Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tRtXbw5r8IERVTNmLZLxvmhvn_g.roa
File: tRtXbw5r8IERVTNmLZLxvmhvn_g.roa (raw, json)
Hash identifier: +w7OkeWuPUS9Y7T0Uy6lMJYEbMvGTgD0E1PITc0mLRk=
Subject key identifier: B5:1B:57:6F:0E:6B:F0:81:11:55:33:66:2D:92:F1:BE:68:6F:9F:F8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A426F75447AB7D833C6DFEF53B187C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tRtXbw5r8IERVTNmLZLxvmhvn_g.roa
Signing time: Mon 12 Dec 2022 09:22:01 +0000
ROA not before: Mon 12 Dec 2022 09:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:26:f7:54:47:ab:7d:83:3c:6d:fe:f5:3b:18:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b51b576f0e6bf081115533662d92f1be686f9ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:c1:97:12:b0:dd:ab:c6:e6:b5:a1:d6:20:
be:22:ef:56:69:07:1d:b1:c5:d6:7e:b6:d5:7f:ff:
ca:6e:4d:cf:9f:ea:94:00:df:f8:49:97:99:28:be:
51:9b:2d:c6:5d:f2:29:60:c7:d0:1d:ae:2e:89:59:
93:d3:b4:cc:41:f1:32:c6:4c:62:9a:96:b7:e4:81:
6a:02:8e:ef:7d:17:6b:e6:8e:f6:2e:46:98:00:01:
0c:47:26:dc:9d:d9:91:59:b6:90:e6:1e:3b:b3:02:
82:1e:f7:0e:f7:83:5f:cb:69:bf:5f:d2:d9:cc:e8:
c2:68:f7:57:87:26:d8:90:6f:22:4e:17:8c:fc:ed:
73:ad:29:16:31:71:67:73:1a:c8:a6:bf:29:d6:75:
5c:db:fd:02:0c:1e:85:05:48:87:29:76:30:97:4e:
6a:51:91:90:d9:3b:a1:75:c0:6a:3d:9c:ee:18:bc:
fb:2f:f0:cf:48:98:df:20:8b:3a:7e:87:b9:b0:69:
9f:8b:a8:da:3b:c3:1f:6c:9f:76:6e:cd:f8:f4:1d:
43:f8:32:62:ce:24:54:25:02:a6:9a:31:97:d9:97:
51:63:63:ae:c0:5e:11:6d:15:e2:f1:01:b1:86:e6:
fa:be:d5:18:98:5e:2a:b7:9d:ff:9f:71:54:43:cd:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1B:57:6F:0E:6B:F0:81:11:55:33:66:2D:92:F1:BE:68:6F:9F:F8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tRtXbw5r8IERVTNmLZLxvmhvn_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
12:9a:d7:93:d4:7c:2f:c1:ba:9a:a2:6e:2a:d3:17:08:c0:71:
6b:7c:53:87:24:51:99:12:9d:f7:93:f6:20:df:43:aa:fa:da:
83:d5:fb:73:13:36:30:6f:aa:14:6f:2d:97:f4:55:a9:bc:ee:
91:e5:8d:2b:09:cc:b6:db:bc:8e:c3:94:27:17:04:88:4b:ca:
0d:57:e7:6b:23:70:50:22:f1:9d:92:d2:f6:57:f2:35:55:3d:
e1:be:cb:4b:d3:c3:b2:8c:79:2d:9c:8b:14:22:5b:31:76:56:
8d:8c:b7:24:81:7b:38:d7:61:68:95:8a:6e:52:1b:1c:3f:d6:
50:e9:f8:6a:1f:10:69:0a:c1:b0:9a:1f:07:bd:db:5d:e8:21:
15:23:ce:c0:be:26:fd:11:f1:1a:2b:6f:28:0b:d2:e1:98:2a:
08:af:df:fa:15:eb:e4:82:1e:ae:7f:82:d8:1c:ce:f3:fb:61:
b8:65:f6:f6:5f:36:40:96:a4:26:28:10:15:61:f4:06:5c:0c:
7d:92:48:24:6d:c4:0d:fc:a5:23:51:22:6f:d9:0a:c6:62:9e:
f4:10:e0:d2:2a:37:8d:af:1e:63:09:0d:27:20:a8:e3:89:6b:
d3:b4:f7:7f:08:03:7d:ae:cc:83:c7:6b:cd:b1:b3:82:07:1e:
0f:66:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:35 2025 by rpki-client