Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OJPJpYwdCGTlatMGeHPbnNr9OX8.roa
File: OJPJpYwdCGTlatMGeHPbnNr9OX8.roa (raw, json)
Hash identifier: 8B6GKYROoJlapT7kz5w1QvgoPY8ggrA3kcYuoqWYABM=
Subject key identifier: 38:93:C9:A5:8C:1D:08:64:E5:6A:D3:06:78:73:DB:9C:DA:FD:39:7F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE36D7F951D5DA57B5DFB94EAFA88E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OJPJpYwdCGTlatMGeHPbnNr9OX8.roa
Signing time: Mon 12 Dec 2022 09:33:01 +0000
ROA not before: Mon 12 Dec 2022 09:33:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:36:d7:f9:51:d5:da:57:b5:df:b9:4e:af:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3893c9a58c1d0864e56ad3067873db9cdafd397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:2f:18:b2:fb:82:36:00:1e:b7:53:10:71:
52:a4:1c:18:58:d4:56:a5:73:98:51:0d:6f:76:b7:
75:e7:ca:cc:76:e7:34:a1:a6:ed:57:a3:3d:75:0a:
09:13:13:9f:02:2d:26:ed:07:33:6b:64:36:5b:4c:
23:3c:a7:cb:85:aa:41:64:89:d4:47:50:3d:81:f4:
e0:5c:19:06:a0:71:db:7c:e7:66:82:b5:10:f2:ae:
3d:d4:90:fb:e9:b7:c5:60:58:ef:f1:2a:c2:4d:f9:
09:be:04:3a:a3:a9:7a:0b:59:eb:9c:46:4c:0b:de:
fd:9b:a6:8b:d8:4c:0c:ef:70:9c:84:30:6f:7f:42:
b7:9c:da:be:99:37:b9:04:63:47:50:ee:a3:f3:d8:
5d:17:7a:d8:5d:6d:50:44:7f:87:4b:c1:73:29:23:
15:37:6e:9f:56:7a:b1:ae:f7:39:f5:2b:6f:9b:c3:
29:e7:a9:54:ab:6d:b9:29:6e:ba:61:80:67:34:65:
51:bd:8b:d1:0a:4c:02:9a:ea:1f:ac:d6:c3:75:24:
fb:45:06:99:28:c5:1d:4a:a7:2e:4f:81:38:a0:d3:
f1:25:0b:f6:33:56:5a:3b:6e:98:b9:89:bf:43:68:
79:4a:2b:fd:cc:9a:b5:f1:cc:61:77:aa:40:0c:f0:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:C9:A5:8C:1D:08:64:E5:6A:D3:06:78:73:DB:9C:DA:FD:39:7F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OJPJpYwdCGTlatMGeHPbnNr9OX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.227.0-178.176.229.255
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
61:e0:17:ed:4c:86:bf:d7:1f:37:d3:c5:fe:c0:c4:10:e4:54:
51:26:5c:36:2f:a5:0f:70:92:74:f2:89:7d:e0:b7:5f:ad:c4:
df:27:99:4b:e5:4e:7b:22:22:0e:de:8b:ff:c1:1a:ab:e8:ff:
a9:e2:8a:53:8b:54:dc:1b:c1:53:46:ba:89:ea:97:0f:0f:3c:
d1:3a:70:4a:3d:4c:c6:99:d7:12:bc:3d:cf:ff:09:ea:d8:1f:
0e:7e:e1:6a:49:1d:56:9c:45:0a:5e:b3:af:e0:de:95:1d:e4:
bf:ad:0b:80:e6:83:8c:ce:7d:32:7f:20:cf:8b:8c:d5:da:4b:
59:47:66:eb:34:d4:c1:7d:74:9d:f6:34:98:64:91:ff:8f:27:
a0:ae:0c:b4:ea:55:b1:5b:8c:f3:6a:1d:04:c3:82:7a:1f:1c:
92:69:2d:b3:36:54:44:c9:64:33:92:fa:be:09:52:38:b6:64:
22:0f:69:e8:b9:14:f5:f7:02:da:ed:47:74:3f:89:8c:f2:51:
91:fa:7a:f4:45:45:5c:e6:58:25:26:72:6f:35:c7:1e:cc:62:
bf:f9:ec:14:dc:63:3c:c6:91:2e:ef:dc:84:e7:10:81:a7:d0:
81:16:4b:3c:6a:ae:45:10:ae:46:0e:8a:b4:1d:5e:74:79:1b:
a6:6c:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:41 2025 by rpki-client