Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0_Pj7E7Kj4k_XMtt9A7pbctJMAI.roa
File: 0_Pj7E7Kj4k_XMtt9A7pbctJMAI.roa (raw, json)
Hash identifier: heseBbshwrakXHrB8BKwkggMiz0zV1jBaYl8XyB0Vkc=
Subject key identifier: D3:F3:E3:EC:4E:CA:8F:89:3F:5C:CB:6D:F4:0E:E9:6D:CB:49:30:02
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE387EE1B4C1D46BA406F208413399
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0_Pj7E7Kj4k_XMtt9A7pbctJMAI.roa
Signing time: Mon 12 Dec 2022 09:33:01 +0000
ROA not before: Mon 12 Dec 2022 09:33:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:38:7e:e1:b4:c1:d4:6b:a4:06:f2:08:41:33:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f3e3ec4eca8f893f5ccb6df40ee96dcb493002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:ef:5e:d9:88:aa:05:16:aa:f1:95:11:8b:
f6:a5:28:5a:05:5e:c6:83:57:16:e0:67:9a:87:bb:
5e:d6:e6:61:68:4c:52:de:9d:52:2f:20:a2:0a:3e:
8b:ba:9d:c2:95:02:c5:6d:d2:5a:f3:fe:c0:02:f8:
a8:68:21:54:16:22:6c:d9:8b:f4:3a:28:99:b6:13:
d0:59:73:a1:45:6c:dd:3d:5c:6d:56:2a:e9:df:31:
c2:06:dd:81:d8:b7:17:00:74:00:a1:d0:01:93:f9:
79:02:b8:57:39:0e:f4:83:61:8e:de:83:d4:64:4f:
4e:72:d0:d3:66:84:39:48:eb:69:f9:bf:54:1c:5f:
f6:68:a9:2f:ed:6b:f4:c2:b2:08:98:0c:c4:50:c9:
72:08:2c:d8:69:8b:c9:33:c2:c3:9e:ca:83:89:96:
ac:18:c9:41:8b:b9:98:fe:b2:b6:00:84:60:7f:2c:
35:f2:8f:d9:37:5e:38:70:3b:4a:a3:08:d2:ca:e2:
8b:53:e3:e6:e6:8b:6b:65:fc:68:09:fe:ef:5f:cc:
99:96:79:e7:6a:f6:14:dd:4d:c4:65:b9:56:16:7a:
cc:28:bd:e7:f7:bf:70:09:0d:4b:8e:3f:09:27:b6:
20:45:32:32:66:c6:a3:0e:1c:44:00:cc:56:0e:66:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:E3:EC:4E:CA:8F:89:3F:5C:CB:6D:F4:0E:E9:6D:CB:49:30:02
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0_Pj7E7Kj4k_XMtt9A7pbctJMAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:8d:fe:53:69:60:9f:f6:a1:d0:dd:93:59:f2:71:9c:7c:94:
3b:51:4b:94:75:d7:1e:a8:60:08:48:24:81:19:9b:ee:e5:90:
4b:f6:2e:9f:0a:f5:8c:47:ed:96:2f:e2:b0:8e:4c:cf:81:bb:
95:59:6e:28:82:d2:9f:25:cb:78:18:45:3f:97:4b:dd:60:83:
cc:83:e5:f1:29:76:b8:39:0c:8f:9c:50:81:22:01:79:41:85:
a2:68:e7:7d:33:f3:17:64:9c:5a:d2:32:61:37:ea:9f:ac:9a:
f8:30:ec:85:aa:3e:3f:b5:a5:2f:1d:d8:0a:19:68:e5:a9:88:
5e:ac:9e:96:c0:22:80:bf:96:4d:76:f4:90:7e:c6:b3:d8:60:
96:2c:a5:4d:1a:bf:52:12:71:ac:ef:df:5d:d3:8b:58:57:39:
3c:6f:58:b1:e8:f7:3a:7c:f2:08:b6:9d:c5:ca:aa:39:74:c0:
e5:b7:ca:8f:16:0c:ca:aa:64:fe:b9:bb:c3:f2:85:c2:ae:bb:
8f:b1:fa:d9:9a:bb:6a:af:30:84:1d:6a:60:9c:10:ec:65:8a:
0b:df:10:2c:9e:9b:8d:04:a6:57:76:27:23:f0:a8:a6:db:8a:
18:e9:d1:49:92:94:cc:36:41:03:f7:59:83:57:f3:38:5c:03:
e4:8b:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:49 2025 by rpki-client