Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/_JrVplWuIjTqSyzPgmEIZapFqEQ.roa
File: _JrVplWuIjTqSyzPgmEIZapFqEQ.roa (raw, json)
Hash identifier: pF9esHYKr1L1or6aHETZLDg9vOfs2EPkrpihaSkrv+A=
Subject key identifier: FC:9A:D5:A6:55:AE:22:34:EA:4B:2C:CF:82:61:08:65:AA:45:A8:44
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 0A5B1968
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/_JrVplWuIjTqSyzPgmEIZapFqEQ.roa
Signing time: Thu 28 Apr 2022 05:33:56 +0000
ROA not before: Thu 28 Apr 2022 05:33:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200521
IP address blocks: 212.128.96.0/22 maxlen: 22
212.128.101.0/24 maxlen: 24
212.128.102.0/24 maxlen: 24
212.128.100.0/24 maxlen: 24
212.128.105.0/24 maxlen: 24
212.128.103.0/24 maxlen: 24
212.128.104.0/24 maxlen: 24
192.187.18.0/24 maxlen: 24
192.187.19.0/24 maxlen: 24
192.187.22.0/24 maxlen: 24
192.187.23.0/24 maxlen: 24
192.187.20.0/24 maxlen: 24
192.187.21.0/24 maxlen: 24
192.148.214.0/24 maxlen: 24
192.148.215.0/24 maxlen: 24
212.128.112.0/24 maxlen: 24
212.128.110.0/24 maxlen: 24
212.128.112.0/22 maxlen: 22
212.128.111.0/24 maxlen: 24
212.128.108.0/24 maxlen: 24
212.128.109.0/24 maxlen: 24
212.128.107.0/24 maxlen: 24
212.128.106.0/24 maxlen: 24
212.128.116.0/23 maxlen: 23
212.128.114.0/24 maxlen: 24
212.128.113.0/24 maxlen: 24
212.128.118.0/24 maxlen: 24
212.128.122.0/24 maxlen: 24
212.128.123.0/24 maxlen: 24
212.128.120.0/24 maxlen: 24
212.128.121.0/24 maxlen: 24
212.128.119.0/24 maxlen: 24
212.128.125.0/24 maxlen: 24
212.128.127.0/24 maxlen: 24
212.128.126.0/24 maxlen: 24
192.148.211.0/24 maxlen: 24
192.148.212.0/24 maxlen: 24
192.148.209.0/24 maxlen: 24
192.148.210.0/24 maxlen: 24
192.148.208.0/24 maxlen: 24
192.148.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173742440 (0xa5b1968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Apr 28 05:33:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc9ad5a655ae2234ea4b2ccf82610865aa45a844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:64:cc:b3:66:07:26:d3:c7:ef:03:f4:d0:
7d:2e:40:c9:2b:ca:f6:7a:0a:d7:fd:29:79:98:00:
f5:2a:7c:55:f1:13:76:f0:4c:d4:21:c0:b8:d6:6e:
1a:b2:23:61:15:c1:65:24:68:3c:5f:62:63:2a:c3:
27:39:ba:e1:2f:b2:b5:76:b3:d4:88:7a:64:d4:52:
a0:5e:c1:f4:d1:10:da:30:06:0c:82:c8:d0:7a:9a:
7a:d6:98:71:22:07:1e:5b:ea:b3:2c:fe:25:79:05:
a3:e6:e8:43:ca:6d:b7:2e:31:fd:ca:dd:3f:d2:fe:
6f:4f:9e:ff:bb:d9:ea:7d:7d:4f:ed:e8:3a:d7:9d:
67:f7:73:4c:67:26:18:ca:4d:5a:f0:f3:f3:a9:dc:
d6:2a:92:a1:f1:28:d8:bb:c2:74:ec:1b:cc:62:18:
1b:00:26:97:aa:e2:a9:05:67:44:16:f1:ff:5c:44:
33:e7:40:ab:f4:5d:c7:f1:d6:4e:b5:dd:05:72:95:
1f:74:0b:a3:3a:a1:56:36:05:a6:37:98:85:4e:b9:
59:2f:19:81:34:73:80:b2:9e:7a:65:d2:2b:4a:50:
98:8d:12:dc:47:0f:df:61:38:cf:54:5b:ba:6a:93:
f3:04:ca:19:d6:ba:0e:86:62:4e:27:3d:cb:09:5c:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:D5:A6:55:AE:22:34:EA:4B:2C:CF:82:61:08:65:AA:45:A8:44
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/_JrVplWuIjTqSyzPgmEIZapFqEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.148.208.0/21
192.187.18.0-192.187.23.255
212.128.96.0-212.128.123.255
212.128.125.0-212.128.127.255
Signature Algorithm: sha256WithRSAEncryption
0d:70:c4:30:ff:ba:75:f6:d0:88:2f:2d:0d:3a:5a:36:dc:2a:
4e:3b:7c:d3:a0:3d:8c:b1:6e:55:da:aa:d8:79:40:e2:d7:4c:
93:20:31:68:a7:75:72:d3:4c:50:ed:53:89:eb:c8:38:a6:c0:
91:97:3c:99:dc:63:e8:e3:db:fb:a1:03:90:55:48:ae:93:f5:
fc:41:9d:66:05:6d:c5:de:b0:0a:6a:67:25:75:29:82:6f:d1:
1e:3d:ad:80:94:19:8b:55:0c:ce:3d:1f:42:d5:bf:d3:6c:26:
1f:7b:61:ea:94:a2:e9:57:c9:c0:11:6e:45:f0:01:6f:84:4d:
25:2b:c5:28:67:9e:99:40:e0:50:72:db:bb:77:8f:b3:52:7e:
a5:5d:17:4d:90:64:f1:bf:4a:0b:5d:14:f5:d9:1e:ac:8e:96:
f2:9d:10:98:4a:20:34:54:49:eb:4f:a8:6c:91:a8:28:5b:ce:
03:c0:b2:8a:18:91:6c:5e:e0:15:44:e2:02:33:1c:27:5c:3c:
1a:a7:a3:e2:97:23:b7:ce:f8:89:ec:f9:cd:f8:37:e5:5f:44:
ed:aa:ee:df:13:92:da:82:a0:9b:44:9a:4d:59:e2:17:7d:a5:
4f:1f:44:19:fc:fc:a1:e4:cb:a6:eb:7d:77:a2:04:cc:cc:67:
9c:12:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:49 2025 by rpki-client