Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9gP0mqpaIOP7vnGdssPD6dvpq0w.roa
File: 9gP0mqpaIOP7vnGdssPD6dvpq0w.roa (raw, json)
Hash identifier: yvoFhzkvei6hQjo/Yp03L6rqyZoFxjcj/ZZctKJqig8=
Subject key identifier: F6:03:F4:9A:AA:5A:20:E3:FB:BE:71:9D:B2:C3:C3:E9:DB:E9:AB:4C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F51B4FAB76AF7C0101C7A8CBC5741D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9gP0mqpaIOP7vnGdssPD6dvpq0w.roa
Signing time: Thu 08 Dec 2022 13:38:03 +0000
ROA not before: Thu 08 Dec 2022 13:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
178.176.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:1b:4f:ab:76:af:7c:01:01:c7:a8:cb:c5:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f603f49aaa5a20e3fbbe719db2c3c3e9dbe9ab4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:5c:2f:bf:3d:f4:db:8a:a6:ae:94:4f:f2:
7c:c2:57:31:56:1d:13:69:c1:71:f6:7d:a5:54:9d:
ef:08:9d:19:8e:ec:ca:f7:8c:d4:a6:2a:d2:b8:13:
bf:71:3f:12:32:f8:42:99:24:a7:15:6f:08:ab:cf:
3e:c9:04:0c:fe:43:27:72:a0:3a:cf:d8:42:40:aa:
60:82:8e:5d:1a:4b:83:09:fb:16:e8:a1:b6:ff:43:
1d:51:bf:18:36:43:2e:e1:e9:6f:8a:70:1c:62:ee:
80:7c:19:75:9f:da:c3:d8:5b:63:79:99:de:31:03:
da:27:19:80:a3:a0:23:a9:af:ad:68:6f:96:d1:0d:
ab:98:b7:db:50:c7:4f:34:6d:93:96:65:04:59:08:
b0:07:07:ba:d7:76:d8:2c:f6:85:65:f8:4d:9f:41:
7c:b6:73:01:c9:d8:7c:50:f4:4b:fc:61:f4:8f:ef:
83:b9:ab:30:0f:bc:ad:5b:bf:03:8a:14:c1:f7:b4:
0e:f9:5e:77:bf:7e:c7:43:4c:4c:47:ab:1d:a3:44:
b5:50:20:34:ca:48:2c:40:d0:94:40:17:c5:66:15:
7b:4a:c6:c2:ab:9e:a8:a9:fd:1f:5c:ee:ca:36:f7:
a3:4a:42:21:3b:42:82:a2:77:62:f1:b0:05:61:70:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:F4:9A:AA:5A:20:E3:FB:BE:71:9D:B2:C3:C3:E9:DB:E9:AB:4C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9gP0mqpaIOP7vnGdssPD6dvpq0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:1b:8b:95:a3:cc:db:f6:c3:22:ab:64:27:ad:bb:ef:04:b7:
9c:8e:11:7e:e6:90:97:c8:f1:0c:58:a2:12:50:eb:e9:a0:32:
27:d3:07:9a:38:f9:2d:0c:d1:fe:3f:4a:08:6d:ad:53:b8:95:
ef:59:21:9a:37:b5:60:91:cc:4e:4d:71:6d:43:eb:6b:a1:af:
bd:d8:c1:b9:38:2e:de:f4:3c:80:85:ca:cd:07:6c:c2:e1:4b:
32:ed:dd:68:28:84:f4:e8:c0:12:5b:3b:bd:bd:1e:54:a4:26:
36:38:42:66:ee:f5:76:da:61:de:4b:83:93:e3:48:5e:ae:04:
ea:af:39:73:8c:0a:70:0b:27:51:8c:4b:1e:4f:fe:a1:a5:d1:
c8:aa:5d:7f:ea:51:40:7d:90:fe:ea:5b:15:df:02:4e:40:1b:
16:4b:bb:28:27:88:61:16:d2:26:f3:77:e7:2a:ef:52:bf:ff:
82:8a:80:53:8c:86:47:98:4b:09:e7:c3:9d:a6:5e:b4:2a:8f:
c5:ab:59:a6:ef:3f:dd:5f:c5:b2:ab:b0:95:36:f0:d5:24:e9:
f8:c3:d4:5d:6c:8c:aa:c8:f2:f5:a4:83:87:2e:58:1e:fd:2d:
fa:1d:25:77:0a:e4:68:87:84:2d:4e:90:3d:4f:2c:7b:3e:e4:
f5:ea:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org