Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/KnBL9-ks2RLzigSZIUNMX-jcgxk.roa
File: KnBL9-ks2RLzigSZIUNMX-jcgxk.roa (raw, json)
Hash identifier: gvOyYG5OsV5e145OpAf06ZfR8oI2kAaImfOXiHwHK9Q=
Subject key identifier: 2A:70:4B:F7:E9:2C:D9:12:F3:8A:04:99:21:43:4C:5F:E8:DC:83:19
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018750E4F26ACE425E1D81B43B36A6E6A760
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/KnBL9-ks2RLzigSZIUNMX-jcgxk.roa
Signing time: Wed 05 Apr 2023 10:09:54 +0000
ROA not before: Wed 05 Apr 2023 10:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
46.23.109.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:e4:f2:6a:ce:42:5e:1d:81:b4:3b:36:a6:e6:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 5 10:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a704bf7e92cd912f38a049921434c5fe8dc8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b8:71:14:a6:cf:2f:18:c1:eb:35:61:b9:c0:
c8:97:01:a4:c0:00:98:a7:3d:28:09:64:73:35:bf:
31:fa:79:7c:37:6d:86:ac:1b:05:ca:02:0e:a1:10:
6c:b6:a9:bf:ec:09:55:e8:43:ed:86:88:9e:bd:7d:
55:1f:24:c2:42:40:84:a7:e1:21:e9:7f:db:70:ce:
ed:61:49:8a:0d:b8:86:61:12:c5:e1:c1:fa:dd:e2:
58:24:e3:b6:33:a6:f2:1e:24:2d:b4:9b:b5:58:79:
33:cf:92:16:71:10:45:90:a7:95:63:d2:48:1c:23:
f1:a6:03:75:b9:4a:32:cb:91:86:92:72:b2:1c:9b:
9b:cd:00:2a:53:75:d5:87:34:97:81:47:23:d4:75:
42:82:76:07:94:a4:75:c7:37:0c:ed:21:3e:f7:38:
81:8a:6f:19:e8:16:99:06:5b:b0:83:d3:97:18:52:
ad:6e:1e:71:dc:b5:c1:99:b8:a4:53:5b:70:2a:0a:
39:f3:6e:f2:e1:6d:42:96:a6:07:0a:45:a8:24:b2:
1e:8f:8b:a9:9b:92:39:fb:07:8b:2c:6a:3d:65:93:
21:25:5e:d2:8c:c5:cf:ad:63:f8:df:53:3a:91:8c:
6f:c0:ef:36:1b:77:19:70:a1:f4:8f:f5:69:eb:1a:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:4B:F7:E9:2C:D9:12:F3:8A:04:99:21:43:4C:5F:E8:DC:83:19
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/KnBL9-ks2RLzigSZIUNMX-jcgxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
46.23.108.0/23
109.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:72:b9:cd:22:11:9a:6b:e3:f2:82:90:b2:3d:1d:42:65:cd:
81:4b:1d:aa:a7:b2:c6:44:3f:23:5f:d3:43:bb:05:59:63:bc:
3e:25:15:e1:57:a4:61:cb:3d:76:38:97:67:7b:b2:e8:b2:5d:
d8:50:13:5d:9b:e5:c1:e1:d7:df:92:a9:b8:f0:99:7c:a2:be:
df:87:b6:af:09:29:49:c1:d0:54:6c:fc:61:87:e5:3c:fe:40:
ce:7f:60:91:17:fc:32:c6:6e:12:77:82:55:fb:d1:d4:c4:fe:
a1:58:4e:cc:cc:30:c4:6a:f3:d7:d1:db:5d:0b:4f:f1:fd:aa:
32:8e:9c:4d:b4:d1:6f:bf:7a:da:ff:cc:f5:81:64:62:24:1b:
bc:ce:46:6f:73:e9:e6:37:78:b2:0f:bd:83:fa:25:a6:30:3a:
2d:2e:b6:be:f4:8d:3c:21:b1:b6:b0:da:f9:02:c9:b8:48:52:
7d:d3:5b:4c:80:9f:0d:f9:de:4d:6b:de:b3:c7:19:a8:ee:4c:
91:4b:6a:24:52:ce:8e:7e:ad:2c:6c:6c:50:6d:61:22:e3:4b:
95:4b:29:e9:0f:27:69:58:69:ae:f4:a1:7d:13:bb:a3:66:ec:
c8:17:f1:3f:be:20:9a:97:69:63:8d:8f:3d:eb:6d:0b:8e:c8:
77:7a:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:58 2025 by rpki-client