Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/kctKji5MKGHBvuTbVM3vaDpn2TM.roa
File: kctKji5MKGHBvuTbVM3vaDpn2TM.roa (raw, json)
Hash identifier: vzKHC0FVyXoDgQ+MMPdWuliV8RadX/2Yl2nIIrSC4bs=
Subject key identifier: 91:CB:4A:8E:2E:4C:28:61:C1:BE:E4:DB:54:CD:EF:68:3A:67:D9:33
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 01856DCAF1671AECAF8F51AE3F9E5E2CC295
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/kctKji5MKGHBvuTbVM3vaDpn2TM.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36239
IP address blocks: 185.65.146.0/24 maxlen: 24
185.138.171.0/24 maxlen: 24
2a0b:40c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f1:67:1a:ec:af:8f:51:ae:3f:9e:5e:2c:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91cb4a8e2e4c2861c1bee4db54cdef683a67d933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:16:5f:dc:3d:cc:55:bd:da:49:3f:6b:94:
66:61:5f:67:80:60:8c:40:19:44:d5:21:e7:29:dc:
27:b8:29:05:58:09:c4:78:db:ea:3a:8a:e3:2a:c8:
51:6a:10:42:d6:11:bd:90:c2:d5:d2:97:90:22:02:
4d:2c:2a:19:9d:76:a0:dc:83:ad:3e:10:89:c0:f5:
f5:95:f5:0b:d3:4d:1f:20:55:6e:89:0b:ed:0d:d0:
19:21:18:e0:6a:0d:09:35:51:69:99:81:f6:3a:7f:
ae:b5:dd:5e:88:4d:88:ed:45:b9:a9:5c:6c:2a:f1:
3b:44:1a:40:df:4b:a9:78:86:d3:e8:ec:92:e3:44:
85:66:a1:b0:c2:aa:0a:b2:f8:63:f8:a9:00:33:b7:
c1:7e:51:aa:39:34:db:f4:3d:69:8d:62:be:ca:34:
90:1b:79:34:43:0c:89:39:a7:a3:74:cb:11:dc:de:
74:67:1b:a6:98:8a:08:64:50:c9:8b:1f:63:75:2e:
a7:c6:51:99:4b:1b:fc:0f:6e:7f:02:86:77:e3:79:
34:aa:08:c3:e6:b6:7f:79:ca:69:72:d3:e2:a7:c5:
d1:6f:fb:97:f4:42:ce:10:5a:c6:a9:b6:42:23:d2:
71:7e:32:da:db:5a:48:02:60:f5:90:52:15:70:37:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:4A:8E:2E:4C:28:61:C1:BE:E4:DB:54:CD:EF:68:3A:67:D9:33
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/kctKji5MKGHBvuTbVM3vaDpn2TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.146.0/24
185.138.171.0/24
IPv6:
2a0b:40c1::/48
Signature Algorithm: sha256WithRSAEncryption
89:04:24:52:05:e8:d2:31:eb:80:20:48:6c:a3:09:c4:80:93:
c6:84:91:b0:7f:30:99:6d:6d:b8:e5:e9:b1:94:d4:50:eb:a5:
8e:0b:5b:60:be:f7:e5:31:a5:9f:40:83:f7:3f:4a:35:49:14:
13:cb:ff:9b:0b:9c:b9:a2:2c:06:a2:ce:91:77:9a:03:3b:1f:
bc:d9:d7:c7:e6:44:61:86:ff:35:6a:db:1f:cc:c4:16:a6:00:
53:37:df:a7:4d:e0:fe:68:31:aa:35:a8:ad:36:5f:e4:4e:d9:
8e:37:6b:e0:97:65:3b:5d:36:b9:63:72:7c:be:76:e2:e4:52:
a4:5c:69:fb:73:ab:bb:3c:13:df:22:0d:d1:2f:78:34:6a:a5:
63:6a:cf:a7:a1:b3:fd:db:97:60:c2:35:93:49:88:44:a2:bf:
6d:aa:a4:42:2d:e8:60:97:4b:f3:e4:a9:3b:bc:17:e3:c7:9e:
a3:0c:c0:cc:ad:f2:d9:5f:fb:4c:12:4e:88:bc:b9:75:26:52:
5d:0e:00:3e:cc:b7:b2:70:68:76:bb:30:0b:07:f9:72:4e:f0:
aa:6c:37:65:d0:ad:1f:82:f1:4b:5d:10:7f:f9:27:13:6d:86:
5d:b7:96:77:f5:d2:11:42:90:ee:40:84:26:04:a1:77:6b:a1:
27:70:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:07:11 2025 by rpki-client