Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/KLPg3NjPFisW82gm63UXTFAnAJQ.roa
File: KLPg3NjPFisW82gm63UXTFAnAJQ.roa (raw, json)
Hash identifier: 5xbhdP+eBIA979eGAjCjI76gkbkM/LCcxEbnwYncVD4=
Subject key identifier: 28:B3:E0:DC:D8:CF:16:2B:16:F3:68:26:EB:75:17:4C:50:27:00:94
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 01856F54757D9A09D8B337D1E66564AF6427
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/KLPg3NjPFisW82gm63UXTFAnAJQ.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41741
IP address blocks: 91.102.28.0/22 maxlen: 22
91.102.24.0/21 maxlen: 21
2a03:6180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:75:7d:9a:09:d8:b3:37:d1:e6:65:64:af:64:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28b3e0dcd8cf162b16f36826eb75174c50270094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:98:8e:81:e2:78:0a:ee:08:07:3b:ed:45:
b5:fa:75:d2:19:4e:78:77:8e:37:0b:b7:1f:f5:f2:
10:50:d7:41:af:06:45:2f:db:06:53:f2:b8:f7:e3:
d4:0a:db:00:e1:9e:04:88:8f:de:d3:c3:f0:9d:9d:
b3:69:52:09:32:8d:2d:7a:e9:2a:ab:94:ea:3a:87:
6a:2c:f2:d4:1c:cb:47:58:b5:d8:e8:78:b1:48:9b:
22:2a:ba:cd:76:78:0d:59:30:58:8c:d8:8d:71:ef:
17:27:a1:e5:23:d0:2e:95:3b:fc:69:95:f0:19:ff:
e1:92:0d:10:d3:8d:fd:8b:2d:b2:92:b8:eb:a0:e9:
5e:5f:61:ef:4d:f3:22:16:e6:60:00:31:74:e0:4e:
45:04:40:e3:f2:f7:a0:a0:e1:f4:c7:a0:f5:24:5e:
a7:a6:7b:ad:e8:77:c9:4d:ea:3b:3c:59:4a:3f:30:
fc:44:7b:a1:65:72:6c:b2:d3:a5:f6:70:96:ba:2c:
f3:c9:0f:bf:e7:21:42:21:03:59:39:1f:99:70:62:
22:14:cc:57:19:08:43:18:94:07:05:70:98:e0:a9:
6a:ae:9b:f0:c2:4d:5f:3e:ee:ef:54:aa:e3:df:e2:
6a:15:a6:09:05:01:ed:6f:24:7e:50:73:6f:cc:5f:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:E0:DC:D8:CF:16:2B:16:F3:68:26:EB:75:17:4C:50:27:00:94
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/KLPg3NjPFisW82gm63UXTFAnAJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.24.0/21
IPv6:
2a03:6180::/32
Signature Algorithm: sha256WithRSAEncryption
b0:90:b4:af:1b:d4:60:eb:a5:41:33:83:b5:13:bc:fc:83:b7:
53:3c:87:ac:c4:be:66:87:4e:da:fd:8f:d5:3a:5f:d6:d3:a7:
9e:b6:ae:b4:2d:66:ca:62:f9:a6:9a:6e:6c:22:e9:67:11:79:
5d:c7:da:74:d0:8a:e5:80:a2:8c:4e:4f:74:69:98:25:27:58:
67:71:86:58:38:0a:46:d3:58:2e:7e:e9:06:cb:36:68:ac:56:
fe:ca:35:f3:2c:55:40:b3:e9:7e:eb:3f:8a:98:bd:3c:46:20:
74:d6:1a:d1:59:77:d1:53:63:4f:6e:90:26:3a:dc:2f:de:09:
88:7f:ed:1d:ae:bd:a6:65:be:d9:c0:bc:28:0c:89:50:eb:7c:
e4:77:d7:15:a4:4c:64:0e:ea:6f:43:04:e9:40:f6:f7:dc:f6:
19:67:61:68:e2:74:bc:31:c4:45:e0:eb:6f:88:b8:8c:18:ba:
78:9b:f5:ae:ba:ed:e2:94:a8:d1:ab:00:69:46:f0:2e:0b:81:
ac:dd:c3:13:bb:08:36:69:55:64:cd:c9:03:f2:4d:30:02:17:
77:33:49:27:c2:0d:f7:6b:cf:0e:ee:65:ee:d8:db:84:af:2a:
7f:db:1b:d1:f7:bc:f7:6c:7d:58:1f:e5:8a:68:bc:94:56:a8:
5e:da:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:29 2025 by rpki-client