Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/v7ZPufBD-fgwBTg7Gn3tQin-fpE.roa
File: v7ZPufBD-fgwBTg7Gn3tQin-fpE.roa (raw, json)
Hash identifier: FJcF/Nzydt7LLlWZaa0v+htUu4kY6ofw2gaCx0IzqWk=
Subject key identifier: BF:B6:4F:B9:F0:43:F9:F8:30:05:38:3B:1A:7D:ED:42:29:FE:7E:91
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE3420C0E40360719F7EC301CCDED3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/v7ZPufBD-fgwBTg7Gn3tQin-fpE.roa
Signing time: Mon 12 Dec 2022 09:33:00 +0000
ROA not before: Mon 12 Dec 2022 09:33:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
178.176.226.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:34:20:c0:e4:03:60:71:9f:7e:c3:01:cc:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfb64fb9f043f9f83005383b1a7ded4229fe7e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:5f:1e:c7:b7:f5:93:f7:d8:1c:58:dc:8a:
b8:38:d3:e0:7a:ef:ea:ec:03:f0:14:46:1c:2c:0f:
89:6e:e4:f8:60:d9:a3:ea:90:34:ee:7f:72:c6:2a:
e7:f1:ad:73:9d:f7:43:9f:46:c9:18:a0:13:7e:1e:
19:33:5f:85:06:0a:78:75:ec:5b:2e:6f:73:06:c6:
42:56:f5:d5:b5:c9:28:57:69:66:cb:33:d8:d5:74:
d9:84:fe:ea:36:ab:ba:41:23:70:10:58:55:fc:7e:
b0:8e:c1:74:e5:f5:9a:2f:aa:b3:df:bc:59:ab:7c:
65:09:4a:90:51:b3:85:29:f2:11:99:31:6a:04:b1:
66:32:39:d0:01:fd:f8:f1:0a:de:53:99:68:eb:23:
a0:82:92:df:b5:60:8a:c7:a5:41:5b:d9:fa:ac:cf:
4c:e7:5a:53:45:1e:ac:0d:39:29:f8:70:d9:2f:fa:
f1:72:95:94:84:06:86:00:57:06:f9:6b:53:bd:0a:
9c:8f:c3:40:38:31:98:1e:6f:e7:04:bc:1e:db:04:
09:52:9b:40:2c:8c:bf:20:b8:02:d5:fa:51:3c:b6:
ab:b1:45:79:dd:66:24:16:51:4a:ac:da:a8:77:c9:
54:7b:69:2c:6e:ab:79:58:3a:1f:13:e1:6b:6b:e5:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:4F:B9:F0:43:F9:F8:30:05:38:3B:1A:7D:ED:42:29:FE:7E:91
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/v7ZPufBD-fgwBTg7Gn3tQin-fpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.224.0-178.176.226.255
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:96:14:bb:0e:f1:be:db:70:45:46:9c:5f:b1:f5:89:c5:f5:
9f:df:be:0e:be:a3:e1:c6:23:bd:46:c7:bb:6d:46:ab:93:75:
7f:7c:3b:23:96:94:a4:9a:46:e1:b0:43:bf:60:d7:4d:f7:d4:
b3:a5:6e:a9:fb:37:6a:05:d8:eb:b8:10:18:79:56:12:16:79:
a9:77:90:e9:b4:47:c2:b6:c3:09:1f:1c:ef:ba:a6:a2:5a:d8:
99:f4:41:45:e5:1e:e4:1b:ed:7c:4f:72:ee:c1:d2:e4:36:8f:
e8:cd:1d:97:b3:6b:46:a6:2a:f4:ad:e2:39:c0:25:34:75:b3:
05:a1:8e:39:88:83:c5:c0:13:ec:ee:0c:37:95:8b:c4:2d:00:
97:c6:46:ff:8a:c3:fe:b3:60:c7:19:a1:0a:dc:57:98:ac:0d:
19:56:fa:b6:ac:50:9b:e5:c8:2f:48:3f:f7:8e:c9:ec:95:97:
86:2f:20:6e:f7:6a:50:78:09:6e:cf:95:8f:2a:7e:fb:fe:da:
d3:14:1e:05:e0:f1:1b:fe:45:90:5c:c7:64:b8:ed:fd:5e:25:
89:d0:fc:f2:7c:dc:f8:8c:a2:18:f3:dc:c2:03:d4:74:6b:79:
8e:0c:9d:04:dd:96:99:58:bb:7f:e6:c2:0f:08:9f:e5:4d:21:
56:c2:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:28 2025 by rpki-client