Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EiNdhJBSkOO-KXNsggEJ0Vpv8G0.roa
File: EiNdhJBSkOO-KXNsggEJ0Vpv8G0.roa (raw, json)
Hash identifier: ZWgiJkuEqq9OxA610fOaAT9XmUVbKXNuNunJQAdX4Zo=
Subject key identifier: 12:23:5D:84:90:52:90:E3:BE:29:73:6C:82:01:09:D1:5A:6F:F0:6D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BB3EC240593CC7A0962B799022833
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EiNdhJBSkOO-KXNsggEJ0Vpv8G0.roa
Signing time: Thu 08 Dec 2022 10:33:01 +0000
ROA not before: Thu 08 Dec 2022 10:33:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
80.253.0.0/20 maxlen: 20
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
212.44.64.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:b3:ec:24:05:93:cc:7a:09:62:b7:99:02:28:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12235d84905290e3be29736c820109d15a6ff06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:92:f4:f2:b3:fd:38:fc:51:05:cc:c1:40:
c5:b7:53:eb:f2:29:89:e0:24:24:05:7f:08:af:85:
07:62:74:bb:f5:81:7c:8e:86:76:fc:e5:f8:f3:a4:
4d:41:e8:66:ee:03:fd:aa:54:ba:03:75:1b:f3:39:
73:83:58:8d:ff:f4:1e:de:ad:91:10:3b:49:b4:31:
45:27:ba:eb:cb:af:e5:bc:d5:b4:25:da:42:b4:8e:
6e:82:15:e3:ed:5b:99:93:b3:d6:7a:2e:b9:c7:a7:
0e:61:17:c9:34:14:bd:3a:bd:40:cf:05:9a:c3:43:
1b:49:ac:20:b8:07:d2:24:2d:6d:75:82:5d:5b:e1:
36:77:9d:2e:28:35:a5:d8:65:32:56:ac:08:7d:a6:
3f:9a:b5:cf:58:be:20:5d:55:67:90:0a:5c:94:21:
a3:8a:ba:fe:92:fd:1b:0f:ea:20:88:0a:9d:ae:8f:
95:32:fd:6b:10:ac:3a:9c:90:43:df:08:58:88:06:
03:cb:a9:ec:6d:f1:71:66:d9:aa:c6:d2:b4:aa:3c:
54:27:f2:f7:b2:8d:0f:52:fe:b9:3a:83:33:71:77:
0c:29:c8:22:e5:ad:c8:fc:4a:44:6e:cd:9a:df:55:
eb:33:94:30:98:a4:b0:ef:ca:ac:a6:62:a4:b6:21:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:5D:84:90:52:90:E3:BE:29:73:6C:82:01:09:D1:5A:6F:F0:6D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EiNdhJBSkOO-KXNsggEJ0Vpv8G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
06:ab:fc:df:d0:6b:2b:38:c4:fc:e4:3f:5f:c7:18:43:fd:d2:
ff:59:6c:24:5d:e8:fc:6f:94:a5:dd:71:bb:3e:ba:84:11:a1:
89:9a:bd:71:7e:bd:d8:d1:4b:97:8f:3a:cc:12:91:34:27:3d:
2d:92:67:20:29:36:3a:d0:35:cc:18:bd:29:b7:16:8b:84:a5:
3c:1d:45:07:36:b0:1e:a0:23:a5:17:c9:67:26:65:bf:29:69:
ca:6f:16:dd:b9:13:77:cb:66:95:a1:84:27:2c:57:30:7f:24:
b3:98:dd:b9:bf:cc:70:4e:bb:17:72:45:15:9e:1c:30:72:49:
cd:d9:df:d4:4f:fe:9c:f7:83:c9:97:ad:59:03:b2:8e:b9:4b:
6c:d8:9f:43:65:69:a3:22:58:49:bb:f9:1a:09:81:da:a8:86:
ff:03:06:83:75:ca:e2:f7:73:6e:fb:a7:ba:ed:51:db:8d:20:
fb:8f:c8:6f:92:c4:d1:65:9e:da:7a:33:0f:af:3b:da:9d:61:
3a:73:95:07:7a:97:bd:84:26:21:6e:5e:77:fe:46:ff:27:29:
4b:55:1c:8f:ff:9d:1e:e8:58:35:62:19:69:c9:70:d9:40:6a:
26:14:79:13:39:1c:a5:13:58:cc:57:25:82:ee:39:54:ab:dc:
12:d7:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:01 2025 by rpki-client