Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/TRJfeyzBOYbLTMHIkYLgaMzylvA.roa
File: TRJfeyzBOYbLTMHIkYLgaMzylvA.roa (raw, json)
Hash identifier: PKdO1eIAfvCNIMCtblqVqLmVXAzkDFBf3KwUe+DnYk4=
Subject key identifier: 4D:12:5F:7B:2C:C1:39:86:CB:4C:C1:C8:91:82:E0:68:CC:F2:96:F0
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 096E0152
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/TRJfeyzBOYbLTMHIkYLgaMzylvA.roa
Signing time: Wed 12 Jan 2022 08:17:06 +0000
ROA not before: Wed 12 Jan 2022 08:17:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200521
IP address blocks: 212.128.96.0/22 maxlen: 22
212.128.101.0/24 maxlen: 24
212.128.102.0/24 maxlen: 24
212.128.100.0/24 maxlen: 24
212.128.105.0/24 maxlen: 24
212.128.103.0/24 maxlen: 24
212.128.104.0/24 maxlen: 24
192.187.18.0/24 maxlen: 24
192.187.19.0/24 maxlen: 24
192.187.22.0/24 maxlen: 24
192.187.23.0/24 maxlen: 24
192.187.20.0/24 maxlen: 24
192.187.21.0/24 maxlen: 24
192.148.214.0/24 maxlen: 24
192.148.215.0/24 maxlen: 24
212.128.110.0/24 maxlen: 24
212.128.112.0/22 maxlen: 22
212.128.111.0/24 maxlen: 24
212.128.108.0/24 maxlen: 24
212.128.109.0/24 maxlen: 24
212.128.107.0/24 maxlen: 24
212.128.106.0/24 maxlen: 24
212.128.116.0/23 maxlen: 23
212.128.118.0/24 maxlen: 24
212.128.122.0/24 maxlen: 24
212.128.123.0/24 maxlen: 24
212.128.120.0/24 maxlen: 24
212.128.121.0/24 maxlen: 24
212.128.119.0/24 maxlen: 24
212.128.125.0/24 maxlen: 24
212.128.127.0/24 maxlen: 24
212.128.126.0/24 maxlen: 24
192.148.211.0/24 maxlen: 24
192.148.212.0/24 maxlen: 24
192.148.209.0/24 maxlen: 24
192.148.210.0/24 maxlen: 24
192.148.208.0/24 maxlen: 24
192.148.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158204242 (0x96e0152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Jan 12 08:17:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d125f7b2cc13986cb4cc1c89182e068ccf296f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:b6:69:aa:99:e8:99:65:23:af:6f:60:51:
23:e8:0e:7e:ff:07:db:af:fb:bb:31:69:9d:a9:9f:
91:6c:18:54:0f:c3:c6:4f:c6:00:d4:61:fc:76:ba:
1b:23:b5:0f:5e:1d:20:aa:93:32:74:7f:76:9e:fb:
4e:de:ea:e9:4b:14:47:c3:b4:d7:1c:90:f9:df:b8:
e3:62:7e:dc:21:1d:f2:fb:27:bf:09:e2:4a:f2:ee:
a1:a7:85:9b:ac:52:0e:88:50:6d:18:5e:5e:34:aa:
19:67:ff:6a:2f:0a:c5:ec:e2:5a:2d:97:68:88:bd:
34:d7:bd:8c:21:b4:53:12:c4:65:f4:a0:f4:33:c1:
00:4d:6f:56:6c:fe:97:ec:e1:81:53:c4:18:ac:aa:
05:d1:38:41:cc:3e:7e:ee:a8:ff:25:66:d0:ce:a3:
82:bc:d9:b7:3b:d7:d7:02:c3:69:76:2a:bd:c0:52:
06:8d:26:0d:12:e6:dd:62:57:7c:37:39:a9:25:d9:
1f:5c:fa:24:1b:2d:a5:49:a6:92:c6:74:dc:a4:36:
d4:d7:6e:89:f0:23:a0:b2:64:1f:04:4f:ef:f9:ad:
80:d6:90:1e:7b:8e:cc:59:ba:9d:8b:58:e0:39:de:
df:f0:38:14:c3:29:4d:21:8d:a2:c3:de:31:52:36:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:5F:7B:2C:C1:39:86:CB:4C:C1:C8:91:82:E0:68:CC:F2:96:F0
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/TRJfeyzBOYbLTMHIkYLgaMzylvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.148.208.0/21
192.187.18.0-192.187.23.255
212.128.96.0-212.128.123.255
212.128.125.0-212.128.127.255
Signature Algorithm: sha256WithRSAEncryption
68:5e:f3:b7:a2:2e:b7:f3:89:95:2e:b7:e0:6d:0a:0f:54:be:
7f:13:af:9c:e0:97:07:17:61:97:76:ea:95:64:10:48:49:7e:
92:05:f8:8b:47:d1:f2:3f:78:cb:19:44:0f:a4:7e:f1:9c:b7:
33:90:f3:fa:89:bb:e6:07:00:ff:ec:26:dc:99:cb:8d:61:c7:
0e:c4:34:83:fc:55:c2:01:d2:92:19:32:3a:e4:25:37:03:64:
8c:0d:32:10:f2:45:e3:ef:ec:51:d1:85:3f:be:95:15:d2:6f:
7c:0d:f3:2a:84:58:b3:8c:d9:29:ac:c5:82:58:6f:82:43:c1:
04:3c:b6:b6:e0:37:90:0e:98:b3:06:0d:44:0d:0c:b2:9c:fa:
fc:e7:2a:3b:c6:23:73:71:c0:65:08:f2:6f:ce:c2:4e:25:b6:
d6:f3:a6:1a:96:69:1c:97:40:4a:75:5d:ff:c8:e5:4c:61:41:
75:4a:b5:3d:cd:89:ec:ca:01:1e:da:f6:ad:55:6b:b6:b5:db:
de:7c:38:a3:10:2b:db:28:73:73:26:e2:f0:26:f4:2b:a9:a8:
63:1c:c2:2f:8d:3b:2d:6a:fa:0b:c6:6d:79:96:92:c7:9c:2b:
08:59:70:31:53:7e:ea:70:ba:f7:bb:4e:95:e6:7f:db:3d:36:
16:5d:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:06 2024 by rpki-client on console-ams.rpki-client.org