Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/h9o1SzcqtD0k5XBeat7BadRrHf4.roa
File: h9o1SzcqtD0k5XBeat7BadRrHf4.roa (raw, json)
Hash identifier: suPyYUqrJ7lJLn5hyc6N/Lnwvtg2ftAjycvJWA9Lf5I=
Subject key identifier: 87:DA:35:4B:37:2A:B4:3D:24:E5:70:5E:6A:DE:C1:69:D4:6B:1D:FE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243CE50E8E57F69014CDFE9EA0CA30C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/h9o1SzcqtD0k5XBeat7BadRrHf4.roa
Signing time: Thu 08 Dec 2022 15:04:00 +0000
ROA not before: Thu 08 Dec 2022 15:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:ce:50:e8:e5:7f:69:01:4c:df:e9:ea:0c:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87da354b372ab43d24e5705e6adec169d46b1dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:11:12:97:d0:1a:95:19:e2:c9:cd:90:1b:
a4:8a:97:9a:13:28:6c:f7:8d:64:ff:ed:19:e1:4a:
4c:97:63:9b:e2:24:0e:51:bb:73:ac:3b:18:f9:40:
e8:98:00:7a:50:41:4d:59:ad:08:fc:40:bc:76:3b:
44:51:96:bd:e3:44:6d:57:70:07:87:7c:55:fa:76:
3b:45:72:d7:1f:27:99:66:b5:e3:51:96:2a:fa:3d:
63:0d:c0:82:3a:0a:5e:12:56:24:20:55:ec:cd:6a:
07:64:5d:0b:a3:9d:79:09:82:22:7f:e6:29:fd:c9:
3a:d2:84:7c:57:e0:66:e1:61:83:cf:d9:29:ee:6d:
1e:e3:50:35:3c:20:62:ba:6b:0f:7d:c4:a0:66:ec:
3c:14:8f:c9:dc:b4:6f:42:23:d1:ff:9a:c5:37:58:
6a:5f:9d:90:66:69:22:27:cf:e0:ec:d5:23:af:b6:
ac:f6:8e:71:de:29:e3:f8:be:ab:ac:8d:a8:01:f8:
b4:d5:38:a6:d9:9b:2e:54:96:21:65:71:81:53:c8:
78:b2:e6:db:12:25:2f:c2:1b:ee:0a:a8:a0:bb:30:
b8:59:41:04:cc:ac:2e:f5:a5:3e:7c:cd:3b:74:b1:
02:ac:a2:ec:ff:7e:88:e5:56:41:b5:b0:62:17:47:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:35:4B:37:2A:B4:3D:24:E5:70:5E:6A:DE:C1:69:D4:6B:1D:FE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/h9o1SzcqtD0k5XBeat7BadRrHf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
80:d3:61:17:44:6b:d1:22:8d:ec:fb:c0:c2:3b:79:90:18:37:
64:64:de:cf:59:35:a1:8c:70:01:f3:99:9e:0d:19:86:8e:48:
d3:aa:22:ef:f1:77:cc:b0:68:6b:e4:34:b3:ad:71:38:16:61:
d9:c2:dd:75:e1:9b:9e:1e:b5:f6:9e:16:d6:29:22:e2:1b:02:
ac:fe:f4:8f:45:39:39:4c:6e:8d:b6:80:29:6a:55:e6:98:6b:
b5:95:b6:24:59:9b:c7:d8:65:3e:8d:70:32:7f:61:78:0e:77:
20:0e:48:e0:ad:c6:05:c1:b9:58:8f:b4:cb:70:3f:79:81:53:
4d:84:c1:de:94:79:a5:db:5d:d7:72:9b:95:28:8e:32:87:42:
2d:11:5f:36:40:d4:93:33:ff:47:93:01:db:4b:a4:a8:6f:8b:
ed:3e:e1:39:56:f9:7c:90:b5:38:b0:92:fa:c5:42:42:33:bc:
6e:24:13:70:21:db:3b:88:a3:56:9c:a4:b2:b3:76:c5:f3:6c:
dc:6e:a0:72:a1:bb:3a:bf:dc:5f:10:e4:48:35:b3:bb:e7:1b:
a7:fa:e9:28:a7:45:f4:d6:70:13:9d:5f:b2:38:40:05:63:d4:
cd:40:c1:e1:b2:bf:62:19:c1:f3:2b:69:26:da:dc:c7:8f:ff:
14:48:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:38 2025 by rpki-client