Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/i_3ZmOwjfZWzLOSYx2b7fnyu-MU.roa
File: i_3ZmOwjfZWzLOSYx2b7fnyu-MU.roa (raw, json)
Hash identifier: e64nCBa1/cIv/DbSCp8o+z5/om+HHZW3PkjQ2atcHrk=
Subject key identifier: 8B:FD:D9:98:EC:23:7D:95:B3:2C:E4:98:C7:66:FB:7E:7C:AE:F8:C5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E10E19A1219B725A41F07865A74891
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/i_3ZmOwjfZWzLOSYx2b7fnyu-MU.roa
Signing time: Mon 12 Dec 2022 10:28:33 +0000
ROA not before: Mon 12 Dec 2022 10:28:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 19
213.243.64.0/18 maxlen: 18
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 19
80.253.0.0/20 maxlen: 20
83.222.192.0/19 maxlen: 19
83.229.128.0/17 maxlen: 17
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:0e:19:a1:21:9b:72:5a:41:f0:78:65:a7:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bfdd998ec237d95b32ce498c766fb7e7caef8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:13:b3:5f:5b:80:6d:3a:8f:21:b7:6e:1b:
93:47:74:f8:5e:ee:f5:27:9f:b4:9b:3c:48:40:0b:
55:81:db:5a:c0:4a:10:5f:03:88:59:66:e6:84:50:
99:0a:72:6e:56:c9:7a:17:d5:95:9d:42:e5:74:88:
33:9f:f7:e4:83:66:ec:d7:b7:e3:e1:b0:59:fa:79:
56:85:13:70:33:19:b5:7a:9d:14:d0:e8:4f:a2:fa:
0b:91:1d:3c:e3:b5:07:b4:63:54:35:36:c1:ef:5c:
7f:4f:c8:11:c3:2f:35:87:a8:89:95:24:97:be:70:
ea:d5:fd:46:43:57:78:74:17:59:c6:1d:6d:39:69:
88:79:a1:67:b5:61:86:cd:1c:48:e6:99:a4:68:f6:
d9:1d:83:a0:b1:51:fe:20:57:2b:d2:e8:5c:c8:4f:
a4:b6:a8:a3:e2:79:10:ef:d0:eb:c1:c5:ba:30:62:
f4:44:57:bf:89:8b:de:29:6e:15:3c:ed:4e:9f:f4:
02:5e:1c:5a:2e:a6:85:94:e1:de:2a:71:6b:1c:b8:
e1:0d:e5:aa:f5:b3:37:f0:a7:df:9e:8b:49:a6:10:
82:04:58:ea:46:32:42:bc:2d:6c:85:5e:dd:14:74:
79:1d:de:ab:51:45:fa:27:7f:52:16:b2:e7:86:02:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:D9:98:EC:23:7D:95:B3:2C:E4:98:C7:66:FB:7E:7C:AE:F8:C5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/i_3ZmOwjfZWzLOSYx2b7fnyu-MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
188.162.0.0/16
195.230.64.0/19
212.69.96.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:47:05:76:2d:7f:eb:ce:c3:3b:11:30:2e:67:c4:14:c1:09:
f3:15:e4:3f:fc:e4:58:fc:70:84:a6:7f:f4:1e:50:6a:dc:16:
c5:65:5f:43:59:e3:ac:36:b4:f2:b9:ed:ad:6b:e7:6f:ee:6f:
1d:2e:cd:0e:6d:e9:a5:4d:92:dc:fe:e9:3a:4d:a0:c8:79:7c:
8c:b3:23:9d:41:81:e3:58:c4:d5:65:08:39:60:6f:80:3f:2a:
4b:91:d4:92:b6:31:ff:e4:31:0d:de:4f:54:cf:aa:f8:90:06:
ad:cc:a5:14:69:5c:d7:a7:99:27:5a:1a:12:b2:43:e5:15:f0:
c7:1d:c9:db:68:d7:91:3c:64:1d:3f:28:f5:b7:cd:fb:ed:01:
33:1f:57:d9:7a:3b:ab:b1:d9:9f:98:7d:a5:ee:be:e6:11:86:
ca:27:cc:58:9d:a2:6f:08:7c:f9:38:c6:ee:4e:5a:ee:b8:92:
4c:98:bb:13:3c:d0:91:98:ba:8b:94:97:e7:e1:d8:c3:05:54:
1c:e8:fb:2b:b6:a3:30:75:2d:66:f5:80:30:97:1e:fd:18:c9:
55:f0:29:13:37:dc:6b:3f:05:e2:62:01:07:26:26:77:b7:8f:
69:8f:e0:f1:26:c5:44:2b:67:fc:86:38:57:7e:6d:e0:62:59:
d5:7e:d2:65
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYUF4Q4ZoSGbclpB8Hhlp0iRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMTAyODMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmZkZDk5OGVjMjM3ZDk1YjMyY2U0OThjNzY2ZmI3ZTdjYWVmOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5oTs19bgG06jyG3bhuTR3T4Xu71
J5+0mzxIQAtVgdtawEoQXwOIWWbmhFCZCnJuVsl6F9WVnULldIgzn/fkg2bs17fj
4bBZ+nlWhRNwMxm1ep0U0OhPovoLkR0847UHtGNUNTbB71x/T8gRwy81h6iJlSSX
vnDq1f1GQ1d4dBdZxh1tOWmIeaFntWGGzRxI5pmkaPbZHYOgsVH+IFcr0uhcyE+k
tqij4nkQ79DrwcW6MGL0RFe/iYveKW4VPO1On/QCXhxaLqaFlOHeKnFrHLjhDeWq
9bM38KffnotJphCCBFjqRjJCvC1shV7dFHR5Hd6rUUX6J39SFrLnhgIgvwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFIv92ZjsI32VsyzkmMdm+358rvjFMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvaV8zWm1Pd2pmWld6TE9TWXgyYjdmbnl1LU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvAwQEPkAQAwQE
UP0AAwQFU97AAwQHU+WAAwMAvKIDBAXD5kADBAXURWADBAbV80AwDQYJKoZIhvcN
AQELBQADggEBADhHBXYtf+vOwzsRMC5nxBTBCfMV5D/85Fj8cISmf/QeUGrcFsVl
X0NZ46w2tPK57a1r52/ubx0uzQ5t6aVNktz+6TpNoMh5fIyzI51BgeNYxNVlCDlg
b4A/KkuR1JK2Mf/kMQ3eT1TPqviQBq3MpRRpXNenmSdaGhKyQ+UV8Mcdydto15E8
ZB0/KPW3zfvtATMfV9l6O6ux2Z+YfaXuvuYRhsonzFidom8IfPk4xu5OWu64kkyY
uxM80JGYuouUl+fh2MMFVBzo+yu2ozB1LWb1gDCXHv0YyVXwKRM33Gs/BeJiAQcm
Jne3j2mP4PEmxUQrZ/yGOFd+beBiWdV+0mU=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:04 2025 by rpki-client