Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E1ke7ArjNRLnplS2ih-GzVKSg1U.roa
File: E1ke7ArjNRLnplS2ih-GzVKSg1U.roa (raw, json)
Hash identifier: alVLPvE7R0YVMhQ3BoD5KnxWVOpa7Nlwm/PMcD7zWjo=
Subject key identifier: 13:59:1E:EC:0A:E3:35:12:E7:A6:54:B6:8A:1F:86:CD:52:92:83:55
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F51BABC87825EF5C1AE70381B20311
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E1ke7ArjNRLnplS2ih-GzVKSg1U.roa
Signing time: Thu 08 Dec 2022 13:38:03 +0000
ROA not before: Thu 08 Dec 2022 13:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/21 maxlen: 21
109.74.112.0/20 maxlen: 20
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:1b:ab:c8:78:25:ef:5c:1a:e7:03:81:b2:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13591eec0ae33512e7a654b68a1f86cd52928355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:b0:ad:bf:d0:3f:2c:9d:b6:b3:1e:15:5c:
6d:82:02:ae:a3:69:4a:45:fc:1a:18:7a:fc:4a:bd:
cb:df:bb:3f:1b:65:b6:70:5e:9f:53:82:c3:ee:91:
88:b9:55:86:90:9f:51:3f:c7:a5:28:2e:01:ec:d4:
5f:69:7a:00:af:5a:92:78:33:7d:58:5f:c2:fc:46:
28:a1:d5:cd:6b:1a:84:4c:68:e3:ff:ed:76:fb:e3:
a4:89:a0:00:8d:bc:d6:95:d6:1c:8d:8f:e5:85:d7:
5f:94:5d:74:27:97:56:b7:b4:09:8f:e4:7c:1e:61:
6b:46:26:43:f0:6c:67:ee:41:1b:b7:f7:c3:6d:ee:
cc:0a:45:36:ac:75:0e:81:90:7e:c4:cc:2d:5d:41:
8c:f4:5b:30:a4:93:c2:4e:0e:36:a5:8c:88:86:d4:
9e:42:9c:d2:bc:d6:06:a4:5c:86:b8:20:84:0e:cb:
dc:83:91:09:a9:1e:46:40:cf:dd:41:84:8a:3a:ad:
e4:31:66:c0:61:85:4e:8a:83:ff:c4:c9:85:d3:ac:
74:5c:50:00:48:90:c6:e3:8a:4c:6a:ee:00:5e:45:
87:12:34:40:97:ec:56:3d:45:65:41:8e:3d:bc:60:
ca:98:38:ab:2c:98:15:36:8b:7e:ed:8e:fd:67:f2:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:1E:EC:0A:E3:35:12:E7:A6:54:B6:8A:1F:86:CD:52:92:83:55
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E1ke7ArjNRLnplS2ih-GzVKSg1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:58:c7:a0:9d:81:20:d9:15:30:08:d5:dd:ed:23:07:c9:47:
7b:52:12:36:a4:12:de:d7:ea:c0:13:c0:ef:df:20:7a:64:25:
13:b3:8a:31:25:39:11:a1:aa:42:fe:26:0e:38:9e:e3:0a:67:
4e:3f:20:65:14:34:7c:22:8f:09:53:84:aa:89:c3:0c:2c:51:
fc:77:9f:45:d5:a8:b9:2d:8c:67:58:8a:df:a8:f5:e1:4a:d7:
e9:00:50:f3:dc:72:5b:f4:b9:9a:8a:41:ca:75:c7:4f:3b:49:
58:d6:e4:aa:4f:85:7c:75:77:64:e8:3f:b2:31:81:51:53:9d:
52:76:39:2a:f1:4a:b4:27:39:bf:32:b3:2d:85:af:99:c0:8b:
d9:9c:71:c7:a9:a1:4a:43:43:96:7e:3d:4f:41:ad:a4:2d:49:
35:92:ea:64:3b:27:56:6b:99:5d:38:b8:a1:25:f4:52:97:e8:
ca:7c:dc:8a:fd:e9:85:36:a6:5f:a9:80:82:0c:03:7d:8d:56:
4a:d7:38:74:34:9c:a2:2a:fc:9e:25:8f:f4:53:25:9c:7d:a4:
d5:5c:9f:ad:f6:9c:3f:df:79:2e:88:6a:c8:bc:96:2d:c5:42:
9e:bd:e2:ee:d8:60:43:04:00:4a:54:62:4e:04:da:db:71:59:
bf:d8:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:52 2025 by rpki-client