Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UbuoLG9EVjA6i67D4bUlK7rH1MA.roa
File: UbuoLG9EVjA6i67D4bUlK7rH1MA.roa (raw, json)
Hash identifier: 95rhZNzFtcVcDyK8Ciqa/02eRSz120zCSg5DmUG3xmE=
Subject key identifier: 51:BB:A8:2C:6F:44:56:30:3A:8B:AE:C3:E1:B5:25:2B:BA:C7:D4:C0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505614D3EC963295D1E1A8F3681605CAE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UbuoLG9EVjA6i67D4bUlK7rH1MA.roa
Signing time: Mon 12 Dec 2022 08:09:00 +0000
ROA not before: Mon 12 Dec 2022 08:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
80.253.0.0/20 maxlen: 20
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 18
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
212.44.64.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:4d:3e:c9:63:29:5d:1e:1a:8f:36:81:60:5c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51bba82c6f4456303a8baec3e1b5252bbac7d4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:52:00:9c:92:59:87:3a:a5:0e:1f:1c:e4:
08:e8:78:16:04:a1:e0:0d:72:b6:72:55:28:6c:04:
53:08:5b:cc:5c:87:13:a7:70:9e:27:24:ec:b7:5f:
15:20:78:f4:b7:09:e6:2d:a2:c0:14:20:b7:ef:cb:
a6:da:74:2e:69:28:6f:d5:22:f5:d4:78:3c:ab:1d:
91:02:13:bc:21:c9:60:df:d1:5d:93:42:98:30:70:
60:31:4e:e7:c1:b0:13:23:93:71:5b:04:ff:5b:93:
6a:66:89:c3:c9:67:0f:6f:52:c3:6f:f0:84:ff:1c:
46:94:58:de:20:c8:2c:d6:68:77:ea:f1:b5:91:43:
f5:ce:c4:0b:3c:2d:10:6c:97:4e:84:10:cc:39:a7:
65:e3:ca:f3:e8:27:2f:c9:8e:7f:10:ad:97:2b:2f:
b7:5f:98:d1:2a:56:7e:a4:55:43:d0:6d:0a:a8:22:
fc:12:78:9b:4c:be:ca:fd:89:b4:8a:9b:1d:a4:2a:
27:33:a2:fb:52:d5:a6:fe:2a:85:12:31:83:1f:2e:
ce:28:73:0a:2a:dc:bd:1a:57:c8:a6:83:37:96:64:
c9:4e:2d:fc:1f:a9:ce:ae:e9:1a:72:d3:fa:fb:6d:
5e:5e:4b:dc:b0:38:50:fa:7a:e4:d5:c3:18:ae:a6:
5c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:A8:2C:6F:44:56:30:3A:8B:AE:C3:E1:B5:25:2B:BA:C7:D4:C0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UbuoLG9EVjA6i67D4bUlK7rH1MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:1c:37:22:82:0f:6e:4e:c7:e8:9f:05:e1:90:0c:a5:13:73:
5c:94:13:92:0c:7d:22:13:f8:c9:21:87:6e:1e:e6:d9:27:c9:
5b:90:d6:85:af:91:93:5e:7e:9f:62:2b:5e:97:b5:54:0c:4f:
bd:cf:b7:34:21:87:10:c8:98:6a:c4:f4:fc:b6:75:a5:4a:4b:
b7:4d:1e:8b:31:0a:f4:72:bc:88:cf:42:11:d8:51:ba:fd:cd:
44:0f:6e:1b:67:c9:65:4c:e4:ea:a4:26:c9:82:5e:87:e4:d2:
22:28:8c:45:95:3a:5b:8e:6a:45:ca:4b:de:3d:2f:d5:ca:a7:
f9:db:3e:de:d5:99:04:18:16:ba:15:d4:02:ea:49:27:09:1d:
74:b9:f5:aa:ee:90:d5:01:bc:a1:58:66:9d:7b:9e:78:c6:e0:
38:22:e9:b5:24:b1:24:5f:0d:92:cf:52:76:e3:f9:a2:b7:b9:
b1:38:de:2a:12:ef:1c:98:17:1f:25:0a:e2:00:45:2f:d1:c9:
b4:6d:91:97:60:5e:2a:48:e8:54:d2:5f:2a:db:33:38:2c:63:
d0:23:03:8c:3d:64:56:2b:7c:96:bc:4b:82:37:05:54:85:e5:
79:58:df:86:da:09:09:98:b7:e0:84:d7:e8:55:11:5c:9d:31:
ae:7c:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:46 2025 by rpki-client