Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HsS5zRQRXxJGYnTlMDrw17DvP44.roa
File: HsS5zRQRXxJGYnTlMDrw17DvP44.roa (raw, json)
Hash identifier: GDSaFfWqnUTQt5LwxLjFQYkMNpHyPBCKtfpd2jXGa/M=
Subject key identifier: 1E:C4:B9:CD:14:11:5F:12:46:62:74:E5:30:3A:F0:D7:B0:EF:3F:8E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F514B3C8E02836C3EE0C2289857794
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HsS5zRQRXxJGYnTlMDrw17DvP44.roa
Signing time: Thu 08 Dec 2022 13:38:01 +0000
ROA not before: Thu 08 Dec 2022 13:38:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.227.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:14:b3:c8:e0:28:36:c3:ee:0c:22:89:85:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ec4b9cd14115f12466274e5303af0d7b0ef3f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:77:0f:eb:90:b0:ae:00:27:20:15:64:01:
94:9f:5f:e6:98:b6:03:9f:99:67:f1:a6:4a:f6:dc:
6e:be:9e:11:df:34:fb:ca:9b:6d:84:27:56:3a:c1:
1b:2a:31:19:6b:3d:29:bd:29:57:06:c6:8e:c3:04:
68:9f:59:09:ce:77:2e:5c:0c:78:c4:35:4a:fe:8a:
58:d6:80:10:d8:58:4a:76:ad:1d:ce:eb:fc:c5:24:
0b:ff:da:79:3f:04:52:24:0e:20:20:e4:b1:d7:f0:
a4:29:54:c8:15:2e:9c:57:cb:f5:0f:8c:a3:2d:8b:
ae:3d:e2:c1:e3:65:8a:9b:17:bd:00:99:9e:af:af:
0a:45:dc:dc:e6:a5:29:01:68:bb:ed:9f:64:27:21:
00:5a:86:18:d3:55:9d:dc:c4:bc:13:d2:34:fc:91:
e3:91:43:a4:ff:71:75:ea:78:b1:2a:1b:2f:8e:1e:
69:84:3e:c6:1a:d7:d1:d0:d8:72:8b:65:35:b9:03:
da:4f:68:b6:d2:f8:8c:08:e0:65:b4:58:49:66:1d:
91:03:90:02:2c:91:a1:da:bf:27:a6:d6:db:1e:34:
e2:ca:20:2b:7b:11:3b:9c:a4:f6:4a:4c:49:c7:ef:
2e:21:8d:db:e0:49:7f:f5:80:f1:34:90:44:25:4f:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:B9:CD:14:11:5F:12:46:62:74:E5:30:3A:F0:D7:B0:EF:3F:8E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HsS5zRQRXxJGYnTlMDrw17DvP44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.227.0-178.176.229.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:d9:29:e9:67:c1:4c:e7:46:de:27:85:af:c6:88:8d:37:a7:
3d:e2:6f:14:0a:b6:4e:80:03:68:18:6a:c6:89:90:6a:26:cb:
9b:34:92:be:e6:01:52:5b:64:32:09:87:48:a9:ad:39:6d:fa:
c3:5c:84:0c:7b:ea:07:6a:60:e9:b2:8c:4e:51:4d:06:51:a9:
db:7c:0e:77:ba:be:e9:fa:fa:c1:b1:8d:3b:77:17:ca:70:c7:
cc:fd:a4:2a:e8:ec:b9:75:3c:ba:2a:59:a7:19:c9:c8:05:39:
7e:94:26:a8:9a:0d:38:2e:e7:c7:a3:01:3c:5f:f1:70:d9:47:
c6:4b:45:9a:25:02:98:29:70:ef:0a:9a:89:b1:16:6e:f3:d9:
20:8d:35:4a:5e:ea:75:2d:15:16:c7:3c:e2:f8:17:26:95:8d:
71:c9:61:94:a1:4d:50:cd:ac:61:43:ec:99:ad:a6:76:0e:c0:
67:86:5d:26:1b:82:1b:0f:29:b1:0c:aa:49:98:1b:f6:96:9b:
14:5d:e4:6c:37:03:05:cd:c7:2d:91:8f:47:4d:1f:13:78:6d:
c9:d6:0c:32:f1:27:e5:d2:00:2c:6e:20:fc:c2:5a:d3:af:cd:
fd:30:0d:3a:43:9d:58:0c:2e:cc:66:c9:96:c4:0b:8f:61:c2:
c7:47:e3:ab
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYTx9RSzyOAoNsPuDCKJhXeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTMzODAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWM0YjljZDE0MTE1ZjEyNDY2Mjc0ZTUzMDNhZjBkN2IwZWYzZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYB3D+uQsK4AJyAVZAGUn1/mmLYD
n5ln8aZK9txuvp4R3zT7yptthCdWOsEbKjEZaz0pvSlXBsaOwwRon1kJzncuXAx4
xDVK/opY1oAQ2FhKdq0dzuv8xSQL/9p5PwRSJA4gIOSx1/CkKVTIFS6cV8v1D4yj
LYuuPeLB42WKmxe9AJmer68KRdzc5qUpAWi77Z9kJyEAWoYY01Wd3MS8E9I0/JHj
kUOk/3F16nixKhsvjh5phD7GGtfR0Nhyi2U1uQPaT2i20viMCOBltFhJZh2RA5AC
LJGh2r8nptbbHjTiyiArexE7nKT2SkxJx+8uIY3b4El/9YDxNJBEJU9MtQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFB7Euc0UEV8SRmJ05TA68New7z+OMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvSHNTNXpSUVJYeEpHWW5UbE1EcncxN0R2UDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTB/BAIAATB5MAwDBACy
sOMDBAGysOQDBAK5AyADBAK50owDBAO8XqgDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQ
YAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWa
oAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOCAQEAG9kp6WfBTOdG
3ieFr8aIjTenPeJvFAq2ToADaBhqxomQaibLmzSSvuYBUltkMgmHSKmtOW36w1yE
DHvqB2pg6bKMTlFNBlGp23wOd7q+6fr6wbGNO3cXynDHzP2kKujsuXU8uipZpxnJ
yAU5fpQmqJoNOC7nx6MBPF/xcNlHxktFmiUCmClw7wqaibEWbvPZII01Sl7qdS0V
Fsc84vgXJpWNcclhlKFNUM2sYUPsma2mdg7AZ4ZdJhuCGw8psQyqSZgb9pabFF3k
bDcDBc3HLZGPR00fE3htydYMMvEn5dIALG4g/MJa06/N/TANOkOdWAwuzGbJlsQL
j2HCx0fjqw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:25 2025 by rpki-client