Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/kpzORROvosjN73LH0CV12R2T4tk.roa
File: kpzORROvosjN73LH0CV12R2T4tk.roa (raw, json)
Hash identifier: RDWaYJnZ08u9+/i7KyApzxxLbKi5tY8YqNf+sFXYZTw=
Subject key identifier: 92:9C:CE:45:13:AF:A2:C8:CD:EF:72:C7:D0:25:75:D9:1D:93:E2:D9
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 01847625904D258821C303EDFA7136E441AD
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/kpzORROvosjN73LH0CV12R2T4tk.roa
Signing time: Mon 14 Nov 2022 12:38:03 +0000
ROA not before: Mon 14 Nov 2022 12:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198770
IP address blocks: 37.230.248.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
128.0.66.0/24 maxlen: 24
141.101.228.0/24 maxlen: 24
141.101.231.0/24 maxlen: 24
85.92.117.0/24 maxlen: 24
85.92.118.0/24 maxlen: 24
85.92.116.0/24 maxlen: 24
37.230.152.0/24 maxlen: 24
37.230.153.0/24 maxlen: 24
37.230.154.0/24 maxlen: 24
37.230.155.0/24 maxlen: 24
141.101.204.0/24 maxlen: 24
178.170.225.0/24 maxlen: 24
37.18.76.0/24 maxlen: 24
37.18.77.0/24 maxlen: 24
37.18.74.0/24 maxlen: 24
37.18.75.0/24 maxlen: 24
2a0d:b1c0:abc0::/44 maxlen: 44
2a0d:b1c0:c0::/44 maxlen: 44
2a0d:b1c0:ffff::/48 maxlen: 48
2a0d:b1c0:aaaa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:25:90:4d:25:88:21:c3:03:ed:fa:71:36:e4:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Nov 14 12:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=929cce4513afa2c8cdef72c7d02575d91d93e2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:72:d4:dc:67:25:af:03:eb:45:29:5a:20:
59:4f:57:86:3a:ed:29:4d:e9:a5:e2:33:ff:f5:68:
dc:5e:e6:95:36:cf:63:87:0c:24:dc:53:17:36:c4:
e4:66:9c:63:38:3a:bf:b8:59:76:85:ee:12:da:5b:
be:01:e5:0a:f0:d2:f1:ef:fd:2d:14:1c:f4:01:0d:
9c:ca:a9:d7:68:d9:c0:0c:9b:18:5f:de:fe:69:d6:
23:1b:af:63:32:fe:92:76:07:0b:71:87:32:d8:cd:
26:84:e3:48:7b:3f:ad:84:3e:56:ca:f0:42:8c:3f:
a4:2c:03:36:fc:a8:8f:65:35:dd:d2:e4:a9:5a:70:
56:0a:78:71:2e:4f:bb:2c:1a:7e:1b:ca:f9:47:a5:
4d:8f:21:a9:23:63:2f:13:40:54:26:54:22:d7:69:
27:d2:32:d5:b7:80:17:14:ca:95:35:d6:64:82:03:
9e:48:91:84:13:aa:e5:d2:26:68:c9:2b:81:cf:e0:
91:1e:6d:53:58:ef:b7:10:37:72:41:31:1f:b0:0c:
1b:19:71:6b:c3:b0:d6:61:c5:e7:e5:dd:37:22:0d:
51:29:c8:e9:71:85:4e:7a:a3:8a:9e:56:4b:c1:63:
c3:c4:0b:af:2f:56:7f:b0:56:6b:5a:04:1e:a1:09:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:CE:45:13:AF:A2:C8:CD:EF:72:C7:D0:25:75:D9:1D:93:E2:D9
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/kpzORROvosjN73LH0CV12R2T4tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
85.92.116.0-85.92.118.255
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0:c0::/44
2a0d:b1c0:aaaa::/48
2a0d:b1c0:abc0::/44
2a0d:b1c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
92:d4:f2:2b:44:de:a5:4a:3d:be:c3:f2:87:1d:a5:ac:6a:0a:
a0:ac:dc:c2:1d:ce:56:4e:61:20:bc:19:5c:46:cb:36:04:83:
9f:bc:47:31:d2:20:76:43:ae:a9:24:e1:df:b4:ba:59:27:53:
a5:3e:fc:d8:e5:9f:3d:a3:f7:35:b4:c7:0b:63:07:b7:8a:f7:
00:cd:e7:66:90:e0:b4:af:97:bf:cb:e8:48:55:13:92:51:a2:
3f:d4:a8:83:bc:c5:aa:f4:e3:de:e0:a9:39:b9:79:4e:e2:80:
46:ef:f6:7c:77:03:58:7d:a8:5a:a6:b3:8b:8f:f6:80:eb:18:
7a:90:49:86:7a:92:d5:be:ef:d3:e2:2d:59:d4:da:75:91:ef:
d7:41:b5:6b:de:4d:6d:73:db:93:4f:4d:dc:e1:ed:5d:76:b8:
b3:6e:51:12:8c:da:a8:d8:59:60:92:df:75:62:b9:76:3d:9f:
8a:af:37:46:4d:0c:ee:67:69:54:7a:38:2d:78:4a:09:9e:75:
33:9a:a3:ed:a5:2e:9c:8c:ae:2c:76:66:18:fa:49:46:8e:db:
1c:53:0f:d0:9c:74:00:48:da:c2:0d:fb:3f:4b:3a:60:dd:90:
a4:c1:d4:ba:a4:a5:5f:be:08:d2:52:ef:67:7f:55:e4:13:da:
20:1d:e3:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-ams.rpki-client.org