Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/kuziYOGjmC_X-SJ-m4_SGyY68HE.roa
File: kuziYOGjmC_X-SJ-m4_SGyY68HE.roa (raw, json)
Hash identifier: tik0RLAzvCvUfNrFUwMJYRUY6mC5AlMOEpcw6mjdZF0=
Subject key identifier: 92:EC:E2:60:E1:A3:98:2F:D7:F9:22:7E:9B:8F:D2:1B:26:3A:F0:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 0C63817A
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/kuziYOGjmC_X-SJ-m4_SGyY68HE.roa
Signing time: Sat 01 Jan 2022 00:50:20 +0000
ROA not before: Sat 01 Jan 2022 00:50:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201401
IP address blocks: 185.168.200.0/22 maxlen: 22
2a0a:1d00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207847802 (0xc63817a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Jan 1 00:50:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92ece260e1a3982fd7f9227e9b8fd21b263af071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:7d:88:a3:66:8c:94:0d:a4:11:82:75:2f:
49:f4:9f:6c:4d:ff:c2:74:19:c1:3b:83:e3:f9:a7:
c5:a0:9f:93:d8:b3:a3:db:7a:84:f3:32:b8:0b:77:
c3:18:89:4f:71:bb:be:49:3b:c6:12:5a:f6:4a:47:
22:0c:c6:d0:9a:fe:65:61:81:a1:81:47:88:c0:ba:
8b:58:50:47:80:4b:e8:60:4f:0c:9e:f5:67:65:60:
b9:dd:45:72:7c:91:79:83:78:5e:78:31:cd:f3:4b:
ed:0a:83:ff:60:d7:d8:43:7e:79:b1:73:45:00:eb:
95:6d:6e:e8:6d:45:92:20:57:e9:69:bf:6b:9d:88:
47:31:49:31:cc:83:1e:84:60:ec:82:e6:f4:1d:38:
65:36:1b:09:20:83:01:13:7f:ad:62:68:e5:2c:b1:
e5:c6:c2:f1:10:16:a3:b4:c7:df:f7:1b:29:f9:8f:
88:43:6d:2a:13:32:76:9b:f9:75:04:dc:bb:9b:0b:
d8:d6:a5:6a:75:27:46:86:59:01:80:00:e5:f3:3f:
7b:56:6d:2d:da:0d:f3:35:f8:93:eb:9f:55:c6:f9:
29:1c:19:65:8f:68:2d:58:b5:19:8a:15:78:3c:a9:
2b:06:10:4e:38:8e:78:ac:50:a7:8f:4e:99:1a:70:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:E2:60:E1:A3:98:2F:D7:F9:22:7E:9B:8F:D2:1B:26:3A:F0:71
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/kuziYOGjmC_X-SJ-m4_SGyY68HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.200.0/22
IPv6:
2a0a:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
31:1a:e3:9e:1c:ba:06:5e:17:74:21:7b:19:ab:6e:c1:bb:aa:
40:00:7b:4f:3f:88:62:e8:74:40:0d:36:a5:ed:73:04:3d:41:
64:51:bc:23:e0:c4:38:92:29:fa:da:03:79:96:34:42:92:50:
f1:54:c7:96:ab:74:f1:2e:0a:b9:6d:88:0e:6f:90:49:69:09:
48:db:ab:62:45:a3:f5:d1:a6:91:94:f6:be:90:4a:12:4c:52:
17:a1:53:93:26:50:4d:e2:0e:e4:5a:fe:ac:52:7d:5b:61:91:
04:ab:ab:18:16:53:17:54:7c:01:5d:02:d5:51:d0:1b:94:0e:
00:ef:9a:8c:d1:67:09:b3:4c:d0:fd:65:01:f8:33:47:df:08:
88:86:c0:27:2d:83:3f:28:35:e6:c9:1b:ac:55:92:35:a3:36:
b7:a1:d7:d2:6b:33:66:00:d9:1a:4b:35:8f:0b:52:7f:56:b3:
88:08:37:2f:9a:5e:32:93:50:da:3b:78:59:6b:d2:1b:e3:0b:
69:90:ec:28:f3:bb:a8:20:fa:72:4b:98:bd:74:bb:53:b5:73:
a0:e4:de:bf:b7:0b:63:84:fd:08:98:71:55:e5:96:11:f5:2e:
f7:76:0c:48:38:6d:c6:f4:d3:cc:1a:c6:1d:46:84:1d:72:1f:
4a:33:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:18 2025 by rpki-client