Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/syAfY9T8fSWvuylToOdQt6Gs_0g.roa
File: syAfY9T8fSWvuylToOdQt6Gs_0g.roa (raw, json)
Hash identifier: SUb0opoj8WWp/lArwmU5bfBNWCW+TACd5eDCsx0D8jg=
Subject key identifier: B3:20:1F:63:D4:FC:7D:25:AF:BB:29:53:A0:E7:50:B7:A1:AC:FF:48
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219E93131ADE7C6939E33C2F94096EC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/syAfY9T8fSWvuylToOdQt6Gs_0g.roa
Signing time: Thu 08 Dec 2022 14:18:15 +0000
ROA not before: Thu 08 Dec 2022 14:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42891
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
91.193.212.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:e9:31:31:ad:e7:c6:93:9e:33:c2:f9:40:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3201f63d4fc7d25afbb2953a0e750b7a1acff48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:1c:c2:f1:14:1b:60:c4:9e:ab:34:bc:fb:
6e:b3:56:44:61:bd:08:ce:85:70:27:e4:21:9f:ee:
d5:c0:da:43:9f:ca:2e:4c:d2:17:57:45:9f:ad:1f:
5c:e7:fe:84:0d:fc:ea:cc:1c:ce:49:e9:87:9b:f9:
18:82:3e:5d:6a:4e:ba:6a:4d:97:e0:27:2f:1f:ba:
c8:2a:af:41:2c:0d:05:89:27:42:00:d1:96:7a:44:
9d:8c:95:56:4e:19:1a:aa:2c:6c:fb:93:9b:e9:1d:
ee:f2:bf:95:5d:29:74:cd:3f:60:27:5d:eb:3e:55:
e7:34:42:a7:0f:6f:fe:f8:89:db:ea:6e:ad:99:92:
f0:f2:90:ff:75:50:d7:83:82:e1:8b:f0:12:52:d8:
53:2d:0b:56:56:49:7c:f0:53:53:85:d7:c3:68:49:
44:21:26:b4:33:45:df:98:a4:1e:4b:c9:8e:b4:f0:
11:31:ef:b5:20:d5:05:e0:62:a2:e4:41:64:d4:15:
54:27:6a:e8:91:b3:de:e1:ae:77:ee:b0:5d:9a:45:
74:3b:61:f1:7b:4d:d1:84:d2:ea:24:9a:94:98:87:
8b:e1:a5:8e:4f:9a:50:a6:4b:76:ac:63:88:34:cb:
41:a7:1b:d8:05:8d:94:07:5a:2b:45:78:5f:8f:a9:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:1F:63:D4:FC:7D:25:AF:BB:29:53:A0:E7:50:B7:A1:AC:FF:48
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/syAfY9T8fSWvuylToOdQt6Gs_0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.212.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
80:ca:8d:45:09:d5:f7:a1:89:a6:ac:5f:b6:6e:65:33:bb:ab:
45:c5:98:cd:70:e9:72:ce:af:91:08:a7:0c:8c:7e:fc:c4:13:
e4:7b:0d:e4:b2:f1:3a:3a:05:01:7e:1b:83:f7:df:24:0f:6f:
0a:23:db:00:65:05:24:ad:13:3e:04:8c:4c:6c:fb:b7:34:5e:
72:92:2d:65:88:cb:ee:0c:31:85:2e:e7:03:b7:c5:92:a9:cc:
5f:74:f6:17:5c:0f:8f:49:c4:8c:bd:19:ff:8e:44:10:ab:94:
f6:f9:84:23:0f:59:04:e6:82:6d:87:5c:21:da:3f:a9:37:fd:
22:dd:50:1c:d0:d3:7f:40:fa:05:cc:b9:58:01:51:9e:e2:57:
e8:1c:74:1e:d7:27:46:3e:67:b3:59:cb:a2:73:ca:d6:13:7c:
d1:18:6c:20:e4:c4:b4:2a:9b:2f:92:07:28:79:e4:a6:5e:fd:
27:a6:c0:5d:51:ad:f9:7c:55:e4:f0:84:15:d1:ca:c3:61:4f:
e2:ef:06:09:35:7b:60:c1:e7:ec:76:d3:16:dd:3c:8e:d5:26:
95:a2:5f:16:fe:34:0a:72:b4:de:af:d2:fd:10:d2:60:9f:4c:
a5:40:78:42:e7:eb:0f:e5:54:a2:a8:5e:c6:01:f6:2d:3e:20:
b2:19:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:49 2025 by rpki-client