Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/KTCK-tB2icPKJj6mkI7jDqjP97s.roa
File: KTCK-tB2icPKJj6mkI7jDqjP97s.roa (raw, json)
Hash identifier: CV9Y5b+zF+Jej6Zaui5tDipgBr1tHgv0hISOFTX5c5Q=
Subject key identifier: 29:30:8A:FA:D0:76:89:C3:CA:26:3E:A6:90:8E:E3:0E:A8:CF:F7:BB
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 07C5C2D4
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/KTCK-tB2icPKJj6mkI7jDqjP97s.roa
Signing time: Sat 01 Jan 2022 06:01:44 +0000
ROA not before: Sat 01 Jan 2022 06:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 185.70.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130400980 (0x7c5c2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jan 1 06:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29308afad07689c3ca263ea6908ee30ea8cff7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:3b:01:7b:7e:6b:cd:31:4a:71:c9:b3:09:
ed:af:ff:d7:74:83:fa:dc:0c:44:05:52:4b:7d:da:
b4:a7:07:58:bb:09:17:2e:ab:0e:2c:7f:ac:ff:9d:
4f:69:4a:83:1d:7f:d8:81:98:d1:2c:2f:e7:3d:d4:
ad:f5:da:f3:55:2a:40:6b:e8:5f:16:78:2c:65:96:
37:53:8a:03:31:7d:65:0a:c5:4c:23:70:2b:d6:a7:
2a:65:b9:00:29:9d:f5:a8:c3:e4:60:59:72:1f:65:
9a:19:22:e3:8f:12:3d:67:c1:8c:30:16:35:01:dc:
c4:c1:67:d1:a7:33:fc:77:fe:57:8c:0f:d7:81:2f:
6d:d9:fb:85:39:25:48:fc:1c:2d:20:37:9c:5b:a2:
5b:e4:df:5d:de:a7:17:23:c8:0c:56:4a:31:79:68:
69:02:83:97:30:e2:58:2d:3f:0f:e2:5b:b2:d2:6f:
70:23:ae:dc:68:90:14:c6:2b:f4:00:2e:88:f6:85:
63:b6:5b:70:79:4b:24:6a:8d:4a:29:c5:d6:59:6a:
9d:7a:57:96:60:f1:a9:3e:d0:5d:17:d9:f6:83:25:
6f:32:1b:2c:9e:8e:79:25:12:54:fd:84:54:5c:b9:
5a:de:06:16:cf:0a:a2:0d:74:15:8a:9c:96:ff:e7:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:8A:FA:D0:76:89:C3:CA:26:3E:A6:90:8E:E3:0E:A8:CF:F7:BB
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/KTCK-tB2icPKJj6mkI7jDqjP97s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:2b:41:8c:ab:8b:e8:85:fb:42:03:7e:46:33:46:0d:fc:b5:
a6:88:e6:38:23:17:5d:57:79:04:13:4f:31:ad:b3:cf:3f:fb:
5c:71:74:d2:13:17:3f:29:29:17:8b:b1:c3:0d:90:55:ca:cb:
cf:e0:3a:2e:06:3f:de:f0:46:c6:ac:3c:b8:21:c2:e1:61:e0:
3f:16:47:19:c7:00:09:ab:c2:4f:45:4f:b6:d8:e7:db:df:44:
7d:7b:9d:b9:3f:66:c3:86:c3:58:11:9e:b1:1e:9a:a3:87:bd:
ca:e3:c6:54:51:af:c5:13:98:61:09:b5:9e:f7:fa:43:fb:43:
a5:16:77:f2:86:14:1c:0b:eb:32:73:64:d6:c6:56:dd:d6:57:
a7:52:53:61:55:d8:15:e5:de:1f:12:df:52:36:1f:b1:5b:19:
63:d1:30:02:2d:02:55:82:07:4a:59:98:97:50:20:85:b5:81:
a7:32:de:45:c7:66:94:4d:7b:fa:db:99:49:38:72:5a:9b:ae:
4d:9b:d5:c7:a6:21:c1:9e:cb:53:df:8e:5d:26:9a:09:d2:07:
ee:85:67:79:8e:39:c4:30:d5:e0:3f:03:2e:66:98:a3:33:6e:
26:89:0d:da:9e:aa:10:18:0f:cc:c8:16:71:1a:5e:52:ba:f6:
62:30:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:59 2025 by rpki-client