Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/KVGrxwdC0s10upIKMNE82g0zqks.roa
File: KVGrxwdC0s10upIKMNE82g0zqks.roa (raw, json)
Hash identifier: Wfqkmu78QcNT8RHxSGNaD2pZQs2gwm1ckF9gHRYymbw=
Subject key identifier: 29:51:AB:C7:07:42:D2:CD:74:BA:92:0A:30:D1:3C:DA:0D:33:AA:4B
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 018571D7BEBEEEBF40D61ADA7CBE080A9506
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/KVGrxwdC0s10upIKMNE82g0zqks.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200585
IP address blocks: 185.89.232.0/24 maxlen: 24
185.89.232.0/23 maxlen: 23
185.89.233.0/24 maxlen: 24
185.89.234.0/23 maxlen: 23
185.89.235.0/24 maxlen: 24
185.89.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:be:be:ee:bf:40:d6:1a:da:7c:be:08:0a:95:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2951abc70742d2cd74ba920a30d13cda0d33aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:d2:e2:7d:4d:e4:df:ee:12:7b:40:d4:7f:
f1:10:3b:fb:ad:65:4e:e6:76:b5:b3:74:bd:09:69:
df:f7:c0:f9:c9:91:c3:cb:b7:46:27:fc:e8:bf:cf:
09:78:ea:f5:c1:fb:5b:8f:8e:30:56:45:b2:bb:33:
db:0a:ec:72:b2:7c:a9:dc:a0:ce:e7:66:98:e0:46:
f9:11:4c:a9:78:67:4e:b0:44:d0:f2:37:8a:11:2e:
d3:92:c7:0f:c6:72:fa:90:64:47:47:85:db:94:f2:
ae:ec:25:bf:80:20:ac:5e:d7:e3:c6:25:20:79:0a:
a7:8e:07:ad:95:ea:5d:0d:09:b6:23:64:40:1f:18:
39:a7:95:c1:40:60:be:f9:5e:ca:e0:f4:36:01:7f:
70:10:11:48:22:89:f3:57:d0:7a:d9:99:76:d8:05:
8f:91:71:a8:ee:25:38:64:a4:6c:bf:af:03:a1:ac:
5b:49:84:ab:c1:e9:7c:ef:6a:85:6f:14:d7:af:77:
b8:79:de:30:f9:3a:0e:a7:42:13:47:3a:e5:84:e7:
2c:af:71:54:66:93:88:96:c7:cc:63:b0:ad:c0:91:
89:28:4c:df:65:61:87:04:ac:c4:94:27:4d:a7:35:
c1:9b:ef:df:fc:e0:16:5b:54:37:16:6c:6a:a4:67:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:AB:C7:07:42:D2:CD:74:BA:92:0A:30:D1:3C:DA:0D:33:AA:4B
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/KVGrxwdC0s10upIKMNE82g0zqks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:ca:6f:c1:fc:a0:17:14:94:07:33:89:16:83:f5:c5:71:7e:
9c:eb:c4:ea:66:a8:20:90:21:97:69:22:39:3f:ff:22:50:b0:
54:20:79:51:24:86:79:50:2d:57:fb:51:9f:ff:e4:e5:f5:82:
cb:f4:d6:d8:a7:56:e9:7d:14:8a:6a:30:66:50:7d:94:1a:65:
0f:88:a5:c2:df:e0:5c:6b:80:75:81:ca:2b:3b:3f:b7:bd:2b:
74:83:6a:78:8a:ba:d2:3c:39:51:11:19:9d:87:a6:b6:52:a1:
cc:64:ac:a7:9f:99:97:47:05:10:5f:4f:71:d4:01:b3:4c:97:
c1:25:21:45:c4:7d:17:b4:83:f4:5e:1b:c8:b8:f0:be:84:5f:
60:5f:e6:e4:f9:53:03:c8:b7:26:9c:23:5f:8a:00:12:35:cf:
67:6d:a3:db:8c:cf:20:81:3e:18:ae:31:e8:31:90:27:5c:c4:
e3:91:03:52:1e:d7:40:a8:27:76:b4:ad:d5:91:91:d5:2a:82:
31:26:ec:f6:27:a9:c1:fd:a5:c4:0b:a7:86:e5:df:14:99:00:
f3:27:50:2f:68:52:cd:19:4b:d0:a1:f2:59:59:22:b0:79:03:
4e:95:70:a5:44:1a:c2:92:39:31:fc:f6:8a:64:98:91:6d:34:
22:ba:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:11 2025 by rpki-client