Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2oC8s_MpieT0cDfLKJxsD_Rn5r0.roa
File: 2oC8s_MpieT0cDfLKJxsD_Rn5r0.roa (raw, json)
Hash identifier: DsgMf2OEDU52VF0Upys0+z0/rwDTCAYlT3KyP6x0xog=
Subject key identifier: DA:80:BC:B3:F3:29:89:E4:F4:70:37:CB:28:9C:6C:0F:F4:67:E6:BD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D676CA96C7DADD536CD2E8C46ECB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2oC8s_MpieT0cDfLKJxsD_Rn5r0.roa
Signing time: Thu 08 Dec 2022 15:04:02 +0000
ROA not before: Thu 08 Dec 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/21 maxlen: 21
109.74.112.0/20 maxlen: 20
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d6:76:ca:96:c7:da:dd:53:6c:d2:e8:c4:6e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da80bcb3f32989e4f47037cb289c6c0ff467e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:ad:8b:42:99:0f:c1:69:dc:38:03:52:5a:
c2:1e:72:3d:cc:6d:f2:52:bc:11:a6:a8:55:63:5f:
2e:1b:6e:e4:07:f5:f5:b1:41:42:51:6b:17:a2:d2:
3e:1b:a7:ba:e9:6b:6c:e7:0a:37:4d:5e:9c:15:72:
a3:77:70:72:14:65:bd:91:6f:dd:c1:11:a6:4e:21:
d8:ba:8f:8a:5d:dd:75:82:97:6c:cf:48:dd:ae:86:
05:21:54:f2:66:14:85:66:0b:80:a6:90:7b:7a:e4:
b2:a8:db:08:e7:dc:7f:05:7a:0c:50:9f:f1:53:ed:
93:93:71:55:38:f8:7a:18:04:e5:16:00:4a:df:dd:
69:de:d3:b7:b7:10:df:b3:59:88:90:ff:b3:33:76:
47:8b:e9:ac:5c:c3:8c:72:1c:6a:cf:81:4f:07:72:
a5:07:db:ea:21:da:03:37:07:00:30:55:33:a4:5c:
94:cc:e6:2a:ea:63:3e:51:b2:90:e1:29:23:80:6e:
47:42:d9:2d:04:33:f8:84:6f:d3:4c:88:64:c8:6b:
32:43:e1:1a:08:7b:7d:d9:87:b3:93:1b:06:82:6e:
c4:4b:ce:a8:88:da:ab:89:27:e4:f7:8f:42:c1:a5:
64:98:a8:64:c4:5f:e3:e2:68:dd:0f:f1:6d:c5:f9:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:BC:B3:F3:29:89:E4:F4:70:37:CB:28:9C:6C:0F:F4:67:E6:BD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2oC8s_MpieT0cDfLKJxsD_Rn5r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:66:5c:2d:34:6b:34:f7:d0:58:c7:a4:e4:16:31:5a:cc:d0:
77:7e:bd:37:30:c0:9f:c4:eb:5e:a2:7d:4f:49:68:06:76:79:
6f:e0:b5:ed:5a:29:7e:48:e7:85:1b:54:57:dc:35:73:f3:b7:
c6:d8:84:fa:74:21:db:29:74:a9:ad:02:e8:ff:a2:27:30:68:
88:ae:2b:e9:97:0f:ad:c1:16:01:b3:98:8b:8f:63:c3:73:41:
e2:15:e7:b4:c0:51:50:89:3c:84:28:04:44:c0:20:33:fc:43:
88:a8:99:5c:9b:97:9b:1b:f4:4b:96:7a:ed:ab:8c:55:eb:da:
f0:a8:f3:47:e2:31:99:34:65:54:a4:34:7a:1a:be:d1:9a:47:
85:b0:ed:90:c8:93:d5:e8:7e:b2:3a:2e:da:ee:ef:fc:cb:68:
42:de:bc:0d:bf:90:b6:e8:1f:48:fc:e5:76:f5:89:a6:84:74:
12:c9:7f:c1:49:ce:99:dd:79:f7:86:87:e1:6c:3f:eb:7b:20:
01:16:00:24:43:30:78:45:8b:40:74:f8:ca:7b:a2:e4:75:e8:
b5:30:62:fb:be:e8:c1:8c:26:ce:db:c3:27:c4:83:30:6f:5c:
0c:b0:a1:65:71:e1:d8:0c:88:55:54:e6:84:fc:5e:58:a1:90:
87:44:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org