Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/70ZOUHuc9vd790q1itYqvAXaJZY.roa
File: 70ZOUHuc9vd790q1itYqvAXaJZY.roa (raw, json)
Hash identifier: mXbIR1ufT38+XgEsYarB3qUb9qgCIz+EAIcE+tQ1AFg=
Subject key identifier: EF:46:4E:50:7B:9C:F6:F7:7B:F7:4A:B5:8A:D6:2A:BC:05:DA:25:96
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F512DA85D4673AC59975BE80E62482
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/70ZOUHuc9vd790q1itYqvAXaJZY.roa
Signing time: Thu 08 Dec 2022 13:38:00 +0000
ROA not before: Thu 08 Dec 2022 13:38:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:12:da:85:d4:67:3a:c5:99:75:be:80:e6:24:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef464e507b9cf6f77bf74ab58ad62abc05da2596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:73:97:b6:c7:43:1f:e3:b1:e4:31:c2:fb:
bd:80:79:d2:fc:21:93:2d:c7:77:a5:ac:ee:3e:7e:
96:83:fc:0d:dd:e6:38:ff:9f:29:33:84:33:f3:f1:
ea:7a:64:b2:cb:b0:7e:49:5b:90:7d:99:59:fe:f0:
9c:3c:cb:ee:52:cf:c1:80:b5:15:30:7a:aa:9e:bc:
48:21:44:09:29:34:b2:a8:5a:85:5f:88:71:5f:4d:
ff:bb:bf:a2:ec:1c:f2:eb:5d:47:62:59:ed:3b:68:
2d:5e:c6:48:82:05:a6:0e:e9:84:f5:31:f4:9a:00:
83:a2:6a:ed:3b:79:f8:2b:83:65:01:23:71:01:81:
ee:71:14:78:40:15:c4:b7:28:4f:a1:1e:d6:ac:bc:
a2:5e:63:ca:b9:ef:f5:64:21:73:7b:3a:23:55:f3:
a7:f4:03:3a:14:61:31:54:44:7c:e9:8e:7c:c2:d5:
13:83:2a:1e:f2:4a:c9:ef:34:25:4b:39:9a:97:53:
17:1d:59:70:bb:4c:fd:27:c4:b5:61:ef:a3:87:5a:
c9:de:cc:c1:5f:51:e7:fe:70:dd:ad:ae:a0:ff:0b:
f7:1e:ff:e2:4d:4a:31:48:6d:e7:71:f1:3e:a2:be:
25:f6:41:60:7e:1d:7e:b9:1e:bd:8f:f0:5b:ea:3c:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:4E:50:7B:9C:F6:F7:7B:F7:4A:B5:8A:D6:2A:BC:05:DA:25:96
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/70ZOUHuc9vd790q1itYqvAXaJZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
35:90:5d:05:6c:4e:af:ac:76:6e:52:78:a8:d3:dd:25:1e:f5:
d5:79:02:37:9e:77:1d:29:38:89:90:35:98:c8:5a:1e:6f:ce:
d8:00:c4:19:7f:a3:74:f0:a0:c2:cf:05:63:e7:09:fb:1a:bd:
d0:dc:6f:31:dd:6b:d0:af:e2:5e:5d:ca:66:90:80:66:fb:fa:
34:f0:2a:8e:04:29:62:ad:27:1d:e8:e7:a1:27:33:5a:5f:43:
39:11:98:64:2e:a2:8e:b7:b4:a6:f6:e8:f8:59:ae:3d:8d:9f:
de:01:1e:bb:87:f5:00:5d:e4:78:f2:65:02:28:95:9e:97:3d:
58:94:37:c5:4b:9f:ba:3e:bd:a5:e2:92:7d:97:6d:ac:90:0a:
fe:25:60:70:37:14:0a:46:8e:c0:b9:59:ca:60:a4:d1:cc:8b:
a9:ab:ab:64:fa:8b:dd:8c:b6:73:97:5c:bc:48:75:cb:a6:91:
40:46:c8:d5:a6:02:9a:33:e1:1b:cb:04:62:01:c8:f6:20:0d:
29:08:ca:9c:a2:f3:af:14:7a:a2:12:68:e7:d6:58:4b:79:6d:
15:42:4f:3f:bc:c7:98:d3:ec:95:08:48:90:24:22:17:6e:28:
e6:bd:0a:c3:bf:91:66:34:a9:28:a9:d0:60:65:e9:c4:cf:8f:
d0:3f:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:09 2025 by rpki-client