Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DE5W3lUJEhkhN9yhHbhBLN8hhT8.roa
File: DE5W3lUJEhkhN9yhHbhBLN8hhT8.roa (raw, json)
Hash identifier: 3Ac4X07emaQmlnnbhuIgaKTwHkzmhIQyR5uOuzOPzIA=
Subject key identifier: 0C:4E:56:DE:55:09:12:19:21:37:DC:A1:1D:B8:41:2C:DF:21:85:3F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A42B501D14477709CE8118967D3662
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DE5W3lUJEhkhN9yhHbhBLN8hhT8.roa
Signing time: Mon 12 Dec 2022 09:22:03 +0000
ROA not before: Mon 12 Dec 2022 09:22:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:2b:50:1d:14:47:77:09:ce:81:18:96:7d:36:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c4e56de550912192137dca11db8412cdf21853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:6b:b0:cd:31:bd:79:53:0e:aa:a6:f5:52:
05:6a:4c:2b:3c:ce:68:dd:20:aa:32:fc:43:20:fe:
a0:24:12:25:44:8c:f0:98:bc:3e:aa:47:14:18:fe:
ce:30:e9:ea:b2:e9:ca:6a:58:53:5a:e9:6d:b2:bf:
35:4e:67:4b:7a:ae:e3:2b:1f:0a:89:9b:86:9c:ab:
a8:36:34:50:56:43:50:56:4a:09:77:c8:4b:a3:40:
91:16:37:83:38:6d:5e:3e:05:8a:37:f0:7c:09:b5:
59:cb:50:87:4f:00:3b:65:ca:34:90:6f:58:5a:3c:
a8:14:23:b6:ee:cd:2a:fe:12:6c:9d:12:ae:a8:96:
bd:21:82:52:0b:69:55:1c:6d:38:62:b3:c2:86:34:
57:5e:8b:03:4c:d1:8c:39:dc:96:36:67:3b:61:43:
4f:35:32:94:b4:1e:14:e7:7c:14:be:83:74:e1:dd:
1c:b5:77:7b:09:38:9d:88:67:bd:f5:d9:b2:b3:8c:
08:c6:75:ee:1b:b5:0f:d0:26:3b:f5:19:7f:27:4c:
f6:f9:9a:82:b8:16:18:6f:af:d9:1a:42:ad:1d:26:
28:5a:16:82:3c:a0:96:d2:65:6a:a4:3f:34:08:6d:
8e:b3:3e:4b:40:f1:6e:00:89:0e:80:d9:55:2c:6a:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:56:DE:55:09:12:19:21:37:DC:A1:1D:B8:41:2C:DF:21:85:3F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DE5W3lUJEhkhN9yhHbhBLN8hhT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
92:cd:9f:34:74:24:1a:06:d2:df:e5:9a:45:56:04:97:6d:ae:
67:84:f5:f8:62:43:06:77:55:7b:49:fe:e6:ba:a8:8a:5f:3b:
80:47:1b:71:fa:35:b9:b0:54:a2:df:eb:40:5b:be:89:b2:3b:
c5:42:bd:d6:81:13:5e:15:a9:52:60:cd:2f:e3:a8:a1:f1:e6:
d3:39:18:99:1f:af:2d:94:b5:21:5d:cc:0c:e3:49:a7:9e:90:
90:30:24:be:f3:65:2e:c1:22:f2:0c:a8:d4:df:18:43:e9:a3:
fd:2a:70:f2:14:9c:a7:6c:01:ae:5e:9c:07:cd:6a:27:7a:d9:
cd:28:8b:a3:b2:a0:43:7c:d3:73:44:7d:e8:eb:c5:be:68:ea:
e3:ed:97:78:a8:18:90:cd:52:33:bb:1f:a1:74:e8:29:43:5e:
1f:07:7e:02:d5:32:da:b8:00:44:3b:0b:58:d4:a2:9a:73:b4:
26:cb:13:64:07:ae:52:50:ab:12:5a:1f:c2:2d:73:14:07:53:
eb:f8:51:2e:d3:e0:2b:fb:67:1b:d8:f8:af:7f:96:d1:94:52:
d0:21:bf:65:e0:8e:4d:3a:13:21:de:87:c1:59:fa:ac:16:45:
f4:b7:37:09:3a:ce:64:c7:c0:d2:d1:31:71:58:ca:c2:02:36:
82:9b:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:38 2025 by rpki-client