Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/kc-QcI-QixXz1a3vv8-4w5vzLxU.roa
File: kc-QcI-QixXz1a3vv8-4w5vzLxU.roa (raw, json)
Hash identifier: wtJ08PC9miJdNU2B7ojdujRo5xLEoMxSvX/HY/2J1ig=
Subject key identifier: 91:CF:90:70:8F:90:8B:15:F3:D5:AD:EF:BF:CF:B8:C3:9B:F3:2F:15
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 0186E02947FD021C2541D256823CAE6E8168
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/kc-QcI-QixXz1a3vv8-4w5vzLxU.roa
Signing time: Tue 14 Mar 2023 12:47:27 +0000
ROA not before: Tue 14 Mar 2023 12:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44381
IP address blocks: 217.144.64.0/20 maxlen: 20
92.62.32.0/20 maxlen: 20
45.154.233.0/24 maxlen: 24
45.154.232.0/24 maxlen: 24
45.154.235.0/24 maxlen: 24
95.141.64.0/20 maxlen: 20
2a02:2c8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:29:47:fd:02:1c:25:41:d2:56:82:3c:ae:6e:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Mar 14 12:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91cf90708f908b15f3d5adefbfcfb8c39bf32f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:1f:2c:ee:d2:91:6d:80:c6:5c:c7:48:44:
e1:8e:55:c1:9b:85:e2:0c:b1:9e:2c:ff:34:11:49:
d1:86:a4:2d:58:2e:d3:27:5c:89:3f:f8:b1:d3:47:
fd:d6:fb:49:86:2b:d4:15:dc:a1:97:5b:3a:b6:ad:
83:04:9c:40:b4:83:29:98:91:7d:50:13:6e:7d:f5:
77:e2:22:9a:8d:52:bf:b0:ce:5b:55:2e:26:e2:96:
18:8e:60:b1:9f:1e:bf:71:65:4b:ca:fe:39:64:3f:
51:db:a8:53:6f:0f:70:cd:48:83:d6:78:f2:bd:8e:
a6:16:98:36:9a:ef:a4:be:23:dc:f1:2a:eb:76:ba:
45:a8:7b:bb:77:07:61:3b:3b:7d:a5:5a:3a:73:d2:
9e:80:e3:73:64:67:f2:89:6b:b5:c0:28:57:70:1f:
cb:c4:d1:43:0e:3b:6c:38:a7:e4:eb:7d:7d:fa:ae:
0a:28:e1:10:5a:ba:8e:54:2b:45:6c:85:2b:0b:b7:
3b:8b:66:3e:31:5b:51:8c:7b:1c:2d:93:a2:54:91:
b1:45:a1:39:92:e1:ac:b5:76:ff:68:3e:ef:79:9d:
f8:12:eb:80:dc:a7:0c:1a:04:9a:1e:5f:0a:7f:44:
14:78:7d:48:33:14:fa:01:82:51:9f:34:62:53:1f:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:90:70:8F:90:8B:15:F3:D5:AD:EF:BF:CF:B8:C3:9B:F3:2F:15
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/kc-QcI-QixXz1a3vv8-4w5vzLxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.232.0/23
45.154.235.0/24
92.62.32.0/20
95.141.64.0/20
217.144.64.0/20
IPv6:
2a02:2c8::/32
Signature Algorithm: sha256WithRSAEncryption
66:52:67:eb:65:17:09:03:34:ca:63:fb:60:f1:f4:97:e2:90:
35:40:45:d8:4e:33:e4:2e:34:93:1a:a4:ce:f2:3c:3b:19:27:
5a:2a:b6:5d:50:48:29:ae:58:e2:d9:0b:b7:cd:88:af:5d:f3:
60:ea:4f:a1:cd:cd:c9:af:aa:a6:28:a1:6c:20:2d:3f:02:b7:
6f:55:da:09:9f:85:f1:99:dc:96:ec:b7:a7:d0:54:c0:4b:d8:
76:b9:fe:a7:bb:68:bd:cb:7b:8b:31:b9:17:f3:e1:35:04:9e:
31:ca:f9:d1:dd:5d:3b:16:59:3e:fa:86:b5:0c:64:57:8c:48:
cd:16:bb:b0:81:c5:f6:16:26:85:f1:3b:d4:b7:4d:36:f0:d1:
3e:20:94:89:c7:5b:ef:11:07:63:05:f0:b1:db:47:34:86:26:
df:e2:75:09:e3:8f:70:da:2b:aa:38:82:75:c3:16:bb:3b:52:
93:14:a2:0f:d3:b0:99:3b:36:e3:5c:49:da:f5:1b:64:ab:06:
eb:a8:40:3f:22:a6:e3:98:f9:cd:51:71:df:40:24:18:ac:fc:
d5:14:aa:f4:fd:7f:33:be:f3:df:44:33:45:9e:7f:e0:fb:da:
4c:5b:90:c4:6c:ae:1e:97:95:8b:0a:ab:e4:15:94:95:99:ed:
b6:3f:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:10 2025 by rpki-client