Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pRX7VnLKhrnk4_yGXxmlB5Adg80.roa
File: pRX7VnLKhrnk4_yGXxmlB5Adg80.roa (raw, json)
Hash identifier: RF9dwSivngJl4ytVKKH/x4RqyTRciplJE4d2rzmwaNU=
Subject key identifier: A5:15:FB:56:72:CA:86:B9:E4:E3:FC:86:5F:19:A5:07:90:1D:83:CD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842CC83DBEF457ADCE060FBD41004B08F0
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pRX7VnLKhrnk4_yGXxmlB5Adg80.roa
Signing time: Mon 31 Oct 2022 06:43:51 +0000
ROA not before: Mon 31 Oct 2022 06:43:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12396
IP address blocks: 212.109.175.0/24 maxlen: 24
195.191.18.0/23 maxlen: 24
195.49.192.0/21 maxlen: 21
194.247.168.0/23 maxlen: 23
91.219.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2c:c8:3d:be:f4:57:ad:ce:06:0f:bd:41:00:4b:08:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 06:43:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a515fb5672ca86b9e4e3fc865f19a507901d83cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:0d:b0:e0:95:48:a0:f5:2b:2a:18:62:9e:
15:04:0e:a2:58:44:3b:a2:c1:d3:14:27:fa:d9:42:
3b:da:a1:0e:e8:f8:38:e7:b6:54:39:60:68:1b:6a:
2a:32:d5:35:2a:10:2f:36:e6:e8:a6:b9:00:49:79:
21:37:71:27:ae:f0:74:73:f1:bc:2e:68:57:ab:50:
20:4d:69:87:c6:a4:be:57:a7:0b:99:10:77:f1:09:
c7:64:65:30:71:3b:08:61:09:9d:7a:59:cb:24:cd:
c8:65:f2:d6:82:f8:f5:be:db:93:41:a1:b4:a3:7a:
03:eb:43:6b:07:38:95:6e:75:80:54:01:b9:21:13:
cf:31:a6:d0:1e:9b:0b:2a:7c:82:91:b1:a3:68:c4:
6b:83:2f:43:66:c7:62:ec:9f:dc:a2:f2:56:a0:44:
87:9d:03:4f:0e:f6:e0:fb:e1:f6:d1:65:98:49:52:
97:50:85:4a:ad:b4:30:9b:4c:16:70:c5:73:f2:51:
a5:7c:81:85:4c:06:fb:99:65:51:f2:2f:3d:14:70:
5c:50:db:bd:0a:6a:3a:26:07:57:3f:10:41:9f:ec:
e8:23:f9:86:bc:a1:5f:06:d9:3a:fd:c9:38:bd:3a:
ae:8c:ce:eb:f7:c1:8b:d6:db:f4:92:0c:9e:2f:6a:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:15:FB:56:72:CA:86:B9:E4:E3:FC:86:5F:19:A5:07:90:1D:83:CD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pRX7VnLKhrnk4_yGXxmlB5Adg80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:af:22:f8:6c:07:9e:cc:11:47:d5:ae:59:6d:4b:be:e9:d9:
73:d3:64:fb:02:25:de:95:7c:88:62:0d:24:17:66:d7:a6:5f:
50:e4:4a:57:90:fa:88:86:21:bb:5e:3c:23:ec:cd:a8:0a:8d:
17:bf:a8:aa:55:db:3a:8a:41:28:07:1d:31:32:a7:5c:23:83:
0f:cf:84:f3:b2:c3:88:23:68:72:54:a9:ae:28:8d:b2:d2:60:
e1:12:e7:8e:19:49:99:39:e5:9f:2d:29:b8:45:e0:5a:ea:13:
b5:6b:f1:09:d9:b3:a4:c5:0f:ae:d5:88:ca:cc:7b:f4:63:0c:
ca:45:5c:74:6d:a9:f1:f4:ae:04:bc:6e:be:03:96:53:3e:84:
1e:40:44:fc:b3:d9:6e:e5:54:8a:19:d1:3e:23:fa:9b:89:dc:
03:38:5b:bf:66:59:aa:3b:e0:8d:34:44:e7:2c:a7:bd:8a:45:
69:74:ea:e0:79:8a:75:db:c8:f1:89:df:86:23:b8:96:70:96:
68:65:bb:99:00:1c:53:56:f0:28:32:e8:e2:6e:21:db:7e:ee:
21:b5:ec:99:28:74:d9:9c:d8:6d:de:9b:6f:88:60:0a:50:a0:
64:b2:b9:15:ae:ad:93:c6:c9:78:e0:70:78:ad:1e:3e:7c:69:
9e:a9:ba:00
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYQsyD2+9FetzgYPvUEASwjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDMxMDY0MzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTE1ZmI1NjcyY2E4NmI5ZTRlM2ZjODY1ZjE5YTUwNzkwMWQ4M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyANsOCVSKD1KyoYYp4VBA6iWEQ7
osHTFCf62UI72qEO6Pg457ZUOWBoG2oqMtU1KhAvNuboprkASXkhN3EnrvB0c/G8
LmhXq1AgTWmHxqS+V6cLmRB38QnHZGUwcTsIYQmdelnLJM3IZfLWgvj1vtuTQaG0
o3oD60NrBziVbnWAVAG5IRPPMabQHpsLKnyCkbGjaMRrgy9DZsdi7J/covJWoESH
nQNPDvbg++H20WWYSVKXUIVKrbQwm0wWcMVz8lGlfIGFTAb7mWVR8i89FHBcUNu9
Cmo6JgdXPxBBn+zoI/mGvKFfBtk6/ck4vTqujM7r98GL1tv0kgyeL2pA7wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKUV+1Zyyoa55OP8hl8ZpQeQHYPNMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvcFJYN1ZuTEtocm5rNF95R1h4bWxCNUFkZzgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCW9t8AwQB
wveoAwQDwzHAAwQBw78SAwQA1G2vMA0GCSqGSIb3DQEBCwUAA4IBAQChryL4bAee
zBFH1a5ZbUu+6dlz02T7AiXelXyIYg0kF2bXpl9Q5EpXkPqIhiG7Xjwj7M2oCo0X
v6iqVds6ikEoBx0xMqdcI4MPz4TzssOII2hyVKmuKI2y0mDhEueOGUmZOeWfLSm4
ReBa6hO1a/EJ2bOkxQ+u1YjKzHv0YwzKRVx0banx9K4EvG6+A5ZTPoQeQET8s9lu
5VSKGdE+I/qbidwDOFu/ZlmqO+CNNETnLKe9ikVpdOrgeYp128jxid+GI7iWcJZo
ZbuZABxTVvAoMujibiHbfu4hteyZKHTZnNht3ptviGAKUKBksrkVrq2Txsl44HB4
rR4+fGmeqboA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org