06:fc:90:20:5b:09:
fe:f8:24:d5:2c:a5:58:18:5a:fc:7c:37:56:ec:dc:
0a:77:9b:8b:a7:16:0b:44:c9:c2:47:07:42:ea:7c:
ac:1d:ad:bb:c5:d9:3f:86:64:0f:af:aa:5d:50:a9:
b0:e9:c2:8e:90:5b:7e:65:72:8d:0a:7d:64:59:55:
2e:e6:1a:cc:c4:a9:fb:b8:b3:85:4e:4a:75:e0:75:
11:f9:9b:4a:55:97:93:44:e7:4d:d1:34:0c:5f:08:
8e:41:d1:4f:53:77:ba:92:f5:87:dd:49:6b:64:88:
2c:a5:6d:bc:64:a5:0a:61:54:99:b9:e9:88:bf:8e:
2b:b9:fe:31:75:5b:61:2b:1b:67:ff:b3:47:b9:83:
e8:70:9b:14:13:ef:de:38:a0:bb:8b:2c:08:10:2e:
ce:4c:7a:7e:d1:3a:46:fd:d6:68:46:11:6d:77:ea:
f2:45:a7:23:54:76:18:17:c9:69:5b:c6:ea:4f:2f:
a7:a8:a5:6c:3c:5f:c8:a3:92:c9:b6:7e:91:88:1e:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:76:CC:A8:90:DD:FA:AA:BC:20:33:5B:F6:4F:EA:5E:53:1B:97
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/KPt2zKiQ3fqqvCAzW_ZP6l5TG5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:bb:47:68:b4:3c:d5:f5:25:34:8f:74:f5:27:1c:29:cd:f7:
1f:05:26:1f:6a:a4:9d:46:5a:31:20:49:5b:fd:ca:9f:04:1b:
73:44:53:e3:26:57:58:ed:59:57:e8:49:dc:72:40:71:b3:92:
e3:9c:02:79:30:99:d2:2b:f5:f0:af:49:b5:15:4a:d5:a7:9f:
be:60:4d:44:ac:64:c4:6e:32:1d:9e:a4:ac:62:ad:c0:a4:36:
24:61:69:a8:43:c6:c4:58:64:a7:ff:ee:ac:8a:bd:a1:83:f5:
68:cf:03:d7:c8:d6:ab:49:b2:a7:f7:6e:89:93:72:cc:2f:32:
89:e2:81:e6:42:95:b7:16:a1:b6:c5:67:61:ac:3c:00:35:74:
88:85:ec:9b:26:ea:f6:db:f6:cf:99:9f:11:66:2d:00:c5:60:
d3:40:f4:6a:98:25:82:a6:8a:93:23:32:0a:4e:91:77:e5:be:
1d:fe:3a:31:c5:8f:a9:7c:b4:50:df:72:0b:20:4e:09:98:ec:
7f:79:20:bd:f6:cb:00:35:8a:f3:83:e3:bf:c3:de:2b:79:c7:
c0:e3:73:bd:70:49:58:5a:e5:30:4e:bc:dc:64:0d:e2:02:53:
4d:8f:66:32:7d:5d:d4:bd:c7:59:38:65:a1:69:1e:ee:82:99:
d0:00:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:41 2025 by rpki-client