Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/secvEeMvA5TW2iaoHhocGFKqTHk.roa
File: secvEeMvA5TW2iaoHhocGFKqTHk.roa (raw, json)
Hash identifier: KOrQLcObsn1hxndJur8SDaI0Tj+6XqN0O680BhYKIdE=
Subject key identifier: B1:E7:2F:11:E3:2F:03:94:D6:DA:26:A8:1E:1A:1C:18:52:AA:4C:79
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E1310D9564AF39F9CBD147A62E739B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/secvEeMvA5TW2iaoHhocGFKqTHk.roa
Signing time: Mon 12 Dec 2022 10:28:42 +0000
ROA not before: Mon 12 Dec 2022 10:28:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42891
IP address blocks: 188.162.0.0/16 maxlen: 24
91.193.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:31:0d:95:64:af:39:f9:cb:d1:47:a6:2e:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1e72f11e32f0394d6da26a81e1a1c1852aa4c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:73:c6:71:79:f1:c6:bc:15:80:11:95:b0:
bc:56:4b:b6:88:ff:e4:87:fa:91:7f:8a:b0:68:08:
3f:62:fd:6f:22:c2:5c:3d:30:85:d1:b0:4c:8c:c6:
00:09:1b:f6:c4:e3:ae:ba:30:79:f7:df:93:64:3f:
4b:d1:79:63:99:eb:54:5e:a4:fc:b9:ae:82:3e:3c:
3a:34:65:ff:34:e4:24:e2:91:3d:86:5d:eb:94:45:
52:e9:2e:e4:cd:31:cb:65:ad:45:86:96:c3:70:dd:
ed:23:a9:af:a1:f0:a1:74:5f:17:bb:00:db:70:48:
b1:06:65:4f:90:3c:8d:fa:14:2d:a8:6b:76:21:b5:
80:38:c1:90:8c:46:02:78:4d:5e:48:1f:2d:94:f6:
cd:4a:32:2e:24:d0:59:34:1c:fa:9a:57:d0:65:fc:
f0:39:01:8b:f1:eb:1c:18:4b:63:de:0f:86:7d:4c:
e3:41:f7:73:eb:41:3f:b2:c8:02:9f:83:13:4a:a8:
0a:5d:ac:bc:60:3d:3a:b5:12:2c:1e:de:fc:0d:e0:
27:14:1b:f3:3b:d9:b8:20:2a:a0:d0:26:d4:1a:95:
6c:d4:a9:9d:a9:ab:f1:d4:26:99:b5:d1:c6:23:f7:
0e:52:b2:d4:5e:12:87:fc:a5:5a:80:1c:76:8b:62:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:2F:11:E3:2F:03:94:D6:DA:26:A8:1E:1A:1C:18:52:AA:4C:79
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/secvEeMvA5TW2iaoHhocGFKqTHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.212.0/22
188.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:8f:3f:d9:93:25:ca:51:08:e8:3c:af:8a:01:aa:11:3e:7f:
ca:83:8f:37:9d:bb:a3:d1:52:ac:1c:60:c6:a5:99:83:c7:ed:
90:67:98:6e:25:61:38:06:31:93:ec:1b:ee:22:eb:e2:45:6d:
86:52:dd:b6:d2:19:0b:d1:1e:49:5e:64:f5:31:99:16:46:72:
29:57:76:6f:0c:e1:5d:8a:af:4f:a7:ea:b5:5c:5c:45:e2:5e:
b5:63:c5:55:99:71:70:cb:2e:ed:ed:41:f9:ba:eb:d9:01:94:
5e:3e:47:28:27:d1:a9:f4:ee:b8:73:f7:13:c8:f2:e1:8d:1d:
e4:4a:4b:42:d9:aa:44:d8:e2:1c:ca:07:8f:63:c4:fb:96:90:
14:d8:54:a7:72:cb:17:a5:96:5c:3d:2b:88:e6:fb:c3:75:fa:
ae:ec:a7:49:92:a7:6a:94:bf:75:4c:14:b4:18:1e:95:bc:62:
6b:28:8b:0f:24:09:27:af:e1:a0:4e:67:bb:6e:1c:1b:ae:61:
4b:f4:da:23:99:7f:9f:40:75:33:24:91:55:fc:cd:30:ac:88:
e6:fb:9e:13:77:5e:f8:2f:bb:7a:66:ee:3d:33:95:a6:86:c9:
95:59:88:fc:02:fb:34:b7:44:7b:5d:93:4f:30:08:95:99:71:
2a:b0:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:42 2025 by rpki-client