Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/D2ee6pHcMdCiG7wraJwW_Bt_86o.roa
File: D2ee6pHcMdCiG7wraJwW_Bt_86o.roa (raw, json)
Hash identifier: DonN2nShpgJxAaarMLbGSVvc77x/6h9SNatTeijTpMU=
Subject key identifier: 0F:67:9E:EA:91:DC:31:D0:A2:1B:BC:2B:68:9C:16:FC:1B:7F:F3:AA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505910AD9A5B81ABEED14BA09A08B3AE1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/D2ee6pHcMdCiG7wraJwW_Bt_86o.roa
Signing time: Mon 12 Dec 2022 09:01:09 +0000
ROA not before: Mon 12 Dec 2022 09:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 193.201.228.0/22 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
178.176.226.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:0a:d9:a5:b8:1a:be:ed:14:ba:09:a0:8b:3a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f679eea91dc31d0a21bbc2b689c16fc1b7ff3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:b0:11:51:a9:d8:bd:fb:af:b5:4f:3f:8d:
c8:6d:15:bc:c8:2f:c6:f2:9b:ac:59:f5:1f:40:35:
20:d2:4e:ef:2a:de:71:8d:11:db:2b:11:c6:0e:c2:
5f:6b:9c:f8:cf:97:da:5b:b5:32:e5:13:28:ca:24:
2c:5e:21:2b:1e:14:b5:bd:eb:22:a6:01:c2:c9:e3:
52:1b:be:17:61:28:18:47:28:6e:63:e0:cb:d0:c8:
79:a4:20:43:19:94:3c:67:bb:ae:a9:57:43:17:3b:
93:b4:37:d7:54:22:11:38:84:fe:05:d4:da:6e:08:
9e:9a:5b:3e:b4:5a:a9:fd:c0:ac:34:be:9e:d3:50:
20:95:8e:f0:c5:37:a9:17:de:ab:ce:91:9d:fc:09:
92:48:66:ed:4b:77:9b:29:ce:8f:ed:19:9a:1f:7a:
e4:d6:5e:37:f7:c6:66:5f:36:fa:f8:04:04:8d:bc:
18:87:26:c6:41:b4:fe:33:20:6e:c0:da:8f:47:29:
75:a9:bd:33:e5:d1:9c:b7:15:01:b2:de:96:ec:f4:
be:ce:9e:24:24:5e:d3:1b:ff:39:0a:58:0b:50:fd:
5e:f1:d2:e3:f3:e0:1a:3c:53:ea:f4:5e:3d:c1:c5:
f8:17:4f:59:b1:3e:57:0f:64:53:c4:d4:9f:d9:49:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:67:9E:EA:91:DC:31:D0:A2:1B:BC:2B:68:9C:16:FC:1B:7F:F3:AA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/D2ee6pHcMdCiG7wraJwW_Bt_86o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.224.0-178.176.226.255
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:bd:6a:1a:1d:58:cd:a4:b0:f5:41:90:63:d5:b1:ea:01:73:
90:19:7e:6e:77:78:2e:36:93:ec:92:9e:eb:b6:94:95:21:77:
4c:c4:87:be:26:ed:f7:b9:af:94:d2:f6:9a:09:dc:b6:21:c9:
0e:92:2c:11:fe:8b:36:a0:a1:ca:da:34:8e:f0:84:8b:e6:1d:
d9:8f:28:01:b2:f1:f2:7d:02:47:62:87:1c:2a:ea:97:02:43:
03:0e:6f:7a:05:94:6f:59:9f:81:26:fd:2c:22:7c:e2:81:77:
84:09:12:b7:ce:e5:23:a3:32:06:ef:40:96:33:64:d4:fd:81:
35:7f:f0:db:45:75:d6:d6:f6:8a:d2:8a:cb:18:c5:63:18:8b:
11:46:cf:dd:27:94:62:8e:15:9e:86:a3:c2:83:06:fd:ef:e7:
e9:ef:80:a0:eb:89:a8:e5:a8:70:d2:a0:2f:a0:62:b7:a8:dc:
e2:5b:b3:f8:88:36:b4:1f:ba:d5:4a:04:37:71:a5:57:7a:75:
bd:8f:97:5b:ec:d3:c2:58:4b:4b:7c:a5:c9:d3:ea:52:e4:a1:
0f:45:b1:bd:b5:45:31:1c:cb:af:f6:29:01:52:39:ff:15:5c:
e7:b3:d6:7f:95:a2:dc:9a:f8:45:56:ab:92:f6:a3:32:8f:df:
9e:66:43:df
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYUFkQrZpbgavu0UugmgizrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDkwMTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjY3OWVlYTkxZGMzMWQwYTIxYmJjMmI2ODljMTZmYzFiN2ZmM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYOwEVGp2L37r7VPP43IbRW8yC/G
8pusWfUfQDUg0k7vKt5xjRHbKxHGDsJfa5z4z5faW7Uy5RMoyiQsXiErHhS1vesi
pgHCyeNSG74XYSgYRyhuY+DL0Mh5pCBDGZQ8Z7uuqVdDFzuTtDfXVCIROIT+BdTa
bgiemls+tFqp/cCsNL6e01AglY7wxTepF96rzpGd/AmSSGbtS3ebKc6P7RmaH3rk
1l4398ZmXzb6+AQEjbwYhybGQbT+MyBuwNqPRyl1qb0z5dGctxUBst6W7PS+zp4k
JF7TG/85ClgLUP1e8dLj8+AaPFPq9F49wcX4F09ZsT5XD2RTxNSf2UnPTwIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFA9nnuqR3DHQohu8K2icFvwbf/OqMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvRDJlZTZwSGNNZENpRzd3cmFKd1dfQnRfODZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9MAwDBAWysOAD
BACysOIDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAME
BdQOoDANBgkqhkiG9w0BAQsFAAOCAQEAo71qGh1YzaSw9UGQY9Wx6gFzkBl+bnd4
LjaT7JKe67aUlSF3TMSHvibt97mvlNL2mgnctiHJDpIsEf6LNqChyto0jvCEi+Yd
2Y8oAbLx8n0CR2KHHCrqlwJDAw5vegWUb1mfgSb9LCJ84oF3hAkSt87lI6MyBu9A
ljNk1P2BNX/w20V11tb2itKKyxjFYxiLEUbP3SeUYo4VnoajwoMG/e/n6e+AoOuJ
qOWocNKgL6Bit6jc4luz+Ig2tB+61UoEN3GlV3p1vY+XW+zTwlhLS3ylydPqUuSh
D0WxvbVFMRzLr/YpAVI5/xVc57PWf5Wi3Jr4RVarkvajMo/fnmZD3w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:53 2025 by rpki-client