Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ePakLTSg24jfKi12iHSr9PbCpeM.roa
File: ePakLTSg24jfKi12iHSr9PbCpeM.roa (raw, json)
Hash identifier: cA3SPGdgTCJTbQyFcKwHDILe22zhBTrnRDW8vpTq/xk=
Subject key identifier: 78:F6:A4:2D:34:A0:DB:88:DF:2A:2D:76:88:74:AB:F4:F6:C2:A5:E3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185056158824B4CF25277BED21FC86602AF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ePakLTSg24jfKi12iHSr9PbCpeM.roa
Signing time: Mon 12 Dec 2022 08:09:03 +0000
ROA not before: Mon 12 Dec 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.168.54.0/24 maxlen: 24
213.168.56.0/21 maxlen: 21
213.168.53.0/24 maxlen: 24
213.168.60.0/24 maxlen: 24
213.168.62.0/24 maxlen: 24
213.168.61.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.36.0/24 maxlen: 24
213.168.34.0/24 maxlen: 24
213.168.32.0/21 maxlen: 21
213.168.32.0/19 maxlen: 19
213.168.43.0/24 maxlen: 24
213.168.40.0/21 maxlen: 21
213.168.47.0/24 maxlen: 24
213.168.46.0/24 maxlen: 24
213.168.49.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/21 maxlen: 21
109.74.112.0/20 maxlen: 20
212.119.160.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:58:82:4b:4c:f2:52:77:be:d2:1f:c8:66:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78f6a42d34a0db88df2a2d768874abf4f6c2a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:72:da:66:0e:5c:f7:29:3e:22:46:b7:74:
7a:0d:70:26:1a:95:8d:73:8a:ca:eb:90:10:e9:2c:
10:5f:d8:44:c7:a8:a7:56:b9:8b:fa:95:f5:55:8a:
3c:6d:cb:c6:32:ab:a4:84:bc:f8:ac:ac:29:f5:69:
07:59:f6:6b:79:06:43:30:34:da:b9:9c:10:dd:6b:
c4:6f:ea:1c:eb:5e:ff:c4:df:ba:40:de:48:eb:a4:
48:2b:c8:ea:69:69:ea:31:f8:22:5c:ed:82:b7:96:
3a:64:b2:bb:03:91:9a:1d:b5:d3:45:af:78:b3:0b:
25:28:97:02:a7:17:ed:60:cb:e7:78:c4:fd:1c:d0:
8d:a4:fc:c4:b7:a3:de:b1:9c:f4:fd:f9:48:5a:f5:
e4:a9:3f:10:74:1d:ff:6f:99:53:51:48:ab:1b:e9:
ca:85:fc:9e:de:7c:c5:53:d0:89:f9:d3:f4:0f:65:
9f:22:18:86:18:19:88:0e:f8:0c:e1:49:3c:93:6a:
52:f2:8e:b4:bd:27:21:9c:52:88:f8:63:04:61:2b:
5e:c1:f7:53:7e:5e:ab:4f:40:0c:ef:93:ee:19:25:
8a:ea:76:d3:85:fb:e9:e1:f5:c3:8f:dd:b0:9e:16:
67:33:45:cb:5f:ef:a2:6e:72:8a:2d:b5:ec:89:f5:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:A4:2D:34:A0:DB:88:DF:2A:2D:76:88:74:AB:F4:F6:C2:A5:E3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ePakLTSg24jfKi12iHSr9PbCpeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
19:32:aa:8c:a3:73:04:04:8e:f5:59:42:f6:ac:7d:cb:88:f4:
94:01:a2:19:94:ec:cc:50:53:54:75:02:02:36:f4:e1:c3:06:
67:02:6a:31:69:a1:cc:e9:3e:6a:ef:25:de:fa:79:b4:93:bf:
a2:75:2c:87:5f:65:0f:50:46:6c:16:b0:dd:9a:8f:cd:3b:7f:
d9:25:fe:3e:a6:96:e4:4d:a3:5d:d4:e6:d7:07:c7:75:b4:2f:
76:c2:00:e8:94:12:5e:97:23:e8:d1:29:5f:0e:00:6d:de:0d:
8e:9a:2d:a5:32:e8:b5:0e:96:ae:88:0c:3e:04:87:53:76:89:
37:58:bd:1e:5a:5e:9a:29:89:31:9e:e2:bb:87:32:e5:9f:02:
78:5c:fd:87:6b:72:38:eb:38:e5:fe:fb:19:a6:94:91:5b:7f:
aa:e1:68:9c:f2:f0:cf:d9:69:0d:e5:43:4b:ba:a4:b9:45:3b:
9e:08:03:be:f7:59:46:50:95:11:6e:a5:b7:0c:0d:39:96:13:
89:09:b0:86:c0:da:aa:52:ef:0c:10:5b:1d:6b:63:a9:15:84:
29:0c:16:81:d7:67:cb:8c:f7:b9:ad:99:f0:0c:0b:67:50:cc:
f7:4f:44:e9:ac:f0:9a:62:37:8d:22:56:95:16:28:39:5e:66:
73:44:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org