Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7JPB8HQiPTfKK9o3hTsmV1boQYk.roa
File: 7JPB8HQiPTfKK9o3hTsmV1boQYk.roa (raw, json)
Hash identifier: vYsniqfXlEh090LTuwr7VvAnRGQBacLh8v4tDncYvMs=
Subject key identifier: EC:93:C1:F0:74:22:3D:37:CA:2B:DA:37:85:3B:26:57:56:E8:41:89
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A4256E7F221B1C570B20A3ED438F1C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7JPB8HQiPTfKK9o3hTsmV1boQYk.roa
Signing time: Mon 12 Dec 2022 09:22:01 +0000
ROA not before: Mon 12 Dec 2022 09:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24767
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:25:6e:7f:22:1b:1c:57:0b:20:a3:ed:43:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec93c1f074223d37ca2bda37853b265756e84189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:65:3f:99:d7:38:f9:0f:10:6b:24:59:7e:
9b:4b:e7:73:fc:47:c1:2d:50:99:8e:a4:6a:fa:e0:
f2:e7:88:42:52:c1:88:b9:9a:70:ca:85:39:0a:89:
ed:fb:59:c6:1f:73:4f:f1:a3:74:b6:a3:f5:18:52:
33:72:21:f2:55:a0:ae:24:82:27:11:6f:c8:11:b6:
15:a8:88:75:3f:27:81:5e:c4:99:a5:0e:54:33:95:
ef:87:fa:44:66:82:c9:43:09:74:67:e2:cc:ce:cb:
8f:d2:fd:13:fb:2d:9c:d8:b6:86:9e:1c:21:d1:f7:
8e:c5:3b:78:a1:53:15:7f:8f:c6:28:48:69:64:21:
c2:6f:12:8b:ba:19:da:24:dc:5a:10:13:d2:85:59:
7b:fa:3a:df:de:b9:28:1b:62:bf:dd:c2:c0:26:75:
3b:31:08:f1:f0:83:e5:c8:68:df:3b:b9:7b:bf:ed:
c3:29:c0:85:39:9a:c6:2a:54:24:82:41:9a:71:96:
b7:95:eb:c4:1a:50:68:df:70:63:e7:3d:28:0d:7b:
c4:6f:db:b7:b0:ca:c5:e6:4e:72:a2:40:08:af:c3:
95:fa:08:2e:8c:f5:a6:d3:b9:c9:92:17:b6:12:1c:
4e:9e:d8:6c:a0:84:18:76:bf:df:4c:fc:ad:29:ca:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:C1:F0:74:22:3D:37:CA:2B:DA:37:85:3B:26:57:56:E8:41:89
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7JPB8HQiPTfKK9o3hTsmV1boQYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:51:fc:fa:7d:bf:f1:ce:f5:7f:78:87:ed:14:9b:3d:6c:e6:
1a:85:49:f3:7b:0e:65:36:dd:15:f7:de:55:b4:28:cc:53:9f:
c8:a4:ea:4b:70:ce:27:7b:78:8a:e0:e3:74:77:63:00:de:dc:
2e:67:b6:0e:44:d7:fc:8e:ca:bf:e0:72:3f:fc:7d:1f:38:f0:
f5:0a:54:fa:98:99:23:2f:22:bc:26:96:e1:3f:35:20:f5:55:
ec:69:6b:92:04:18:e7:70:31:2e:05:31:ee:d2:df:34:36:c1:
ff:38:87:c7:b2:04:5a:80:6e:d5:a7:17:50:f9:6a:71:73:9c:
1c:4b:ce:01:f9:29:83:94:04:de:5e:79:67:9e:5a:fc:b6:80:
77:e5:ad:5c:07:35:cd:b1:96:78:39:fe:85:dd:7e:42:f8:a0:
29:09:d6:c0:09:80:32:56:a2:99:a2:8c:3e:6e:35:1b:20:70:
1f:8a:00:c1:2c:4c:36:ca:ba:fd:bc:a4:a7:14:24:ad:7a:0d:
a7:78:92:a6:e1:52:be:45:e3:fe:42:98:8f:38:30:e3:92:33:
b4:3e:59:bb:12:87:15:c4:81:dc:ef:69:11:01:0f:95:f6:8b:
7c:31:dc:fa:d4:19:21:d6:5d:37:b6:4d:8a:de:8d:ba:f6:1a:
53:b5:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org