Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/KdytcnWLDTjfd_hAtk4GS9cRtzo.roa
File: KdytcnWLDTjfd_hAtk4GS9cRtzo.roa (raw, json)
Hash identifier: 7X4OSEAIQOJIKDTbsC0LULUB+QWpxppVJiU+Aja4MDY=
Subject key identifier: 29:DC:AD:72:75:8B:0D:38:DF:77:F8:40:B6:4E:06:4B:D7:11:B7:3A
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0453EF84
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/KdytcnWLDTjfd_hAtk4GS9cRtzo.roa
Signing time: Mon 25 Apr 2022 08:53:29 +0000
ROA not before: Mon 25 Apr 2022 08:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13170
IP address blocks: 213.255.163.0/24 maxlen: 24
213.255.164.0/24 maxlen: 24
213.255.184.0/24 maxlen: 24
213.255.185.0/24 maxlen: 24
213.255.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72609668 (0x453ef84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Apr 25 08:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29dcad72758b0d38df77f840b64e064bd711b73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:16:12:d5:f5:14:9c:26:87:8c:22:cc:84:
38:00:e5:07:d3:59:16:b5:2d:36:0b:c2:3d:4f:cb:
3c:1b:df:8b:49:a8:7c:51:48:0e:dc:f8:00:3e:4a:
2a:9c:8f:75:b5:2b:5e:f4:17:40:44:e7:67:83:31:
9e:99:12:20:ea:cc:07:65:df:ac:5c:33:e1:8d:2d:
11:a5:bb:4f:0c:93:9a:af:0e:9a:a7:63:f5:b9:97:
b0:9f:65:19:bd:a1:e9:39:11:81:81:e3:b0:7e:3a:
02:6c:8b:03:2f:82:14:d5:8f:29:9f:58:52:f6:95:
d0:6d:96:7e:2f:8d:25:8e:fc:2e:bf:25:cc:c0:2a:
a3:ea:89:7a:a3:1e:dc:17:06:df:ae:95:65:84:52:
55:b8:29:4c:d6:ef:5f:c8:aa:70:a3:0a:31:32:3a:
67:cc:18:77:97:49:64:84:2e:a7:2e:2b:9b:13:a3:
1b:44:5d:84:fb:ce:ab:e6:34:47:b2:3f:2d:9c:4f:
bb:02:96:4a:d3:93:b2:35:68:da:65:34:f9:ce:ad:
17:20:39:38:0e:e8:c6:c7:65:4a:09:25:fe:4f:33:
15:b4:27:70:30:9c:6a:69:73:74:18:e1:c9:df:51:
db:f3:d5:92:e0:91:56:35:c6:3b:85:bd:22:56:9c:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:AD:72:75:8B:0D:38:DF:77:F8:40:B6:4E:06:4B:D7:11:B7:3A
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/KdytcnWLDTjfd_hAtk4GS9cRtzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.255.163.0-213.255.164.255
213.255.183.0-213.255.185.255
Signature Algorithm: sha256WithRSAEncryption
60:40:fd:3e:70:04:be:e9:47:bf:ab:7d:f8:bf:bc:0d:7e:8d:
48:ba:a8:a1:69:77:6e:bb:10:24:ca:b3:cc:66:05:7a:cb:c3:
b0:ee:bf:4e:9a:47:42:a3:32:1a:9b:a4:06:99:55:59:29:2f:
7f:14:3c:2e:b7:6c:fd:0c:71:d9:30:e2:3f:bf:37:06:e1:9f:
38:5f:6b:e4:98:64:39:96:45:3d:1e:35:cc:2c:4b:6a:d5:35:
9d:f2:3f:2e:e8:49:83:27:a5:42:1d:a1:99:10:9a:41:04:e3:
4f:96:3d:c6:78:14:af:f2:13:08:d3:89:84:e6:b2:d6:15:64:
46:b2:02:b4:4f:b7:77:da:95:ef:66:cc:76:23:7d:f9:a4:18:
bb:f6:01:87:de:52:61:1c:ab:31:83:1b:c8:4c:85:9f:c4:29:
d8:d4:37:c0:65:73:c7:e5:df:62:33:63:23:fe:41:88:5c:7d:
16:cd:42:3d:c8:e0:a7:70:1d:ce:4a:2f:05:27:23:23:ff:23:
1c:ba:c6:b6:42:bc:8d:32:0c:ab:99:22:29:e9:72:d3:cb:ee:
63:25:09:3e:24:b2:2d:05:b3:e2:46:19:5d:f7:d5:c2:20:33:
70:bd:f2:28:bf:30:e5:f3:93:11:d1:22:88:ef:76:fe:1d:43:
a9:29:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:08 2025 by rpki-client