Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jd4t3hkc8LWV8oTWBuOuw0GO8zA.roa
File: jd4t3hkc8LWV8oTWBuOuw0GO8zA.roa (raw, json)
Hash identifier: 6zRarrhR2ARuiFmVfujvZoFPW9QAjXGUbzoJo5mNO7E=
Subject key identifier: 8D:DE:2D:DE:19:1C:F0:B5:95:F2:84:D6:06:E3:AE:C3:41:8E:F3:30
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE40664581FF85354B35FD26A48396
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jd4t3hkc8LWV8oTWBuOuw0GO8zA.roa
Signing time: Mon 12 Dec 2022 09:33:03 +0000
ROA not before: Mon 12 Dec 2022 09:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 193.201.228.0/22 maxlen: 24
109.188.0.0/17 maxlen: 17
94.25.128.0/18 maxlen: 18
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:40:66:45:81:ff:85:35:4b:35:fd:26:a4:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dde2dde191cf0b595f284d606e3aec3418ef330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:6b:6c:b2:ff:ed:14:26:b3:46:33:95:c9:
2a:54:4b:82:9b:51:bd:ec:32:73:3b:1c:a2:5a:bf:
1e:86:d8:b6:65:56:e2:03:da:14:12:e8:b3:4f:b3:
21:36:c2:24:97:04:10:96:c4:f7:9a:44:0f:4a:0a:
35:cc:b2:4f:34:59:b5:46:85:cd:2b:e9:86:6d:2b:
d2:4e:7d:30:16:36:66:d4:ab:fe:b1:02:55:38:ef:
6f:e2:df:64:ee:70:e6:09:ac:7d:c5:e6:5b:36:c3:
38:2d:73:5c:d1:66:58:15:ce:9a:d6:e1:70:e7:0a:
c7:9e:f7:3b:32:8d:05:00:ad:8c:04:4c:c7:d4:20:
0e:39:68:6e:00:e8:08:2e:cc:29:7c:8e:00:de:e8:
2a:b0:82:6d:f1:22:e8:c6:9e:c5:42:68:b5:02:97:
2e:83:0e:c1:36:2f:f1:c9:c2:a9:29:d8:31:26:f8:
a1:5e:39:76:57:e3:2f:74:b0:fb:3f:a9:e4:e3:33:
eb:a4:5b:f3:d5:8c:70:8d:ab:81:c1:a3:31:1f:fc:
39:ee:ea:fd:ee:84:fb:40:c7:1b:05:a9:87:0d:94:
56:f5:fe:b9:a2:62:4b:3e:75:03:83:11:16:80:b4:
f9:37:a6:3a:9a:d4:26:17:5d:7c:67:6a:fd:0e:a1:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:2D:DE:19:1C:F0:B5:95:F2:84:D6:06:E3:AE:C3:41:8E:F3:30
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/jd4t3hkc8LWV8oTWBuOuw0GO8zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/18
109.188.0.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
05:91:92:a3:f2:95:8b:89:b3:b1:7b:d5:8d:be:97:ad:3c:48:
8f:0f:e6:5d:6c:2e:b7:de:b7:5a:25:db:45:ab:79:f4:2b:38:
8d:08:8e:ab:08:13:94:4a:14:ff:2d:75:54:9a:36:cb:e7:df:
40:52:83:b3:25:f7:2b:36:fe:24:98:49:6f:d6:74:0f:67:29:
21:5a:c5:e5:e0:52:d3:56:95:e5:b6:c9:fe:d3:70:a7:7a:6e:
29:65:2f:bc:43:59:14:c8:ea:fb:58:81:f9:c8:e3:fc:6b:64:
f3:e1:10:ac:38:7e:f3:b9:a5:f0:1e:3b:30:9d:32:e5:2a:20:
99:d7:b9:78:97:d2:ee:76:af:69:1b:0f:5b:c6:e7:0d:70:3d:
c4:99:ef:2a:7e:9b:a7:3e:c5:ab:0c:c7:c4:10:29:a3:e9:f8:
12:9a:d1:73:04:43:b7:8c:d1:0b:88:2d:83:17:bc:08:37:6f:
9a:d9:3f:aa:80:1c:a2:38:66:75:e1:dc:8b:a9:4d:18:06:da:
5e:cd:6c:45:9c:84:2e:1c:e7:43:7e:2f:2e:e8:32:10:0b:cb:
84:94:58:75:f6:0e:dd:14:93:06:cb:12:07:35:0c:43:db:00:
4f:55:5a:1c:f8:a8:2e:5d:44:9a:9d:6d:ef:b4:92:07:5e:e6:
9b:da:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:53 2025 by rpki-client