Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/kpNfTTIZZWVPNq2bFua-8rNx1G4.roa
File: kpNfTTIZZWVPNq2bFua-8rNx1G4.roa (raw, json)
Hash identifier: ECgp6En2KegEYTgimSqZRmRDdh2+aEALbGCa2YNMzlk=
Subject key identifier: 92:93:5F:4D:32:19:65:65:4F:36:AD:9B:16:E6:BE:F2:B3:71:D4:6E
Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e
Certificate serial: 5B9161
Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/kpNfTTIZZWVPNq2bFua-8rNx1G4.roa
Signing time: Sat 01 Jan 2022 02:53:59 +0000
ROA not before: Sat 01 Jan 2022 02:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50661
IP address blocks: 192.166.32.0/22 maxlen: 22
109.197.96.0/21 maxlen: 22
109.207.144.0/20 maxlen: 21
185.167.32.0/22 maxlen: 23
195.191.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6000993 (0x5b9161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e
Validity
Not Before: Jan 1 02:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92935f4d321965654f36ad9b16e6bef2b371d46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:ae:17:ae:be:1d:9f:2f:28:57:7a:99:db:
a4:29:b0:39:3b:9e:6d:9a:2f:53:f0:7d:cb:21:0d:
42:dc:08:76:8d:2e:aa:62:04:5b:99:55:2a:96:7c:
cb:e8:09:eb:45:5d:d4:ca:24:a7:7d:2f:de:49:30:
af:26:10:d3:59:0a:84:7a:3d:a2:e9:79:89:63:db:
fd:aa:c8:c5:3a:28:bc:c0:4f:7f:36:f4:12:61:bc:
91:dc:5e:ed:06:a0:14:9a:7f:2e:2a:30:f6:11:eb:
c7:c5:22:fe:af:ab:a2:fd:37:db:4b:dc:0b:7c:53:
b0:8d:9f:2a:10:3c:6a:66:0f:3f:a6:bc:41:55:e5:
b4:21:90:8f:78:81:1a:c3:0a:09:85:aa:80:dc:be:
18:22:45:e3:de:31:44:b1:19:b3:9b:08:49:56:fc:
c6:15:e8:a8:55:b8:e2:81:1d:fd:d9:50:7d:70:57:
41:cc:3b:04:05:78:de:d9:d7:cc:bd:31:84:7e:ff:
cb:c5:40:90:2d:01:4f:a8:33:56:e2:73:6e:9c:60:
77:2f:ce:88:f6:23:ca:ba:51:15:a8:72:bb:6f:79:
90:2f:cb:47:bc:01:6a:10:aa:d8:b2:31:03:b3:e5:
86:bb:45:93:4a:d9:9e:c1:9b:e6:8e:0c:28:60:1e:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:5F:4D:32:19:65:65:4F:36:AD:9B:16:E6:BE:F2:B3:71:D4:6E
X509v3 Authority Key Identifier:
keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/kpNfTTIZZWVPNq2bFua-8rNx1G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.96.0/21
109.207.144.0/20
185.167.32.0/22
192.166.32.0/22
195.191.180.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:2a:6a:e1:b6:14:c9:00:5d:8c:ad:26:31:4e:b0:8c:77:8e:
bf:09:a8:a7:d6:65:c2:8f:46:98:a6:4d:65:d1:da:c1:95:15:
e8:cd:04:70:59:ee:d3:df:2c:f8:69:d8:fd:a9:5a:9d:b8:b5:
9b:5a:98:3f:c3:3e:6d:4a:89:6d:72:84:5c:cc:a3:53:06:49:
5a:12:6c:e3:db:3b:6e:7d:10:39:1d:2f:a3:0c:0c:ae:a9:ac:
83:68:37:bb:74:90:02:27:97:ed:b5:69:65:b2:94:d3:05:d5:
50:ad:c5:6d:75:a2:9d:6b:b3:d3:8e:cd:53:96:56:61:05:39:
d0:33:1e:99:1a:c1:f6:25:fb:d1:a6:5b:73:47:91:91:02:16:
5a:03:7a:92:94:a4:3f:e3:7b:46:62:08:f0:c3:00:54:a9:f7:
4e:37:97:c1:27:30:11:a0:00:81:c8:e0:ee:82:81:30:e5:16:
82:20:0f:04:a8:70:13:d1:03:03:5f:7d:48:15:97:f6:85:b3:
a9:7b:5e:40:34:56:1e:76:f8:df:c0:2b:4d:2d:ef:4c:9a:f4:
6c:d8:8e:e6:7f:cd:9a:2d:e5:13:ac:b3:c2:0b:a9:9b:fe:5c:
17:5b:a2:d5:ee:d1:16:0e:0b:5c:41:1f:bf:ce:09:a4:f2:31:
5c:f1:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:17 2025 by rpki-client