Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/v-VbKkFAYCzh23TYGHVMZvk6jBA.roa
File: v-VbKkFAYCzh23TYGHVMZvk6jBA.roa (raw, json)
Hash identifier: udhOJiKvu6vLyR58TbsQIlKuKRgxmIwCqcVpv1tfXJk=
Subject key identifier: BF:E5:5B:2A:41:40:60:2C:E1:DB:74:D8:18:75:4C:66:F9:3A:8C:10
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01850591099C963B431C4088D76A269A7990
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/v-VbKkFAYCzh23TYGHVMZvk6jBA.roa
Signing time: Mon 12 Dec 2022 09:01:09 +0000
ROA not before: Mon 12 Dec 2022 09:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 19
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
80.253.0.0/20 maxlen: 20
195.16.96.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 18
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:09:9c:96:3b:43:1c:40:88:d7:6a:26:9a:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe55b2a4140602ce1db74d818754c66f93a8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:8b:d8:1b:1c:6a:bf:ea:ec:49:d3:50:73:
6f:86:b1:ec:9b:c6:91:21:2a:96:ca:14:e8:5d:b0:
84:33:00:50:14:8d:4e:4a:0e:49:65:17:f4:57:81:
4b:0b:e7:82:32:a9:3e:b3:1c:9c:e2:14:22:b8:3c:
b3:14:24:5d:9b:ba:b5:2e:71:73:cf:f1:b7:8a:a5:
c0:72:65:03:0c:d8:38:6b:19:ce:dd:e2:d2:3b:83:
2b:d1:bc:a6:55:45:04:2f:5f:17:75:23:cc:92:76:
9e:cb:a6:52:da:42:99:6c:8b:c7:24:d7:d1:38:e8:
cb:ba:ef:47:e5:28:c3:67:aa:5d:f4:ec:88:f9:cc:
95:3c:5c:84:d1:31:67:a7:2b:6f:8b:de:75:4c:a8:
da:76:a3:fb:a3:4b:48:bf:9c:f8:18:94:7c:75:4c:
29:83:e1:12:05:c8:2a:2f:ac:78:02:a2:09:f4:31:
69:e6:5a:2b:e7:35:6b:e4:bb:a5:4b:15:8d:71:88:
98:c4:23:c5:e5:65:4d:f9:d7:09:10:77:6a:d7:c7:
f9:37:28:9f:10:f2:da:94:7e:97:55:19:50:a1:5c:
0b:b8:0f:8e:43:aa:3a:3f:84:4c:57:7f:ac:22:16:
c1:2d:df:ce:33:f7:37:fc:96:c9:a7:2f:88:1b:a6:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:5B:2A:41:40:60:2C:E1:DB:74:D8:18:75:4C:66:F9:3A:8C:10
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/v-VbKkFAYCzh23TYGHVMZvk6jBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.69.96.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:e3:16:99:1c:27:77:5b:de:b6:15:21:c0:23:72:65:45:0c:
65:0f:47:53:6c:55:9f:20:e5:70:ee:fc:e5:2c:96:15:21:2c:
59:5f:6d:b5:77:d0:20:40:fd:fa:66:65:42:ae:1d:54:33:b0:
a2:21:89:6e:f6:a8:16:8b:28:3c:cb:a2:0a:28:be:09:55:9d:
bb:3a:b7:f3:56:56:7b:0f:3d:74:fc:18:96:dc:9a:50:57:0e:
40:4e:fa:9f:be:32:ff:5d:46:05:21:37:13:52:8d:68:3b:bd:
c0:78:9d:cd:bd:a8:f6:5b:d9:d5:35:a9:bf:b9:51:d2:a0:7d:
a3:05:52:d6:e7:64:48:31:c4:38:9a:97:44:10:16:3f:1a:ad:
5d:9e:f8:36:3f:99:25:7c:f3:0a:c1:37:c5:1d:b0:1b:9a:56:
4c:b4:52:f7:cb:e0:cc:42:4d:c0:0e:95:a5:9f:c6:be:20:28:
43:1e:44:c2:d6:f6:52:70:7f:36:e9:ec:31:65:5b:5c:32:28:
68:d4:84:f3:94:7b:ec:63:9b:58:ae:cb:0b:df:44:3d:ae:84:
b8:20:59:90:74:db:05:05:08:25:4c:28:b3:f6:58:7e:71:1a:
02:f4:5f:da:36:e3:f4:9c:e5:87:ce:8a:66:4e:83:f1:98:71:
36:93:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:27 2025 by rpki-client