Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rkLZDsjKwUf9Ccdn5pe3ORX_FLM.roa
File: rkLZDsjKwUf9Ccdn5pe3ORX_FLM.roa (raw, json)
Hash identifier: nq/pSk/oKObkO9wGJsMNx+krfTIBIDrWVFjVVobSvm8=
Subject key identifier: AE:42:D9:0E:C8:CA:C1:47:FD:09:C7:67:E6:97:B7:39:15:FF:14:B3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BB85CE5DEAFD2D1F1741093E66B59
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rkLZDsjKwUf9Ccdn5pe3ORX_FLM.roa
Signing time: Thu 08 Dec 2022 10:33:02 +0000
ROA not before: Thu 08 Dec 2022 10:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
109.124.64.0/18 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:b8:5c:e5:de:af:d2:d1:f1:74:10:93:e6:6b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae42d90ec8cac147fd09c767e697b73915ff14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:db:e2:ca:4c:aa:2a:ff:54:10:60:1a:b4:
e5:47:4d:53:5a:fb:96:90:58:22:7a:44:b3:b6:b0:
76:5a:3e:d8:54:20:16:e0:a8:2b:3a:6f:e2:22:7e:
5d:ae:71:47:b4:91:4c:6e:d7:92:0e:fc:0e:7d:9e:
3e:42:50:d8:75:1d:79:06:4b:e3:60:1d:b1:64:3f:
00:ac:e2:db:4f:c3:c9:0d:b7:af:4b:61:a2:70:39:
a9:8a:45:fd:4f:e1:93:a7:62:4a:f0:56:23:81:c2:
20:f2:66:e9:a8:02:a6:7d:15:92:d6:80:c5:5f:f9:
08:75:11:2e:93:94:80:98:0a:ad:0d:05:0c:40:90:
05:f2:05:5e:47:91:2b:4a:31:63:4d:d4:e7:18:ac:
32:e1:bf:a4:f1:26:35:aa:46:8c:a8:c7:e4:37:5f:
7f:e4:45:58:e0:62:e3:79:f0:2c:eb:28:2b:99:ea:
e4:48:bd:c3:ac:2d:b0:92:a0:ed:34:04:c3:19:67:
7e:cc:99:b9:46:8e:40:55:0d:3c:b4:8b:a3:ec:22:
07:e6:0d:2c:36:8f:7b:76:ba:94:84:04:5b:ab:fd:
30:2c:dd:45:15:2f:04:b8:2f:2f:10:d5:e8:ad:33:
4c:22:85:f1:8b:96:9b:8b:af:30:42:23:01:1d:3a:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:42:D9:0E:C8:CA:C1:47:FD:09:C7:67:E6:97:B7:39:15:FF:14:B3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rkLZDsjKwUf9Ccdn5pe3ORX_FLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:db:aa:8f:dc:2f:39:9a:31:64:90:01:8c:ec:21:6d:0d:87:
1c:08:5a:ce:5f:29:c1:bf:fb:47:6b:08:26:79:e8:a7:f1:47:
9c:d6:47:1d:a3:16:16:f5:93:f8:c4:8e:a1:aa:0f:46:cd:1e:
69:ab:50:df:e4:9a:62:4f:b0:79:47:e2:87:94:65:0c:7d:56:
71:f8:c9:7a:88:d5:1a:09:4f:e5:f3:17:1b:2b:b8:a5:1e:a6:
7e:05:57:10:cd:df:cd:59:72:dd:23:13:52:7e:06:30:d7:e9:
86:8b:3f:99:7d:28:06:a8:f4:88:7d:a0:6e:0e:11:0f:9f:b6:
5c:7f:d7:7e:44:38:fa:96:f6:77:2f:ca:43:76:39:24:26:9f:
85:b7:17:2e:91:7f:18:cd:66:26:30:7f:78:d6:e3:c1:1f:04:
96:98:bb:ac:80:cf:55:96:0e:e2:42:e5:c8:8a:30:3f:a4:9f:
f1:fa:0b:56:c7:12:43:ea:bd:95:6e:84:36:3a:b1:9e:38:99:
8b:3b:5b:8a:b9:e2:8c:1c:d9:5c:d9:22:f0:36:b0:0a:ab:54:
b0:80:b3:d0:14:9c:d4:19:d8:fb:5b:4e:80:4a:8a:f3:71:65:
0d:ea:4f:bb:fa:71:f4:f0:70:9c:11:1f:ec:01:c8:1d:9d:f0:
bf:65:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:19 2025 by rpki-client