Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KrHOIA4GllCh7Zy0P3jnuGCLlzc.roa
File: KrHOIA4GllCh7Zy0P3jnuGCLlzc.roa (raw, json)
Hash identifier: lf2etallGLkRdI0EQTXvo5mxv4ULmoRgXD9kYV56qPM=
Subject key identifier: 2A:B1:CE:20:0E:06:96:50:A1:ED:9C:B4:3F:78:E7:B8:60:8B:97:37
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018A700CB009DB671E61992E728BA0697B4A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KrHOIA4GllCh7Zy0P3jnuGCLlzc.roa
Signing time: Thu 07 Sep 2023 14:29:54 +0000
ROA not before: Thu 07 Sep 2023 14:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47516
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:0c:b0:09:db:67:1e:61:99:2e:72:8b:a0:69:7b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 7 14:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ab1ce200e069650a1ed9cb43f78e7b8608b9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:88:0f:66:f9:56:c2:40:88:c5:f4:9f:e7:
aa:b5:a3:55:97:e1:f7:a8:76:41:85:29:49:13:7e:
cc:14:fc:ff:7a:5f:c3:bc:56:91:9f:d9:86:20:30:
0c:4e:fe:ab:0e:86:94:80:3f:cf:84:48:fc:55:c8:
af:ff:f3:8f:83:9b:55:3d:bc:76:0f:c3:23:49:02:
8c:68:a8:6a:fb:3c:38:4a:a4:cc:ae:76:f4:49:45:
17:1f:56:55:09:9b:4d:e0:8e:17:5b:6d:3a:60:30:
01:fe:5f:60:d3:1a:95:cc:72:b8:52:c4:d6:71:5c:
81:e9:b9:95:1d:9c:e1:55:54:5b:69:4d:8d:4c:28:
1e:20:57:be:b3:47:e9:64:1f:c5:b9:b2:d2:55:0e:
cc:44:20:fa:2c:67:09:1f:e1:80:6d:61:63:fd:c5:
f5:1b:bf:75:d4:f3:3f:5e:44:e8:98:96:e1:0c:9a:
73:69:8c:1c:a0:7b:07:d0:5c:34:7f:c5:e9:96:a3:
19:e9:fa:82:5b:eb:46:fa:a3:54:20:6e:db:ab:1f:
59:c6:45:87:3f:7d:5b:e9:24:ce:8a:38:d6:5a:41:
c3:06:b1:cd:13:eb:3d:cd:04:4a:c0:55:c5:4c:1f:
4a:d3:23:18:d0:50:25:b9:59:28:93:6e:48:67:61:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:CE:20:0E:06:96:50:A1:ED:9C:B4:3F:78:E7:B8:60:8B:97:37
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KrHOIA4GllCh7Zy0P3jnuGCLlzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
02:84:4b:db:42:09:7d:7d:ce:89:d7:ef:fd:b0:e2:e0:bd:a1:
9a:11:59:8f:fc:94:8a:36:6a:08:22:6a:86:aa:80:a2:ca:81:
3b:2e:92:f9:43:71:8a:e3:cb:5d:4f:26:62:54:a1:fb:a6:85:
e9:cb:85:26:54:27:e1:46:1f:11:b7:7d:cc:9d:33:23:1e:ef:
57:e1:d3:4f:f1:44:65:ec:67:d3:9f:ce:1b:1b:34:02:2a:c1:
69:b5:40:a4:c9:f3:d1:71:22:7d:e1:26:86:72:b1:a3:79:85:
84:7c:d4:40:cc:a0:03:02:75:90:02:52:14:7f:62:4c:f3:63:
ec:c8:07:f2:f9:8a:e6:a8:a9:22:91:e1:93:03:a8:96:28:12:
13:08:42:54:ae:28:ad:e1:f9:89:6c:d1:a6:4f:59:fd:f7:8c:
66:78:8a:41:09:6a:48:cb:a0:5e:23:e3:4c:65:bd:51:00:e2:
e2:dc:c2:b7:82:a4:9d:e6:e7:5b:0c:0c:41:1c:6e:c5:7d:27:
42:67:ff:4f:95:7d:7d:76:72:2d:0c:26:57:56:ba:6f:ad:47:
6a:0d:71:85:77:83:5c:88:19:d0:22:bd:10:1a:e9:86:5c:5a:
16:c9:e0:be:de:79:63:e1:e4:06:d9:b5:8d:1a:70:af:37:98:
01:78:aa:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpwDLAJ22ceYZkucougaXtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwOTA3MTQyOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWIxY2UyMDBlMDY5NjUwYTFlZDljYjQzZjc4ZTdiODYwOGI5NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2qID2b5VsJAiMX0n+eqtaNVl+H3
qHZBhSlJE37MFPz/el/DvFaRn9mGIDAMTv6rDoaUgD/PhEj8Vciv//OPg5tVPbx2
D8MjSQKMaKhq+zw4SqTMrnb0SUUXH1ZVCZtN4I4XW206YDAB/l9g0xqVzHK4UsTW
cVyB6bmVHZzhVVRbaU2NTCgeIFe+s0fpZB/FubLSVQ7MRCD6LGcJH+GAbWFj/cX1
G7911PM/XkTomJbhDJpzaYwcoHsH0Fw0f8XplqMZ6fqCW+tG+qNUIG7bqx9ZxkWH
P31b6STOijjWWkHDBrHNE+s9zQRKwFXFTB9K0yMY0FAluVkok25IZ2GnrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqxziAOBpZQoe2ctD9457hgi5c3MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvS3JIT0lBNEdsbENoN1p5MFAzam51R0NMbHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYMCMA0G
CSqGSIb3DQEBCwUAA4IBAQAChEvbQgl9fc6J1+/9sOLgvaGaEVmP/JSKNmoIImqG
qoCiyoE7LpL5Q3GK48tdTyZiVKH7poXpy4UmVCfhRh8Rt33MnTMjHu9X4dNP8URl
7GfTn84bGzQCKsFptUCkyfPRcSJ94SaGcrGjeYWEfNRAzKADAnWQAlIUf2JM82Ps
yAfy+YrmqKkikeGTA6iWKBITCEJUriit4fmJbNGmT1n994xmeIpBCWpIy6BeI+NM
Zb1RAOLi3MK3gqSd5udbDAxBHG7FfSdCZ/9PlX19dnItDCZXVrpvrUdqDXGFd4Nc
iBnQIr0QGumGXFoWyeC+3nlj4eQG2bWNGnCvN5gBeKqE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:08 2025 by rpki-client