Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KyOveOjqPTlw8gq2hdA0CxOTs1c.roa
File: KyOveOjqPTlw8gq2hdA0CxOTs1c.roa (raw, json)
Hash identifier: KNY4ceCPiB764piTVFyrgDsKAcqcBCfF/ght2KS5HXA=
Subject key identifier: 2B:23:AF:78:E8:EA:3D:39:70:F2:0A:B6:85:D0:34:0B:13:93:B3:57
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A5F3022BDD455B37ED956F79F145BBBB4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KyOveOjqPTlw8gq2hdA0CxOTs1c.roa
Signing time: Mon 04 Sep 2023 07:55:04 +0000
ROA not before: Mon 04 Sep 2023 07:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 2.56.172.0/22 maxlen: 24
95.214.248.0/22 maxlen: 24
2.56.176.0/22 maxlen: 24
2.56.116.0/22 maxlen: 24
2.56.124.0/22 maxlen: 24
2.56.120.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
45.15.124.0/22 maxlen: 24
45.15.128.0/22 maxlen: 24
45.15.144.0/22 maxlen: 24
45.15.140.0/22 maxlen: 24
45.9.12.0/22 maxlen: 24
45.9.16.0/22 maxlen: 24
45.12.112.0/22 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.128.0/22 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.148.0/22 maxlen: 24
45.15.152.0/22 maxlen: 24
45.15.164.0/22 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.168.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:30:22:bd:d4:55:b3:7e:d9:56:f7:9f:14:5b:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 07:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b23af78e8ea3d3970f20ab685d0340b1393b357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:4f:27:12:3c:59:43:f1:43:96:74:f3:66:
62:9d:16:72:65:9d:82:7d:3b:95:a4:f7:8b:d0:0d:
95:03:c6:bc:98:80:ee:d8:7c:5f:90:82:a6:f9:74:
29:49:5e:8e:97:c1:fc:c3:8f:37:b2:98:c0:79:e5:
e3:f5:50:95:78:ee:d8:02:33:30:e3:7c:0c:7c:ad:
a5:3f:27:8e:e8:e8:88:dc:c0:d5:5e:59:70:99:35:
10:57:19:82:fb:8c:80:f0:c9:15:c0:0a:7a:e7:c5:
1f:67:7b:6d:ca:df:af:65:9d:d7:16:bd:85:eb:32:
68:4f:61:32:c5:af:05:18:ad:3b:03:1e:66:6c:e0:
56:82:2c:50:91:70:52:c2:7b:6d:36:da:3f:59:28:
35:8a:cd:15:a1:51:05:46:27:91:fe:13:df:e5:ec:
78:20:9d:a1:a3:4a:b2:05:29:9e:8b:a8:79:fd:e9:
48:5a:44:6e:bf:bd:12:2a:49:d2:8d:e0:b9:11:45:
47:aa:48:41:02:3d:f7:a4:bc:9b:ab:c8:b3:5a:62:
0e:fc:6c:36:1e:bb:7a:d1:6c:1a:90:fb:10:8f:78:
95:75:90:a5:fe:41:d6:be:f6:87:1f:84:da:9b:ca:
48:eb:db:9c:e7:b7:fa:f4:91:28:f4:f4:72:33:d2:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:23:AF:78:E8:EA:3D:39:70:F2:0A:B6:85:D0:34:0B:13:93:B3:57
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KyOveOjqPTlw8gq2hdA0CxOTs1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.116.0-2.56.127.255
2.56.172.0-2.56.179.255
31.12.92.0/22
45.9.12.0-45.9.19.255
45.12.108.0-45.12.115.255
45.12.128.0-45.12.151.255
45.15.124.0-45.15.131.255
45.15.140.0-45.15.147.255
45.15.152.0/22
45.15.160.0-45.15.171.255
92.119.40.0/22
95.214.248.0/22
Signature Algorithm: sha256WithRSAEncryption
12:c7:56:a0:1f:e6:c3:b8:57:81:20:98:7f:f1:d6:0e:bb:37:
45:ec:d2:f6:1a:24:09:2f:61:32:ba:86:bc:ee:40:b1:4f:2f:
22:b0:a2:f6:dc:45:b3:aa:ab:ed:b1:ea:c4:57:8a:76:9c:21:
46:e6:af:d5:4f:7e:75:92:dc:84:92:b6:6a:9d:59:ad:fd:84:
34:b0:8b:6a:6f:da:fe:1e:76:01:b9:00:80:8c:0a:35:54:92:
bc:f1:85:fb:81:e2:66:cf:9f:53:7e:5e:25:be:30:49:e7:bd:
83:d6:da:b4:f7:8f:c8:ac:39:16:12:7a:79:01:e9:d2:d0:6b:
b0:65:84:e8:78:2f:59:0a:9f:a2:61:01:df:62:43:da:98:fd:
b1:03:6c:78:6d:48:15:b0:61:a8:06:33:42:3f:1a:bf:b0:d9:
82:df:86:bb:20:3c:43:36:d6:45:3a:e3:84:c4:a0:45:d2:6e:
43:25:d7:7f:0a:9b:2b:78:21:2d:ec:45:88:7a:d6:f5:c7:08:
d0:29:bb:31:4f:d3:7f:80:1d:fe:4d:7f:8d:4b:77:4e:de:0a:
4d:f0:97:d1:32:5c:09:e4:43:ee:30:6d:66:fd:23:23:98:f5:
e8:f1:12:16:95:d9:c9:3a:1e:c5:e9:a7:eb:1f:9a:b0:de:7d:
e9:f3:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:39:02 2025 by rpki-client