Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/JofOR6lF5Pl7w1avv28l1UngJHU.roa
File: JofOR6lF5Pl7w1avv28l1UngJHU.roa (raw, json)
Hash identifier: VF/WhsHNAdem4uHRTg3kqg50mKwXoQ9vpHjKiPFuNIA=
Subject key identifier: 26:87:CE:47:A9:45:E4:F9:7B:C3:56:AF:BF:6F:25:D5:49:E0:24:75
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 018465E739BBE3839B1DE4FAA54736796575
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/JofOR6lF5Pl7w1avv28l1UngJHU.roa
Signing time: Fri 11 Nov 2022 08:56:03 +0000
ROA not before: Fri 11 Nov 2022 08:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200521
IP address blocks: 212.128.96.0/22 maxlen: 22
212.128.101.0/24 maxlen: 24
212.128.102.0/24 maxlen: 24
212.128.100.0/24 maxlen: 24
212.128.105.0/24 maxlen: 24
212.128.103.0/24 maxlen: 24
212.128.104.0/24 maxlen: 24
192.187.17.0/24 maxlen: 24
192.187.16.0/24 maxlen: 24
192.187.18.0/24 maxlen: 24
192.187.19.0/24 maxlen: 24
192.187.22.0/24 maxlen: 24
192.187.23.0/24 maxlen: 24
192.187.20.0/24 maxlen: 24
192.187.21.0/24 maxlen: 24
192.148.214.0/24 maxlen: 24
192.148.215.0/24 maxlen: 24
212.128.112.0/24 maxlen: 24
212.128.110.0/24 maxlen: 24
212.128.112.0/22 maxlen: 22
212.128.111.0/24 maxlen: 24
212.128.108.0/24 maxlen: 24
212.128.109.0/24 maxlen: 24
212.128.107.0/24 maxlen: 24
212.128.106.0/24 maxlen: 24
212.128.116.0/23 maxlen: 23
212.128.114.0/24 maxlen: 24
212.128.113.0/24 maxlen: 24
212.128.118.0/24 maxlen: 24
212.128.122.0/24 maxlen: 24
212.128.123.0/24 maxlen: 24
212.128.120.0/24 maxlen: 24
212.128.121.0/24 maxlen: 24
212.128.119.0/24 maxlen: 24
212.128.125.0/24 maxlen: 24
212.128.127.0/24 maxlen: 24
212.128.126.0/24 maxlen: 24
192.148.211.0/24 maxlen: 24
192.148.212.0/24 maxlen: 24
192.148.209.0/24 maxlen: 24
192.148.210.0/24 maxlen: 24
192.148.208.0/24 maxlen: 24
192.148.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:e7:39:bb:e3:83:9b:1d:e4:fa:a5:47:36:79:65:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Nov 11 08:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2687ce47a945e4f97bc356afbf6f25d549e02475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:20:20:7b:f3:c2:01:cc:b5:b6:11:68:33:
f2:08:2f:bd:63:c4:40:1e:55:41:be:2b:7d:0f:00:
e9:6d:91:f8:26:b2:cf:ed:d1:3c:f9:d3:f0:ee:3f:
bd:33:f4:8c:0e:fb:00:4e:83:8a:d4:35:65:b7:8b:
82:bb:f3:8f:bc:f1:9b:53:75:6c:cf:70:4a:a5:33:
71:9a:75:a5:08:c5:7e:e2:43:e5:6a:8c:0e:2a:ba:
57:fc:b1:8e:69:e0:c0:db:d1:79:8e:14:ca:95:70:
b8:59:9e:bd:af:33:fb:55:3e:9e:f9:03:9f:99:bc:
dd:df:87:fb:6f:67:41:88:ce:47:45:db:0a:e2:01:
98:f2:29:aa:66:e6:71:28:f9:b6:08:ee:d6:83:85:
02:5d:e9:17:e5:6a:6a:73:df:a9:dc:d0:35:85:95:
05:5f:e5:42:fa:47:50:1e:bd:d2:86:9d:53:b4:65:
75:c8:3f:2c:5a:4f:e1:17:ca:16:e4:f6:28:f7:b9:
69:8e:0b:bb:9d:d3:e1:6f:c5:c3:af:68:81:d1:7c:
e4:bb:a8:4c:1d:c3:ea:09:0c:ee:91:d9:96:00:97:
8c:fa:f9:b2:9e:b3:2a:44:58:e3:24:6b:aa:b4:17:
6d:55:b8:e9:77:b8:06:58:ab:9b:9d:b2:28:f7:17:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:CE:47:A9:45:E4:F9:7B:C3:56:AF:BF:6F:25:D5:49:E0:24:75
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/JofOR6lF5Pl7w1avv28l1UngJHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.148.208.0/21
192.187.16.0/21
212.128.96.0-212.128.123.255
212.128.125.0-212.128.127.255
Signature Algorithm: sha256WithRSAEncryption
85:d1:7a:29:14:c3:dd:3e:71:4a:ce:54:cd:18:0c:c9:7d:b7:
85:25:7d:67:10:30:a4:be:14:29:99:c1:5a:ae:2d:2d:1d:29:
39:b0:5b:9e:f2:31:63:b2:94:88:54:f3:ab:a9:31:bb:c1:64:
d2:7c:07:74:17:2f:74:ea:01:e5:29:de:1f:03:65:48:ae:01:
ee:ab:37:cd:65:3d:e0:5c:2b:2a:b0:af:db:81:7c:ae:04:4c:
21:ce:cb:64:1b:34:9c:c1:ba:53:f8:c7:23:5c:16:7e:34:e7:
3e:f5:ed:a7:ea:94:8c:3f:4a:7a:b0:e3:ad:03:59:06:a5:c3:
ef:86:2c:fa:16:17:cc:ad:30:ea:75:6c:17:d6:5a:a8:ac:f0:
9e:9c:83:03:6a:bf:27:9f:bc:2f:00:ea:9a:cd:0e:1b:82:32:
21:7a:66:b5:4a:15:8e:63:93:2f:28:7f:84:8c:d2:91:61:ca:
00:7c:af:64:93:10:40:f6:1a:4c:3f:9f:6b:5e:56:6d:8d:93:
51:21:5b:3d:d4:bc:7d:3e:25:7f:c1:bf:db:49:58:99:d7:67:
98:b8:26:71:71:f4:e3:ed:48:f0:97:09:2e:c8:77:13:13:e6:
93:74:ea:d4:24:38:50:21:b7:fe:e6:25:b0:e3:be:60:dd:85:
4f:ba:1d:64
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYRl5zm744ObHeT6pUc2eWV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy
OGE1YmIwHhcNMjIxMTExMDg1NjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjg3Y2U0N2E5NDVlNGY5N2JjMzU2YWZiZjZmMjVkNTQ5ZTAyNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWggIHvzwgHMtbYRaDPyCC+9Y8RA
HlVBvit9DwDpbZH4JrLP7dE8+dPw7j+9M/SMDvsAToOK1DVlt4uCu/OPvPGbU3Vs
z3BKpTNxmnWlCMV+4kPlaowOKrpX/LGOaeDA29F5jhTKlXC4WZ69rzP7VT6e+QOf
mbzd34f7b2dBiM5HRdsK4gGY8imqZuZxKPm2CO7Wg4UCXekX5Wpqc9+p3NA1hZUF
X+VC+kdQHr3Shp1TtGV1yD8sWk/hF8oW5PYo97lpjgu7ndPhb8XDr2iB0Xzku6hM
HcPqCQzukdmWAJeM+vmynrMqRFjjJGuqtBdtVbjpd7gGWKubnbIo9xdggQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFCaHzkepReT5e8NWr79vJdVJ4CR1MB8GA1UdIwQY
MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt
M2U3Y2FkZDg4YzcwLzEvSm9mT1I2bEY1UGw3dzFhdnYyOGwxVW5nSkhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw
LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQDwJTQAwQD
wLsQMAwDBAXUgGADBALUgHgwDAMEANSAfQMEB9SAADANBgkqhkiG9w0BAQsFAAOC
AQEAhdF6KRTD3T5xSs5UzRgMyX23hSV9ZxAwpL4UKZnBWq4tLR0pObBbnvIxY7KU
iFTzq6kxu8Fk0nwHdBcvdOoB5SneHwNlSK4B7qs3zWU94FwrKrCv24F8rgRMIc7L
ZBs0nMG6U/jHI1wWfjTnPvXtp+qUjD9KerDjrQNZBqXD74Ys+hYXzK0w6nVsF9Za
qKzwnpyDA2q/J5+8LwDqms0OG4IyIXpmtUoVjmOTLyh/hIzSkWHKAHyvZJMQQPYa
TD+fa15WbY2TUSFbPdS8fT4lf8G/20lYmddnmLgmcXH04+1I8JcJLsh3ExPmk3Tq
1CQ4UCG3/uYlsOO+YN2FT7odZA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:09 2025 by rpki-client