Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0Pi8Bl-6KGuhQjJHnNw7ckizhkY.roa
File: 0Pi8Bl-6KGuhQjJHnNw7ckizhkY.roa (raw, json)
Hash identifier: 6+7S4+wZD9ugJ+P8U90fNwVhWDXqU961U4CCcP8DvTY=
Subject key identifier: D0:F8:BC:06:5F:BA:28:6B:A1:42:32:47:9C:DC:3B:72:48:B3:86:46
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D620C9BCF8D9815210F6144AFBC0551
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0Pi8Bl-6KGuhQjJHnNw7ckizhkY.roa
Signing time: Mon 31 Oct 2022 09:31:51 +0000
ROA not before: Mon 31 Oct 2022 09:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12714
IP address blocks: 109.106.213.0/24 maxlen: 24
109.106.214.0/24 maxlen: 24
217.19.104.0/23 maxlen: 23
178.211.1.0/24 maxlen: 24
93.91.224.0/24 maxlen: 24
95.129.92.0/23 maxlen: 23
93.91.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:62:0c:9b:cf:8d:98:15:21:0f:61:44:af:bc:05:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0f8bc065fba286ba14232479cdc3b7248b38646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:17:e6:7c:0a:d2:dd:12:06:e8:cd:5c:f0:
0f:2a:8f:dc:ff:00:ea:6e:21:6f:3a:19:49:7b:b4:
d2:98:29:39:83:6a:2d:88:d1:03:24:6a:c9:f7:98:
08:2c:71:6d:94:3f:5a:63:12:fe:e6:78:33:53:e3:
9b:d4:c0:2f:4f:bb:e3:59:cf:33:fb:b1:9e:45:73:
78:b1:ce:63:e3:bf:9d:32:22:e5:92:7a:14:b0:d9:
52:75:00:06:91:36:29:39:58:3f:20:ba:99:82:c0:
4d:78:6e:90:5d:7e:f9:a0:2b:b6:d3:96:50:a1:5f:
11:72:8e:b4:a5:60:47:61:70:d0:9e:52:8c:41:0d:
75:ce:63:7f:3f:20:d2:92:c0:9f:84:e0:93:4f:3d:
ae:9d:d6:5a:df:d0:4b:7e:f8:de:a1:fc:fd:4c:ca:
6a:71:f5:66:d0:f4:87:65:71:f7:fa:29:f5:40:a1:
cb:af:32:73:93:8c:c4:c9:41:ad:73:3f:99:42:ed:
6e:2e:30:5f:0a:bd:a7:e1:52:ae:38:17:04:1d:94:
80:bc:ca:1b:2c:60:fa:52:4e:7d:34:b3:3d:09:9c:
85:ab:73:36:0a:87:ec:d4:c4:12:55:0c:17:46:e2:
af:47:31:0c:82:ad:e2:3b:5f:71:cc:67:42:26:98:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:BC:06:5F:BA:28:6B:A1:42:32:47:9C:DC:3B:72:48:B3:86:46
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0Pi8Bl-6KGuhQjJHnNw7ckizhkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.224.0/24
93.91.232.0/23
95.129.92.0/23
109.106.213.0-109.106.214.255
178.211.1.0/24
217.19.104.0/23
Signature Algorithm: sha256WithRSAEncryption
07:95:05:17:ec:f1:bd:f7:08:e0:c6:3e:ae:e5:85:bd:b1:bf:
41:3d:04:36:70:33:de:67:cb:5f:1b:e0:b5:4a:1c:cc:a9:f0:
bd:06:bc:7c:97:fd:2f:65:23:78:f6:3c:f0:8b:8b:04:16:65:
4c:2e:78:46:c1:a3:7b:0b:00:de:05:d4:16:b9:19:c9:61:2b:
d1:71:e3:dc:19:09:f8:1c:51:e7:a2:e3:53:8a:5d:92:e9:cc:
5d:65:83:cf:c4:24:70:9e:77:70:88:f7:39:c0:67:78:27:b3:
0b:37:a7:b3:a9:92:90:77:7a:e8:65:98:41:55:79:31:77:68:
37:45:30:46:af:60:05:66:d7:25:c1:3c:08:5f:42:ec:7c:9c:
fa:40:72:16:14:bf:50:fa:c9:09:45:79:e4:9c:dc:b1:d8:3b:
44:99:39:d6:00:1f:c3:29:5d:b4:91:6a:48:2b:ba:a7:81:0f:
03:07:e8:c0:62:33:d4:63:f3:00:b7:4e:d9:21:44:b2:37:2b:
91:7f:4c:d2:1c:f2:ea:0a:69:1f:dd:90:cc:90:87:94:8e:48:
82:fa:c5:d0:6f:a5:e7:89:f3:af:db:6f:6b:fa:a7:22:0a:96:
1e:6d:cc:12:02:ae:2f:16:55:aa:c2:6a:f6:b3:05:e2:61:da:
cf:98:0d:70
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYQtYgybz42YFSEPYUSvvAVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDMxMDkzMTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGY4YmMwNjVmYmEyODZiYTE0MjMyNDc5Y2RjM2I3MjQ4YjM4NjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkisX5nwK0t0SBujNXPAPKo/c/wDq
biFvOhlJe7TSmCk5g2otiNEDJGrJ95gILHFtlD9aYxL+5ngzU+Ob1MAvT7vjWc8z
+7GeRXN4sc5j47+dMiLlknoUsNlSdQAGkTYpOVg/ILqZgsBNeG6QXX75oCu205ZQ
oV8Rco60pWBHYXDQnlKMQQ11zmN/PyDSksCfhOCTTz2undZa39BLfvjeofz9TMpq
cfVm0PSHZXH3+in1QKHLrzJzk4zEyUGtcz+ZQu1uLjBfCr2n4VKuOBcEHZSAvMob
LGD6Uk59NLM9CZyFq3M2Cofs1MQSVQwXRuKvRzEMgq3iO19xzGdCJpjKLQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFND4vAZfuihroUIyR5zcO3JIs4ZGMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvMFBpOEJsLTZLR3VoUWpKSG5Odzdja2l6aGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAXVvgAwQB
XVvoAwQBX4FcMAwDBABtatUDBABtatYDBACy0wEDBAHZE2gwDQYJKoZIhvcNAQEL
BQADggEBAAeVBRfs8b33CODGPq7lhb2xv0E9BDZwM95ny18b4LVKHMyp8L0GvHyX
/S9lI3j2PPCLiwQWZUwueEbBo3sLAN4F1Ba5GclhK9Fx49wZCfgcUeei41OKXZLp
zF1lg8/EJHCed3CI9znAZ3gnsws3p7OpkpB3euhlmEFVeTF3aDdFMEavYAVm1yXB
PAhfQux8nPpAchYUv1D6yQlFeeSc3LHYO0SZOdYAH8MpXbSRakgruqeBDwMH6MBi
M9Rj8wC3TtkhRLI3K5F/TNIc8uoKaR/dkMyQh5SOSIL6xdBvpeeJ86/bb2v6pyIK
lh5tzBICri8WVarCavazBeJh2s+YDXA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org