Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/V_logCSulT95nqfdAyya786P98M.roa
File: V_logCSulT95nqfdAyya786P98M.roa (raw, json)
Hash identifier: PZfB2YyY50i0xSwmIEPvCDebfHc0OHBGxfVv6C5MNG4=
Subject key identifier: 57:F9:68:80:24:AE:95:3F:79:9E:A7:DD:03:2C:9A:EF:CE:8F:F7:C3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01850561590C549F5E78D66F74CB81D15AB8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/V_logCSulT95nqfdAyya786P98M.roa
Signing time: Mon 12 Dec 2022 08:09:03 +0000
ROA not before: Mon 12 Dec 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42891
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
91.193.212.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:59:0c:54:9f:5e:78:d6:6f:74:cb:81:d1:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57f9688024ae953f799ea7dd032c9aefce8ff7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:72:17:fd:a8:4c:56:c9:3e:8d:41:eb:7a:
4b:8b:fa:60:34:d9:6e:64:45:95:a9:33:cb:ad:48:
8e:3c:05:70:09:c8:c1:43:ab:91:fb:67:e2:fa:14:
ca:c8:25:4d:a0:57:7e:4a:2e:bb:e4:33:b1:da:c2:
db:b7:6a:cd:df:97:d6:eb:9e:62:b0:ce:4d:09:1d:
d2:7d:bb:8f:9a:94:9d:9e:2b:2d:00:56:aa:fb:bb:
8d:15:6b:7a:45:90:9d:42:ea:0c:a1:1d:a5:82:33:
eb:09:ac:33:67:74:93:9a:7d:51:76:a9:84:83:f3:
4f:6d:50:95:a7:6d:10:44:cf:b0:39:5f:84:2d:eb:
5d:00:ef:fa:83:0d:56:51:55:4a:30:6d:e5:3a:b8:
a4:3c:61:e9:e4:9e:e5:a0:d7:f0:1f:77:40:23:c2:
01:f1:31:a7:b3:0f:cb:87:ff:99:4b:25:c9:59:b8:
09:47:16:28:c2:0c:5f:43:b4:70:d3:13:eb:62:b4:
f4:c7:3f:91:ac:58:71:36:d3:c7:bc:cc:83:bc:6a:
a3:7c:df:dd:23:94:a0:f6:0c:ab:81:0c:9b:80:82:
95:c1:c6:2a:bb:b0:f9:81:34:0f:80:04:24:59:54:
e8:86:16:62:0f:b9:6b:22:25:32:fc:0e:5c:f7:f7:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:68:80:24:AE:95:3F:79:9E:A7:DD:03:2C:9A:EF:CE:8F:F7:C3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/V_logCSulT95nqfdAyya786P98M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.212.0/22
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:15:51:17:9d:9e:d9:b2:39:dc:e1:b0:3c:79:2a:ff:35:e1:
3f:dc:0e:6a:c6:17:6d:e2:e9:f6:93:a5:7c:b3:cd:79:6f:4c:
0f:1d:5d:88:36:00:e4:83:b0:6f:ef:7a:5d:13:a1:5f:e2:c9:
a7:05:dd:19:c0:d1:cd:78:33:b1:a3:25:83:e1:e1:d1:7d:7b:
96:3c:82:60:66:7f:38:f6:7c:51:c7:8c:db:ea:fd:93:ad:d1:
b9:50:37:bb:56:d0:f8:5a:92:89:67:b3:81:9a:43:6b:07:d2:
ea:ad:04:3d:88:e0:c6:5c:61:90:0c:2f:f4:c3:3f:23:c7:20:
a6:f2:11:57:11:db:df:a6:8a:93:02:1c:b0:c6:15:8e:a7:5e:
e2:76:59:ca:d2:70:0a:38:f2:5e:6d:71:bc:dc:52:02:10:11:
97:af:79:d4:ca:d4:54:8c:82:6a:06:6b:d1:6b:6d:67:b1:6c:
bb:91:6b:6d:6f:8e:43:59:44:7d:63:c0:3a:aa:f1:cb:54:8c:
8f:01:5b:ae:7e:11:c6:de:5e:95:b2:e5:84:8a:96:5a:d4:44:
5d:85:2f:f1:5a:ae:de:c0:37:c5:37:14:93:46:25:55:e7:3d:
6f:7b:01:35:ee:c3:2a:6f:84:a0:eb:fd:d2:29:3e:a5:40:e2:
cd:11:7e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:33 2025 by rpki-client