Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8xd2HSCcGB6yWHumGJEZTEtESPk.roa
File: 8xd2HSCcGB6yWHumGJEZTEtESPk.roa (raw, json)
Hash identifier: +UeosvMbzG1L06ZWPiKMMH+ZvlvgHzaaottZnWNuwOw=
Subject key identifier: F3:17:76:1D:20:9C:18:1E:B2:58:7B:A6:18:91:19:4C:4B:44:48:F9
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F19F71AC408320412FC6E603137D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8xd2HSCcGB6yWHumGJEZTEtESPk.roa
Signing time: Sun 01 Jan 2023 19:35:27 +0000
ROA not before: Sun 01 Jan 2023 19:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59722
IP address blocks: 217.195.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f1:9f:71:ac:40:83:20:41:2f:c6:e6:03:13:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f317761d209c181eb2587ba61891194c4b4448f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:e0:3b:40:dd:3f:93:54:41:13:cf:0c:9e:
bc:b4:bf:e7:0e:f5:ca:e5:c5:ff:1e:2e:d6:21:75:
90:dd:d0:87:39:9f:e6:b1:d3:93:35:d2:0b:7e:bd:
fe:2a:6d:b0:5c:bd:f5:9a:4f:ff:63:3c:5b:91:00:
1d:8c:cc:96:e4:9a:da:68:da:28:41:67:b8:6f:b7:
66:c6:40:3c:d9:37:f1:01:aa:e0:0a:69:17:0f:d9:
05:70:59:aa:c2:d0:73:11:12:83:ce:56:eb:53:e1:
17:de:e2:b8:32:06:32:da:82:d6:41:eb:13:91:ba:
7f:b6:58:aa:ad:df:31:14:a5:3a:ca:f8:1b:79:da:
ee:e7:96:b2:e3:14:c5:f2:90:2c:61:25:17:53:53:
8c:c1:f9:8f:ac:21:99:9b:f5:13:ac:e0:51:89:18:
92:3a:11:18:7e:df:dd:94:82:0e:35:4e:da:9a:35:
30:52:c9:45:ed:b7:09:ee:bc:07:7a:7c:9b:e7:d4:
d9:9a:5b:2a:66:a0:3b:58:a3:6f:98:08:07:24:8d:
c4:14:3e:7c:e1:b5:29:a5:9b:2c:4a:7f:68:e3:68:
34:f7:70:05:27:69:2a:dc:6f:7d:d0:6e:a9:e6:0f:
dd:4f:5d:dd:ac:45:c9:0d:1a:12:c9:93:b9:d8:2b:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:76:1D:20:9C:18:1E:B2:58:7B:A6:18:91:19:4C:4B:44:48:F9
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8xd2HSCcGB6yWHumGJEZTEtESPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.195.76.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4b:62:d8:7c:5d:70:34:58:f3:12:c7:26:71:9d:17:c0:d9:
3e:77:6f:e9:f0:b1:c8:0e:8d:70:98:21:1c:33:2e:ed:72:c7:
89:36:73:9d:55:89:1f:31:bf:4e:68:fd:0b:82:a7:36:90:c2:
d3:ae:54:28:ef:cf:be:f6:eb:21:55:7c:fa:c4:9d:be:4f:cf:
29:07:a7:38:f4:87:ef:2f:db:7f:b8:3d:f1:e6:00:29:30:3b:
3d:1d:d6:0c:4c:4a:b5:cf:41:eb:ae:5a:47:2d:80:47:91:a2:
03:ab:23:ce:50:a8:81:36:ee:a4:ed:11:81:b4:fd:79:b7:15:
3c:78:58:d7:ff:b9:3f:5f:5e:53:ea:0f:e0:3b:9e:c6:8b:0c:
53:03:80:dd:9b:96:1d:fc:d6:26:98:54:6d:71:bd:16:21:8a:
77:30:b0:46:86:f3:0b:33:4f:14:f3:bb:0a:94:73:4f:8e:e3:
fa:09:4f:2d:9b:28:f1:2f:d2:1e:2f:e9:36:03:62:0f:59:85:
da:8c:1a:5c:88:7e:3f:61:0f:5d:5f:61:27:49:9f:a7:a9:20:
85:b2:a1:af:92:07:41:07:2a:42:86:6a:ba:db:ec:b0:b6:24:
0b:ab:16:33:68:a6:c2:f6:ca:13:44:e7:dc:6d:00:fd:71:4b:
82:f6:94:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1PGfcaxAgyBBL8bmAxN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzE3NzYxZDIwOWMxODFlYjI1ODdiYTYxODkxMTk0YzRiNDQ0OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxPgO0DdP5NUQRPPDJ68tL/nDvXK
5cX/Hi7WIXWQ3dCHOZ/msdOTNdILfr3+Km2wXL31mk//YzxbkQAdjMyW5JraaNoo
QWe4b7dmxkA82TfxAargCmkXD9kFcFmqwtBzERKDzlbrU+EX3uK4MgYy2oLWQesT
kbp/tliqrd8xFKU6yvgbedru55ay4xTF8pAsYSUXU1OMwfmPrCGZm/UTrOBRiRiS
OhEYft/dlIIONU7amjUwUslF7bcJ7rwHenyb59TZmlsqZqA7WKNvmAgHJI3EFD58
4bUppZssSn9o42g093AFJ2kq3G990G6p5g/dT13drEXJDRoSyZO52CsX9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMXdh0gnBgeslh7phiRGUxLREj5MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOHhkMkhTQ2NHQjZ5V0h1bUdKRVpURXRFU1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cNMMA0G
CSqGSIb3DQEBCwUAA4IBAQCSS2LYfF1wNFjzEscmcZ0XwNk+d2/p8LHIDo1wmCEc
My7tcseJNnOdVYkfMb9OaP0Lgqc2kMLTrlQo78++9ushVXz6xJ2+T88pB6c49Ifv
L9t/uD3x5gApMDs9HdYMTEq1z0HrrlpHLYBHkaIDqyPOUKiBNu6k7RGBtP15txU8
eFjX/7k/X15T6g/gO57GiwxTA4Ddm5Yd/NYmmFRtcb0WIYp3MLBGhvMLM08U87sK
lHNPjuP6CU8tmyjxL9IeL+k2A2IPWYXajBpciH4/YQ9dX2EnSZ+nqSCFsqGvkgdB
BypChmq62+ywtiQLqxYzaKbC9soTROfcbQD9cUuC9pRy
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:33 2025 by rpki-client