Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5tKl_ED8nTfko3ORCKpKDM9MMAw.roa
File: 5tKl_ED8nTfko3ORCKpKDM9MMAw.roa (raw, json)
Hash identifier: eEgRYQ6SIWFqfa98y9lcpciSU2z/wDh5AZSzfsY4iZ8=
Subject key identifier: E6:D2:A5:FC:40:FC:9D:37:E4:A3:73:91:08:AA:4A:0C:CF:4C:30:0C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2B89979C5EB93C4511AA2B6997A1B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5tKl_ED8nTfko3ORCKpKDM9MMAw.roa
Signing time: Thu 08 Dec 2022 12:43:01 +0000
ROA not before: Thu 08 Dec 2022 12:43:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
195.230.64.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:b8:99:79:c5:eb:93:c4:51:1a:a2:b6:99:7a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6d2a5fc40fc9d37e4a3739108aa4a0ccf4c300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:6b:62:72:fd:e9:78:d2:15:6b:b1:b4:b4:
16:3b:15:14:3d:21:b4:c0:fd:f4:b1:52:37:7d:d9:
3c:7d:8a:05:76:75:29:e0:5d:ce:89:42:3a:7f:5c:
d8:1b:03:99:21:10:66:42:0b:6d:ef:5f:a9:12:4b:
1c:04:55:41:26:bf:ca:fd:b1:e8:e9:77:68:fc:8a:
69:d7:bc:c5:f8:c7:2e:c4:e4:14:72:e4:66:38:51:
9e:38:40:54:d5:0e:f2:fe:67:2f:f0:e3:51:20:fa:
28:7b:d7:80:b3:31:6d:74:2b:ef:aa:c0:c8:99:82:
4e:04:e8:bd:dd:5f:f8:5f:9f:b8:09:cc:5f:84:79:
e1:9e:bb:e5:e5:10:bf:b7:dd:5c:93:63:8f:68:1d:
8f:f8:8c:51:47:6a:ac:35:e6:d3:73:3f:cf:82:d9:
1e:42:28:58:18:33:d6:d2:9c:4e:9b:d3:9e:6d:f6:
62:a4:32:29:87:da:9d:57:59:d9:cd:e9:78:8e:3a:
24:ef:be:15:d3:95:c8:02:7f:f1:a0:22:dc:8c:c7:
fd:cf:67:d7:59:39:a1:a9:7a:7b:80:e4:45:af:88:
68:29:60:fd:39:28:eb:1c:4b:b2:02:8e:2a:21:2a:
58:76:9e:9a:8d:ed:17:71:9e:08:f3:89:e0:92:3f:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:A5:FC:40:FC:9D:37:E4:A3:73:91:08:AA:4A:0C:CF:4C:30:0C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5tKl_ED8nTfko3ORCKpKDM9MMAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:9a:7d:d1:6e:ea:bf:02:84:82:69:4d:45:b4:71:3a:75:8f:
f9:56:3f:a0:9d:08:98:da:53:d4:da:6c:45:a6:d8:b1:2d:b5:
ee:26:e8:23:d6:5f:a6:9a:30:7c:1f:4c:81:13:23:43:31:c7:
b3:08:db:82:5f:19:e6:a8:e0:c4:a8:d3:68:57:33:58:b8:af:
f7:00:bc:99:74:58:5a:fd:1d:72:99:37:cb:41:19:31:4c:b1:
dc:12:4e:6b:00:7b:78:de:e7:1a:00:5d:12:4b:78:d8:2d:df:
44:bd:3d:42:7f:ef:97:77:4f:16:2a:a8:e1:a8:ef:5e:fc:8e:
ac:63:40:40:28:b1:a7:81:a7:10:6e:1a:8e:47:7b:22:1b:5c:
db:95:b4:c3:e3:33:f5:ce:37:d0:26:d6:15:51:11:3d:a4:a3:
73:cf:e6:17:38:05:87:6d:e5:8a:d0:b1:62:7f:bd:6c:47:87:
0b:00:51:20:e9:16:e1:e7:dd:73:e1:dd:d8:87:13:0d:ca:95:
af:14:78:e4:f9:95:3d:80:56:19:11:64:e0:22:57:aa:de:a4:
69:98:c7:b4:69:e3:8c:57:c2:f6:1c:f9:59:fc:fb:c9:9d:5c:
7b:30:87:1a:37:33:84:1e:1f:55:81:43:0b:9b:cc:11:ee:32:
19:35:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:31 2025 by rpki-client