Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/W3qhbbfuLOSdWv85BJuG4LfRGVM.roa
File: W3qhbbfuLOSdWv85BJuG4LfRGVM.roa (raw, json)
Hash identifier: B6XpT3tH6nHE6QADyO1oEihFBZLaL10Rn64brJqyq3Y=
Subject key identifier: 5B:7A:A1:6D:B7:EE:2C:E4:9D:5A:FF:39:04:9B:86:E0:B7:D1:19:53
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BC05CF9CC158AD1CDFEC76A9647ED
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/W3qhbbfuLOSdWv85BJuG4LfRGVM.roa
Signing time: Thu 08 Dec 2022 10:33:04 +0000
ROA not before: Thu 08 Dec 2022 10:33:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 20
109.74.112.0/21 maxlen: 21
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:c0:5c:f9:cc:15:8a:d1:cd:fe:c7:6a:96:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b7aa16db7ee2ce49d5aff39049b86e0b7d11953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:b3:d4:ce:a2:dc:66:37:c0:f1:7e:65:9e:
6f:3f:b3:31:3a:6d:38:eb:63:24:67:1f:db:bd:d9:
72:d6:0b:1e:9a:17:c8:c3:cf:9d:38:d2:b1:f6:be:
ce:05:35:3a:a5:05:b7:31:63:56:aa:59:66:bd:f3:
03:4c:8a:65:eb:3b:bf:1d:ba:1e:81:31:0b:f6:c6:
c1:17:57:78:a5:44:ae:ee:92:76:fd:dd:30:cf:ea:
51:d5:21:1e:bb:91:7f:01:ab:cc:b4:0a:d9:75:40:
ac:18:05:db:1b:15:7e:f4:fe:4f:ee:32:73:53:e9:
e4:9d:06:93:05:a3:b3:48:b0:33:38:51:09:ed:ea:
8c:d8:04:0b:f6:e2:88:c2:1e:71:47:69:d0:9f:23:
64:2f:9d:0d:92:0a:df:51:e7:57:61:27:c6:74:e0:
0c:1b:c2:19:d9:69:e7:37:bf:11:ca:8a:48:4a:d9:
84:31:66:36:02:3f:d7:ed:04:5e:e1:c8:f1:34:fa:
e7:c5:87:96:2d:30:95:f6:ae:5e:d3:a0:87:f9:66:
29:99:f5:84:1d:13:f4:e5:ef:28:c0:94:89:88:d3:
39:bd:c4:ef:e9:c0:73:a6:5e:73:6c:d9:07:77:fc:
da:ca:d1:c9:ec:e0:e5:c7:a2:1a:26:6d:c4:fc:73:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7A:A1:6D:B7:EE:2C:E4:9D:5A:FF:39:04:9B:86:E0:B7:D1:19:53
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/W3qhbbfuLOSdWv85BJuG4LfRGVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:24:c3:df:58:6f:a4:ca:e9:a0:2b:c6:2b:40:78:1f:51:50:
7c:9a:d9:7c:11:92:48:03:16:c7:16:09:80:c8:c3:6f:49:85:
c0:0f:06:1e:ce:d8:4a:f1:9b:2b:e4:9f:38:ec:81:1c:8a:5b:
de:b7:5a:a4:73:8e:33:c9:3a:dd:fc:97:ae:2c:39:38:ee:fc:
da:eb:ee:21:0c:76:1d:44:63:21:e6:fd:ff:6b:70:42:fc:bf:
d0:ce:1e:40:c9:f8:95:0a:94:9c:38:11:db:6a:26:3e:54:c1:
f8:a8:7a:2b:4c:e8:f4:3b:93:f1:81:01:bb:27:6e:79:8b:c9:
42:6b:bf:89:99:de:59:1e:72:ad:f8:5c:7c:e0:bf:2f:01:29:
fb:59:62:81:a2:47:b7:79:ef:a6:1a:ac:f4:53:b3:4a:ba:6b:
fd:53:36:64:f4:63:17:0a:0a:e2:9d:f0:7c:0e:c2:25:b1:63:
c8:1f:aa:2f:5f:04:1b:6a:f7:bd:67:df:ad:78:26:44:07:89:
d4:32:06:21:b9:9d:75:49:a7:7d:b0:77:5a:ed:d3:55:8f:ec:
c6:78:35:53:15:dd:fb:a8:e1:0b:53:b5:4e:7c:43:5d:e9:88:
c1:b4:a8:e5:62:14:b9:84:95:89:63:fa:f6:74:cd:88:38:e5:
8a:58:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org