Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/KKa44ZDjIqR5gLUx-9FS5GZlWHU.roa
File: KKa44ZDjIqR5gLUx-9FS5GZlWHU.roa (raw, json)
Hash identifier: sMO+UaRZc/bXNpCcC+1Il4CwTD7BHCAca8z5LPf+YU4=
Subject key identifier: 28:A6:B8:E1:90:E3:22:A4:79:80:B5:31:FB:D1:52:E4:66:65:58:75
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018603920AFCE6AE119464EA59A143D14E77
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/KKa44ZDjIqR5gLUx-9FS5GZlWHU.roa
Signing time: Mon 30 Jan 2023 16:45:48 +0000
ROA not before: Mon 30 Jan 2023 16:45:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.138.12.0/22 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:92:0a:fc:e6:ae:11:94:64:ea:59:a1:43:d1:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 30 16:45:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a6b8e190e322a47980b531fbd152e466655875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:0a:a6:e8:20:d1:4b:8a:ed:7d:f0:71:4e:
2f:b1:49:b8:ab:53:88:68:8e:04:9d:da:3e:bd:95:
65:d1:c3:ab:20:4c:ed:90:dc:b5:a7:a1:0b:7e:16:
d0:d7:18:24:2a:db:37:0c:c1:d2:6f:0e:5b:ea:e6:
bd:ce:ec:42:b1:aa:a5:6f:c5:b7:18:f4:b1:ba:98:
97:d9:ae:51:e5:f3:05:02:75:c5:c5:89:c1:1c:2d:
a0:06:2e:03:4e:e4:45:61:5a:46:ef:dd:a1:e9:53:
9c:c9:6a:7f:ac:28:9e:e1:d7:09:a6:90:6a:2a:d9:
fb:ed:c8:c4:f8:62:92:9b:30:76:83:86:db:4b:3a:
19:12:b9:eb:b1:8d:14:8c:dd:67:34:d6:1c:be:fc:
4e:ae:99:2e:a6:5e:db:b9:83:79:4f:f8:c2:97:63:
a4:ce:f4:86:5e:59:0b:2e:96:94:9d:50:68:e3:6f:
d2:d0:42:2c:46:63:b1:a2:77:ef:4f:10:82:2b:60:
6d:82:42:0e:91:e3:6b:c3:05:2f:c8:c2:6f:9a:f3:
7d:02:4c:d0:56:1a:c3:8f:04:7e:30:ee:4c:c2:63:
6b:fd:46:99:e8:bf:ea:68:13:5e:6c:8f:75:28:0f:
e0:d8:53:e9:4e:da:b1:2c:40:16:76:37:4b:a7:d8:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:B8:E1:90:E3:22:A4:79:80:B5:31:FB:D1:52:E4:66:65:58:75
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/KKa44ZDjIqR5gLUx-9FS5GZlWHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ed:e6:91:67:3f:50:6c:f9:a3:e1:24:5b:0e:84:95:0c:e6:
e5:54:d6:e5:1b:fd:19:e8:c1:c9:92:79:9f:7e:db:7a:eb:09:
46:13:b0:11:6c:11:7f:68:4a:4a:94:33:4a:57:48:af:7a:30:
02:fc:ad:fb:36:2d:da:b2:74:2b:b0:a9:94:bc:f6:e4:cb:ad:
98:8b:cd:fd:cf:7a:39:ca:18:a2:b5:91:cd:f2:37:5e:72:cd:
3d:24:62:bc:38:63:e8:26:90:7c:6c:13:13:55:1c:45:f6:20:
7e:9d:01:f4:24:00:ec:f1:a3:b0:d2:b0:38:09:d2:c1:36:2b:
cc:8f:60:f1:57:44:6f:4f:4f:60:20:0c:03:35:14:db:77:9b:
2a:d2:5f:28:f4:54:84:e8:1c:52:ef:46:ad:e4:8a:69:b0:8e:
97:f9:69:dc:5b:0e:25:8c:ff:5b:58:75:41:52:69:27:42:37:
33:db:a5:71:13:78:cc:6e:53:83:16:39:cb:c3:d2:d8:05:62:
5a:49:99:03:3e:f6:9e:79:3e:74:1b:3f:ee:31:2c:7b:7f:e8:
9f:a2:9f:a1:42:a1:7a:f0:09:1d:a6:fc:d1:48:f2:f6:cb:39:
91:6c:7a:d0:66:dc:f1:f9:43:62:ba:55:dd:ce:dc:fc:7f:46:
bf:dd:48:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:08 2025 by rpki-client