Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vfF2J2vA3skqnZI7hTVRRWq3Jk.roa
File: 8vfF2J2vA3skqnZI7hTVRRWq3Jk.roa (raw, json)
Hash identifier: qiQWsPZ6EA7e29XfxZjggq/mGGXHdSy6JJVx5Qug27s=
Subject key identifier: F2:F7:C5:D8:9D:AF:03:7B:24:AA:76:48:EE:14:D5:45:15:AA:DC:99
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14634C3E7FB73A6EB4CF7DC4FEF44A8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vfF2J2vA3skqnZI7hTVRRWq3Jk.roa
Signing time: Thu 08 Dec 2022 10:27:00 +0000
ROA not before: Thu 08 Dec 2022 10:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:34:c3:e7:fb:73:a6:eb:4c:f7:dc:4f:ef:44:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f7c5d89daf037b24aa7648ee14d54515aadc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:db:1e:67:11:55:02:55:5d:11:d4:4a:ba:
7a:a6:9c:7b:e1:23:67:1e:ac:86:1a:89:f5:0b:08:
1e:b6:5e:0e:84:dc:d1:89:51:94:14:ef:5e:ac:5f:
ff:2a:0b:4d:3b:11:5f:f5:c4:ee:a4:fc:9e:18:8f:
cb:b6:4e:31:25:32:89:c0:9a:d5:c9:25:bb:f0:7d:
40:49:5e:e0:85:bf:1f:75:37:92:8e:3c:c7:d7:78:
89:b5:fc:38:81:1c:1b:78:72:b8:d7:bb:04:7e:dc:
32:a2:dc:8e:c1:e7:1e:fb:2d:98:a1:32:6e:8b:4b:
8d:f5:f0:3a:77:de:6e:1f:41:d8:1e:d1:1b:d9:e5:
58:cf:60:6e:48:1e:7b:b3:88:d1:a0:47:36:3c:ac:
05:97:07:8d:60:17:8e:25:ab:76:ab:55:ba:2a:b8:
23:a7:72:3e:b1:fe:9e:b3:0b:7f:55:31:a7:9f:23:
c6:63:5b:a6:28:cb:32:d9:04:5a:5d:61:25:07:c3:
31:ef:27:fe:67:d5:eb:60:6d:6b:b4:24:4e:de:2b:
78:17:98:ac:68:27:a7:56:cb:51:52:0b:b6:9f:b6:
1e:99:88:48:cf:7b:a0:1c:80:ac:a0:37:1a:57:67:
4e:37:5b:54:ed:8d:42:87:4d:da:04:8b:8f:27:56:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F7:C5:D8:9D:AF:03:7B:24:AA:76:48:EE:14:D5:45:15:AA:DC:99
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8vfF2J2vA3skqnZI7hTVRRWq3Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
01:29:09:0a:03:56:8c:d7:f7:cd:a4:f3:7f:69:29:cd:0c:5c:
76:65:90:74:a1:6b:af:96:06:d7:be:56:d1:f4:9a:d3:4d:3b:
1c:0a:5f:fe:54:48:46:f5:35:7f:b0:d8:ba:44:0a:52:da:98:
eb:dc:3f:94:77:12:73:a4:24:22:ef:6b:d6:b4:c8:b5:8c:8a:
12:99:42:28:5c:30:94:ea:19:61:88:0f:70:86:7a:da:69:a1:
2c:d6:53:0d:f8:77:a5:9d:86:c6:2f:4f:90:7b:c9:62:81:11:
58:f9:22:d7:30:f4:e5:4e:f1:cd:74:a8:ac:75:ec:04:43:2c:
bd:98:3a:3e:fd:8b:ba:a5:42:b8:03:28:03:c9:cf:e4:54:21:
b1:55:9e:fe:cb:bf:01:05:83:a2:52:37:7b:b3:6a:47:f5:ed:
2f:d3:ca:6f:cc:2b:d2:4d:4f:f0:fa:e1:f5:cd:eb:0f:e6:cc:
4e:0f:19:16:0f:cd:a4:0d:78:33:33:b4:5e:b5:e9:4f:d1:91:
19:5b:34:30:71:b4:2d:a6:01:59:0b:ca:f3:42:9a:9b:35:e3:
3b:5a:8f:b8:a3:4b:3d:b8:87:5e:f4:87:6c:1a:07:6d:5f:2e:
cb:23:d1:c7:05:2c:1a:df:2a:67:59:1f:39:63:93:02:77:48:
d8:ab:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org