Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y2BVAkQNKa_m1UgvZ62kpLJPtC0.roa
File: Y2BVAkQNKa_m1UgvZ62kpLJPtC0.roa (raw, json)
Hash identifier: gvZFtt8My0hc6qFhDsB8uXa+yUAVOHQb2PHflndsUMA=
Subject key identifier: 63:60:55:02:44:0D:29:AF:E6:D5:48:2F:67:AD:A4:A4:B2:4F:B4:2D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE3EA42E87A1F07D5A6DA55BF1A757
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y2BVAkQNKa_m1UgvZ62kpLJPtC0.roa
Signing time: Mon 12 Dec 2022 09:33:03 +0000
ROA not before: Mon 12 Dec 2022 09:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:3e:a4:2e:87:a1:f0:7d:5a:6d:a5:5b:f1:a7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63605502440d29afe6d5482f67ada4a4b24fb42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:32:71:e7:18:33:03:84:b5:4a:ed:21:ca:d4:
94:c6:91:de:ad:96:90:1d:fd:a3:02:5c:79:a6:db:
d2:f2:ed:3e:c0:30:63:4a:cb:00:f3:dd:0b:70:a7:
2f:70:0a:bf:42:01:6d:1e:7b:cd:db:73:ba:87:93:
e0:e0:00:7d:cd:8e:19:d8:10:81:6b:73:20:ed:38:
3b:8f:cb:82:96:ed:8a:0a:1f:6b:78:62:b5:e2:f9:
60:e8:01:3a:66:c1:b2:44:c0:fe:63:6b:a1:9b:a9:
d2:2e:b3:46:1b:c0:35:cd:ff:6d:eb:6e:ab:46:63:
cc:cb:ce:7f:1a:78:bd:a3:e1:49:23:ba:b3:85:1d:
35:28:59:ca:22:e3:ea:1a:49:c6:fb:25:d4:9a:95:
72:f9:2d:24:93:67:d4:f6:34:6a:b0:9e:32:34:7a:
c9:c5:b9:39:9f:8e:89:4a:68:72:b3:cf:d7:76:8f:
cb:66:c7:bc:7c:0f:0e:ca:53:c9:cc:ac:83:34:f6:
e6:fe:22:a3:f1:10:09:ab:8c:60:ac:1f:19:83:af:
c4:63:94:51:27:1b:47:09:b3:56:a6:bd:6d:03:57:
d7:e3:20:e8:93:99:89:37:24:80:fd:4f:c0:3d:86:
10:ce:b8:ba:27:36:02:a4:4b:15:e4:11:aa:8c:92:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:55:02:44:0D:29:AF:E6:D5:48:2F:67:AD:A4:A4:B2:4F:B4:2D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y2BVAkQNKa_m1UgvZ62kpLJPtC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:4e:c1:3a:8d:63:6e:d8:bd:ab:7a:7d:b4:34:73:d2:85:5e:
3e:ac:74:5a:d3:2a:23:7e:78:da:51:5a:d1:bb:b8:85:69:64:
bf:8c:fb:73:f4:a2:d0:9b:9c:53:c2:06:cc:f3:84:aa:fc:57:
cc:28:52:56:89:15:f3:75:78:36:e5:49:0a:73:36:73:ce:fe:
8c:54:a7:a3:39:d5:ae:c3:25:84:5f:e9:93:0d:d9:90:b4:d6:
41:f0:3e:0d:ba:51:e2:4e:f1:51:b8:4c:4c:4e:97:dd:20:1e:
de:b9:65:39:07:3a:78:7b:e8:db:39:d3:0d:46:64:99:8e:94:
92:d3:1d:d3:cc:c2:5c:4e:4f:c8:8c:c3:25:da:fb:f8:57:f4:
56:59:9d:2f:90:14:3e:84:38:6e:a9:84:68:47:ee:26:70:b5:
ea:73:64:d6:6c:c3:ac:89:de:6f:55:4a:57:2b:73:fc:e8:a1:
c1:b2:3a:7d:5f:f3:57:b7:d1:9c:35:44:d9:db:fe:ae:17:06:
8b:31:04:27:00:93:cb:54:f5:86:ff:97:2c:79:72:21:e4:26:
d8:48:a7:ff:02:95:ff:25:75:54:16:f1:2f:8e:e3:3e:e0:d5:
82:2d:d4:8f:f6:c8:7f:7f:cc:95:3c:02:32:70:a0:9b:d8:99:
ab:0d:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:43 2025 by rpki-client