Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/V2GbjkFjFgh6rbtsxoVFkrih0O8.roa
File: V2GbjkFjFgh6rbtsxoVFkrih0O8.roa (raw, json)
Hash identifier: iDQRHJjI7Ugz9fp+zT3Z02AFb2JFKgR+yW0wxrmtYsU=
Subject key identifier: 57:61:9B:8E:41:63:16:08:7A:AD:BB:6C:C6:85:45:92:B8:A1:D0:EF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F79C1B601BE4E56F392ECB373E5FB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/V2GbjkFjFgh6rbtsxoVFkrih0O8.roa
Signing time: Mon 12 Dec 2022 07:32:04 +0000
ROA not before: Mon 12 Dec 2022 07:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 20
109.74.112.0/21 maxlen: 21
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:79:c1:b6:01:be:4e:56:f3:92:ec:b3:73:e5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57619b8e416316087aadbb6cc6854592b8a1d0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a7:0c:f6:18:53:4d:89:9c:23:26:04:c6:55:
9d:5b:4e:11:aa:25:30:ec:b3:db:14:53:f4:19:46:
4b:d1:71:ea:02:31:62:bc:70:08:6e:bb:5d:95:65:
e9:b9:b3:5f:d6:25:0d:c7:95:31:70:01:bb:e1:04:
13:08:96:1b:cc:20:db:81:2f:ab:4d:5a:93:65:62:
fe:f6:0b:7d:cd:ce:61:48:c1:43:ec:71:71:63:90:
7d:90:38:ad:4f:c1:44:78:0a:10:ac:13:0a:ad:47:
d5:12:b9:46:13:03:09:51:3f:a2:f2:25:af:9f:87:
83:91:bb:fc:63:a3:31:5f:88:f3:81:cb:e4:d7:ba:
1f:c3:7e:09:a4:58:5b:30:d6:3d:35:b3:71:07:6e:
5b:0e:31:a2:f8:f4:c1:c0:0a:54:70:d4:22:2d:ba:
77:c5:9f:6e:81:75:dd:76:a4:ac:bc:dd:e6:9c:74:
ca:b1:ee:84:48:b4:f6:6b:bc:c2:5e:c8:09:a8:cb:
47:b1:a8:e3:42:e4:c5:25:52:b3:da:5f:ee:4b:04:
9a:e8:e6:f5:b3:71:e2:f1:4d:1d:ee:cb:98:e1:59:
8c:13:1d:7e:4d:11:40:8b:e2:5f:7b:d5:34:0d:aa:
40:97:15:5a:8f:0f:a8:a8:62:de:a1:4b:a4:13:7c:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:9B:8E:41:63:16:08:7A:AD:BB:6C:C6:85:45:92:B8:A1:D0:EF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/V2GbjkFjFgh6rbtsxoVFkrih0O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
02:51:92:bb:25:28:b4:50:2f:03:02:6a:84:5b:77:df:70:33:
98:48:47:af:ee:f9:9b:62:f3:34:09:9f:cf:5d:a6:07:4e:c0:
3e:69:79:04:6a:42:93:3e:dd:97:3b:9c:1a:b9:8c:82:8e:1d:
55:b7:f6:93:13:3f:05:99:72:c2:0a:46:fa:17:23:24:de:3d:
e5:73:13:94:c9:a3:28:24:4f:cf:45:9f:1a:28:0d:f1:5b:70:
08:c3:e6:69:b6:55:19:93:f3:d2:9d:5f:ba:65:84:7a:6a:b0:
f8:7a:21:98:af:22:37:53:cf:65:2e:a4:b2:6a:b4:4d:9d:8b:
dd:dd:05:57:49:38:00:5c:6e:22:61:74:76:0e:80:55:fd:0c:
c9:b1:6d:a5:37:c0:60:36:73:45:06:9f:ed:e4:7d:b9:0b:bf:
48:e5:e6:58:f3:8b:94:01:a6:31:34:ab:c2:54:64:5e:b2:16:
16:6d:6f:af:2d:8b:21:1e:17:44:d4:ea:00:38:f7:0e:fe:74:
5c:b4:df:39:83:33:37:2c:ba:a8:2f:9a:6d:ed:77:3c:20:96:
c6:5d:89:4d:f3:a8:45:08:1d:d0:d3:d4:5e:b6:03:c7:58:48:
51:88:ea:36:f8:ec:9c:9f:4b:08:d6:58:a3:89:ec:dc:80:e5:
12:97:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org