Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y8En8ijIO0nJvDNtJyBvqQyayBY.roa
File: Y8En8ijIO0nJvDNtJyBvqQyayBY.roa (raw, json)
Hash identifier: JvpGErLGPZFJr/2VeIyR6HgOS4rS668SGfBEPT3OEi8=
Subject key identifier: 63:C1:27:F2:28:C8:3B:49:C9:BC:33:6D:27:20:6F:A9:0C:9A:C8:16
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E06E7BFD302F740B6E257860BF08
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y8En8ijIO0nJvDNtJyBvqQyayBY.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20632
IP address blocks: 84.204.230.0/24 maxlen: 24
212.14.160.0/19 maxlen: 19
84.204.160.0/20 maxlen: 20
82.196.64.0/19 maxlen: 19
84.204.176.0/21 maxlen: 21
81.24.128.0/20 maxlen: 20
79.171.8.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
109.124.108.0/22 maxlen: 22
217.195.64.0/19 maxlen: 19
109.124.64.0/18 maxlen: 18
213.172.0.0/19 maxlen: 19
84.204.0.0/17 maxlen: 17
93.153.128.0/17 maxlen: 17
93.153.144.0/21 maxlen: 21
93.153.158.0/24 maxlen: 24
93.153.162.0/24 maxlen: 24
93.153.161.0/24 maxlen: 24
195.144.224.0/19 maxlen: 19
212.119.160.0/19 maxlen: 19
80.247.176.0/20 maxlen: 20
81.3.128.0/18 maxlen: 18
91.193.212.0/22 maxlen: 22
84.204.132.0/22 maxlen: 22
94.25.248.0/21 maxlen: 21
84.204.139.0/24 maxlen: 24
84.204.138.0/24 maxlen: 24
213.182.160.0/19 maxlen: 19
84.204.136.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 19
212.44.64.0/19 maxlen: 19
82.140.64.0/18 maxlen: 18
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 17
46.47.192.0/18 maxlen: 18
62.182.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e0:6e:7b:fd:30:2f:74:0b:6e:25:78:60:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63c127f228c83b49c9bc336d27206fa90c9ac816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:15:a3:59:d6:65:d3:21:e3:35:3e:9a:48:
5d:7e:9b:28:29:6b:96:58:03:13:34:6a:26:53:32:
72:45:fe:5e:67:59:fd:e7:27:96:21:29:fd:9f:d2:
77:d8:99:a1:17:d8:13:9f:20:40:4b:c7:57:ee:9d:
c4:96:62:ec:2a:0e:76:6d:83:94:88:fc:e7:cc:2c:
73:a5:67:bb:a7:cc:0b:02:db:f8:63:f9:d8:48:d6:
78:80:f1:02:b6:52:86:83:e3:e4:a4:9d:2e:fe:04:
a5:20:14:95:8e:01:3a:29:7f:69:88:d3:6f:6d:18:
04:e7:9c:1d:ff:37:0f:19:a2:4c:c2:7c:37:be:09:
b8:b3:b5:75:5a:89:e3:36:94:a9:c5:2c:54:ea:18:
6d:7e:b1:f7:ef:45:86:1a:b8:70:41:0e:31:e5:d6:
2f:fa:2a:10:00:a7:c3:33:00:33:bc:0f:dd:11:59:
10:7e:19:67:8f:58:02:e4:56:e7:21:89:12:64:2d:
a3:86:da:3c:3b:43:e5:f0:86:a5:9b:90:01:88:05:
ab:6e:2f:60:09:e2:24:34:c0:11:6f:4c:13:e2:ae:
93:5b:9b:ec:c3:54:12:55:9a:7c:7f:0f:03:0e:7f:
e3:63:d1:21:c7:33:c7:2b:d1:78:c2:b1:b2:6f:88:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:27:F2:28:C8:3B:49:C9:BC:33:6D:27:20:6F:A9:0C:9A:C8:16
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y8En8ijIO0nJvDNtJyBvqQyayBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
62.182.128.0/21
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
91.193.212.0/22
93.153.128.0/17
94.25.248.0/21
95.137.0.0/17
109.124.64.0/18
195.5.128.0/19
195.144.224.0/19
212.14.160.0/19
212.44.64.0/19
212.119.160.0/19
213.172.0.0/19
213.182.160.0/19
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:a5:81:6e:85:f1:9a:3b:c0:89:dd:23:c0:6d:70:e0:e7:0e:
08:98:ff:d5:94:f2:25:37:b8:56:d6:f6:0d:54:c9:0c:4f:e7:
47:b9:e5:12:b8:f5:11:a0:c9:dd:a2:a4:03:f3:34:23:93:fb:
56:01:35:97:33:9e:1a:1f:c6:01:94:8a:87:a5:f9:30:d4:26:
85:ec:3e:d6:65:b9:fa:82:3c:1c:be:32:48:fb:f1:cf:40:24:
39:c9:65:75:36:a8:d3:a5:c9:c7:85:46:68:08:07:7c:39:10:
d5:80:63:2c:23:86:fb:40:f0:46:15:39:36:20:11:26:e4:4d:
d7:d0:a9:ef:2c:0c:72:0f:16:b1:a4:59:c1:8b:06:e9:8e:90:
59:b0:b1:77:3a:8d:86:7d:d9:17:7f:7d:85:35:1b:c2:2f:e1:
cc:50:72:11:e9:4b:7d:e2:7c:56:81:c9:c0:59:6c:4a:82:ea:
68:ea:66:3b:81:f5:b4:1a:b0:dc:a1:67:7b:03:07:c2:8b:9d:
eb:9c:39:c9:89:42:54:1d:8b:81:e1:ea:e2:30:55:bc:dc:39:
64:75:b1:a6:fe:ff:a5:7b:00:26:c1:07:32:41:0f:33:32:1b:
b8:71:4b:f8:54:76:0f:0b:8b:79:f4:43:5f:52:22:c8:bd:7e:
cf:15:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:33 2025 by rpki-client