Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eI0W-2Xd_arGtOM3jL8PkshjUfc.roa
File: eI0W-2Xd_arGtOM3jL8PkshjUfc.roa (raw, json)
Hash identifier: HGEy8pbsOPnyo70SysY9UN122HgSFBzoBF3lj1rDgr8=
Subject key identifier: 78:8D:16:FB:65:DD:FD:AA:C6:B4:E3:37:8C:BF:0F:92:C8:63:51:F7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F146413B321DE15347434B0A301EF002
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eI0W-2Xd_arGtOM3jL8PkshjUfc.roa
Signing time: Thu 08 Dec 2022 10:27:04 +0000
ROA not before: Thu 08 Dec 2022 10:27:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:41:3b:32:1d:e1:53:47:43:4b:0a:30:1e:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=788d16fb65ddfdaac6b4e3378cbf0f92c86351f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:68:60:39:cb:5a:5b:6f:76:20:ff:8e:06:
db:78:50:49:3a:c8:9f:d7:04:47:4c:01:8a:fe:64:
82:69:54:ac:77:e1:99:c9:81:b5:ac:40:ca:bd:94:
99:58:76:e6:9e:3d:86:d5:f4:fc:0e:0e:1b:30:3e:
c8:14:4c:a6:28:e1:81:df:5f:0d:61:55:30:53:bd:
f4:6e:8b:6e:5e:de:65:8d:a1:5c:4e:69:51:e6:de:
c1:f7:57:12:bb:72:c9:b5:b5:bf:40:33:4b:3e:91:
81:c6:3a:bb:db:b5:34:be:39:65:19:60:38:7d:46:
b1:bb:c3:ab:79:bd:8d:81:5f:75:a2:0a:52:16:39:
26:62:66:56:e0:cd:6c:36:59:b4:aa:85:18:ad:fa:
f0:96:e4:e3:c5:95:6f:b5:97:d8:25:9f:c5:86:8e:
68:c0:0c:9d:1c:56:c4:e3:5d:81:ca:a8:da:2c:47:
f3:4f:44:31:4d:2b:d7:9b:1e:21:e6:22:73:35:53:
5e:63:45:83:5a:2a:a4:ed:3f:1a:4b:b0:80:6b:29:
58:8a:3c:37:5f:fa:14:f4:95:7a:0a:93:b1:0f:c6:
e5:81:13:aa:bc:b1:ba:e9:8a:8b:c3:0e:90:ec:69:
3e:59:bc:5e:41:43:5b:9c:c4:46:96:09:02:f8:bc:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:16:FB:65:DD:FD:AA:C6:B4:E3:37:8C:BF:0F:92:C8:63:51:F7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eI0W-2Xd_arGtOM3jL8PkshjUfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:65:9d:33:e9:3e:fa:c7:56:c6:5a:92:3b:bf:48:91:db:c2:
9b:9c:b4:d5:f0:ea:0b:b1:77:2a:51:02:32:b0:58:d7:08:2b:
c4:07:41:28:3c:38:db:7c:3d:d8:a2:b7:0b:97:30:0c:4f:61:
f8:bb:a6:2d:12:64:c8:f8:c2:15:f6:3e:0f:5c:05:7c:86:a1:
5d:4c:14:c2:f2:96:d9:19:64:87:f4:1b:d7:a9:fb:98:47:ec:
ab:71:38:06:47:ec:25:bd:6e:85:6b:7a:80:3d:cb:07:89:f3:
95:d0:8b:37:7c:b4:a4:92:37:b9:b5:0b:77:bb:73:1b:e2:63:
ce:e2:e0:e4:1f:dd:ed:f5:63:a1:e9:dc:0e:50:e6:39:f6:04:
6e:b9:3e:1b:20:68:6a:ad:7f:7f:04:6a:d6:6b:c2:9b:06:00:
eb:a8:cc:8c:07:7f:10:62:3f:cd:0e:1a:c2:1d:36:db:87:f2:
1d:c1:9d:8d:cc:92:00:7f:05:d6:d6:49:69:1f:54:68:9d:3c:
00:e3:f1:50:44:c0:85:6a:82:00:68:b4:b6:1f:97:90:8a:32:
a5:42:30:63:b5:0d:81:05:65:21:1b:7e:af:70:df:c6:51:a1:
9a:54:a5:00:29:bc:f3:f6:57:61:e9:af:68:1c:20:7f:98:47:
8a:03:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:22 2025 by rpki-client