Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9wqDXzd4zcwOlkmC2OFW9CwgwRQ.roa
File: 9wqDXzd4zcwOlkmC2OFW9CwgwRQ.roa (raw, json)
Hash identifier: XUrgSgt7uvRrw2RLHigY3YeIIAi4v9WzzaW3TJVtxPA=
Subject key identifier: F7:0A:83:5F:37:78:CD:CC:0E:96:49:82:D8:E1:56:F4:2C:20:C1:14
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2C28E8996F597C75DC9E1D6A43D73
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9wqDXzd4zcwOlkmC2OFW9CwgwRQ.roa
Signing time: Thu 08 Dec 2022 12:43:03 +0000
ROA not before: Thu 08 Dec 2022 12:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:c2:8e:89:96:f5:97:c7:5d:c9:e1:d6:a4:3d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f70a835f3778cdcc0e964982d8e156f42c20c114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:83:ee:67:3e:4d:57:86:c8:d2:1c:39:7b:1c:
37:84:bb:4c:3a:f8:a4:df:41:e9:cc:ad:bf:5c:6a:
1d:25:3b:e2:3e:45:40:c1:39:48:b1:bb:06:a7:ab:
8e:d4:20:0d:56:ef:cf:f5:eb:0c:8f:b7:b6:e5:6b:
c6:d9:56:f3:c7:84:50:68:e6:e4:43:80:41:6a:c4:
81:f0:8b:c8:92:12:47:79:f7:08:4e:29:97:24:ba:
a2:76:bc:e3:d7:e9:f5:ad:51:66:a3:7c:20:d1:c7:
f3:86:bf:00:96:07:11:75:65:0b:f4:53:69:5c:40:
fc:14:95:98:3c:1f:6e:d5:bc:2e:20:9b:89:a0:d0:
eb:da:52:64:be:44:56:8b:55:35:b3:f0:fa:3b:d2:
fc:24:b0:35:f8:9b:bb:25:73:4c:9c:b1:fb:3a:fb:
86:e5:57:65:68:4a:42:df:a2:af:f6:53:e5:6e:a4:
44:55:a3:a2:01:ff:86:91:4e:61:89:0b:24:4f:21:
fe:d4:f1:c2:91:db:b2:b2:89:fe:32:55:5d:05:2b:
4a:ae:d2:94:b2:5f:a9:78:b0:d2:19:78:d3:c6:94:
93:30:94:89:e6:a7:1a:21:5a:a8:3e:05:b5:d9:6d:
c9:10:77:fc:b8:e0:62:6a:32:63:b3:94:83:ec:54:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:83:5F:37:78:CD:CC:0E:96:49:82:D8:E1:56:F4:2C:20:C1:14
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9wqDXzd4zcwOlkmC2OFW9CwgwRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:2f:30:cb:01:20:8b:61:d7:ce:35:89:8c:44:e0:cc:8d:a8:
dd:6b:1c:92:c8:90:7e:c9:8e:c5:10:e7:ed:83:bc:ac:16:ac:
cf:15:2f:29:78:a8:4b:b8:89:a0:66:60:18:a6:89:b1:6b:68:
58:99:48:cc:e3:6c:2a:73:72:c6:f1:69:f0:e9:b0:7e:28:d9:
4b:d7:09:60:e1:06:de:aa:78:6e:f9:ee:dc:b1:e5:fa:d7:19:
da:2d:ea:53:2d:74:d1:c6:d6:ef:2b:9c:3f:0d:79:a8:0a:0a:
11:37:dd:ca:24:05:93:f9:2d:3a:7b:07:c4:55:96:46:e6:75:
09:e6:27:f5:e1:9a:ce:2b:12:23:91:7a:45:57:62:19:c7:50:
97:f0:63:b9:31:57:95:23:d3:fd:66:40:14:71:cf:6e:e3:d0:
f0:2c:46:83:f0:44:46:e4:d6:f4:9b:67:26:65:ed:20:24:7e:
3b:8e:3b:fe:6a:8e:4f:ca:f6:20:8c:2d:e6:95:b7:92:c8:15:
cf:d7:01:07:66:48:4c:93:a9:20:4d:1c:70:77:54:95:56:2e:
1f:14:56:9f:f1:0d:9c:69:69:31:4e:35:ca:cb:06:25:ec:88:
99:ef:b3:67:b3:51:25:f3:53:78:81:f3:09:0c:33:61:90:1b:
06:57:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org