Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/N9dVyIxo-A9sWbv79PcQcCHZr70.roa
File: N9dVyIxo-A9sWbv79PcQcCHZr70.roa (raw, json)
Hash identifier: D0d07zLDAY1nlpy86HyPuDvKXj7bmNba110e81lA8GQ=
Subject key identifier: 37:D7:55:C8:8C:68:F8:0F:6C:59:BB:FB:F4:F7:10:70:21:D9:AF:BD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E126029FB8F2EF9D2FAC9863363A3C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/N9dVyIxo-A9sWbv79PcQcCHZr70.roa
Signing time: Mon 12 Dec 2022 10:28:39 +0000
ROA not before: Mon 12 Dec 2022 10:28:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 188.162.0.0/16 maxlen: 24
195.78.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:26:02:9f:b8:f2:ef:9d:2f:ac:98:63:36:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37d755c88c68f80f6c59bbfbf4f7107021d9afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:8c:50:2f:99:cb:99:2f:f3:bc:71:5a:96:
b4:83:5b:80:2a:b5:d1:98:05:77:3a:21:c4:6b:91:
25:9e:90:41:0d:0b:05:c0:19:3a:e2:9b:96:02:14:
69:b6:60:bc:f8:5d:ae:3a:23:49:4a:50:6b:88:50:
05:38:09:fe:ab:b0:2b:6b:67:83:dc:fd:f8:eb:f9:
c8:a9:75:43:48:c4:ef:7e:59:6f:60:25:5e:69:51:
6e:4a:61:8f:c0:ae:36:f6:aa:32:99:ed:f1:cf:5b:
1d:55:e1:25:e7:c8:da:88:6f:73:eb:96:ad:64:bc:
aa:4e:ac:98:98:a0:5a:05:bf:ee:4d:f7:e2:86:1e:
48:c9:d1:bd:b0:c4:99:08:84:94:b1:9e:9b:2a:a8:
3b:ea:95:a0:2f:5a:93:a0:99:bc:3f:ad:8b:a0:e0:
08:0f:f8:bf:51:a4:3a:81:c2:9d:d5:e6:3e:b3:01:
db:2a:cd:5c:c6:a5:aa:0d:f4:a3:6f:e1:a7:95:1f:
c2:30:e8:5c:ee:b1:1a:ca:ce:d8:53:87:43:78:39:
3e:c6:f9:ae:37:6b:5d:94:15:8f:9d:6f:d7:28:b8:
0b:d7:1d:d2:a3:72:59:d5:8a:b2:08:e8:8c:16:f0:
7e:9e:3d:ca:03:00:ad:fe:f3:ed:fa:2d:58:7c:2c:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:55:C8:8C:68:F8:0F:6C:59:BB:FB:F4:F7:10:70:21:D9:AF:BD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/N9dVyIxo-A9sWbv79PcQcCHZr70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
27:18:32:38:ae:67:3a:a4:f6:9a:db:ce:3d:03:5e:ed:4c:dd:
28:b0:f7:59:74:92:c5:bb:49:ba:00:f4:95:8c:34:95:e3:9c:
da:b5:bc:6f:d4:cd:2a:4b:68:57:14:2d:c1:e1:ea:c7:0c:39:
1c:58:a4:43:c0:73:79:4d:63:9f:be:c1:11:6a:96:a2:06:b1:
ea:cd:78:0e:26:6d:a0:00:42:87:e0:9c:1f:0c:30:fc:c6:60:
4e:b8:d5:36:10:1f:26:91:5c:8c:3c:16:23:dd:fb:7e:e2:c4:
e0:96:d1:b8:4a:04:f8:c3:16:55:c1:15:78:f0:87:c3:94:95:
c1:1c:d3:50:08:46:5f:8b:31:43:c7:68:9a:65:91:16:10:cd:
e9:fc:54:b8:df:c4:3a:06:ae:50:c3:25:43:d4:ec:cc:b8:34:
0e:27:50:97:bd:95:aa:c0:0c:14:25:b4:ab:d0:94:23:a3:ae:
24:a9:8c:03:69:22:76:a3:b1:08:c9:ec:38:6a:92:bd:be:85:
41:1d:c8:27:0f:68:47:0d:6b:19:90:df:74:26:2e:23:f3:f3:
05:e9:df:a1:cd:91:58:f4:f3:74:70:d4:bf:90:a4:e1:9a:6d:
86:92:8c:54:af:7c:52:e4:30:c1:da:07:7d:68:94:73:f9:ce:
61:7c:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:32 2025 by rpki-client