Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vuVqZM1S2Zy4WqSCPWUNOabTtAs.roa
File: vuVqZM1S2Zy4WqSCPWUNOabTtAs.roa (raw, json)
Hash identifier: L2v+Ca3y18MaFPKuuiZ+uhDCZAO5yw73i6yDLpN0lt0=
Subject key identifier: BE:E5:6A:64:CD:52:D9:9C:B8:5A:A4:82:3D:65:0D:39:A6:D3:B4:0B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185059114B59515EE8813D28B9E0C8E95F3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vuVqZM1S2Zy4WqSCPWUNOabTtAs.roa
Signing time: Mon 12 Dec 2022 09:01:12 +0000
ROA not before: Mon 12 Dec 2022 09:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.168.54.0/24 maxlen: 24
213.168.56.0/21 maxlen: 21
213.168.53.0/24 maxlen: 24
213.168.60.0/24 maxlen: 24
213.168.62.0/24 maxlen: 24
213.168.61.0/24 maxlen: 24
213.168.36.0/24 maxlen: 24
213.168.34.0/24 maxlen: 24
213.168.32.0/21 maxlen: 21
213.168.32.0/19 maxlen: 19
213.168.43.0/24 maxlen: 24
213.168.40.0/21 maxlen: 21
213.168.47.0/24 maxlen: 24
213.168.46.0/24 maxlen: 24
213.168.49.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/21 maxlen: 21
109.74.112.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:14:b5:95:15:ee:88:13:d2:8b:9e:0c:8e:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bee56a64cd52d99cb85aa4823d650d39a6d3b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:28:09:cc:96:67:ba:d2:65:9c:95:41:ab:
bc:dd:cc:89:7b:b7:c9:a1:69:25:05:3c:c3:3c:fb:
de:96:3d:d4:3e:47:95:3e:46:be:c0:a0:b9:e6:69:
fe:1d:8c:68:24:2e:42:51:2f:36:9f:0c:28:5b:7f:
55:e9:7b:56:3e:61:b5:29:76:65:42:a9:90:88:74:
5c:16:e5:88:1f:bd:9c:8b:87:16:4a:ae:17:bb:e6:
a9:34:b2:f4:a0:f3:47:95:7c:f1:24:8d:39:f5:b8:
7d:55:c6:e8:31:28:3a:23:0a:22:6f:83:0c:14:84:
c3:d1:b6:d0:35:82:35:a8:a3:d3:d3:d8:66:58:c5:
e2:28:a7:17:5e:a1:a6:5c:60:b9:d5:57:05:bd:ab:
bd:3b:a8:41:86:cb:2a:88:60:7d:8a:45:66:c9:3c:
ec:d1:22:13:d9:6c:a3:27:2b:e4:f9:e1:c5:5a:1c:
96:9f:1a:fc:bd:08:c7:7d:68:8e:36:1d:82:c6:b8:
1f:73:1c:c3:e8:df:b6:ea:f7:8e:8e:bf:f5:c0:a0:
72:1d:32:6b:0d:10:77:0a:2f:0c:ba:db:04:9e:e0:
95:59:e1:bc:44:c9:c1:d9:a2:45:ee:12:84:b4:24:
d3:f5:de:83:7b:ad:1d:fd:38:e0:d9:df:ba:ae:da:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:6A:64:CD:52:D9:9C:B8:5A:A4:82:3D:65:0D:39:A6:D3:B4:0B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vuVqZM1S2Zy4WqSCPWUNOabTtAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:75:31:f6:39:9b:ad:ec:61:8f:75:22:e0:81:aa:63:53:e3:
00:dd:01:71:9c:60:20:c8:59:49:11:e7:59:8b:ae:90:87:da:
42:b7:e5:2b:9e:63:24:13:79:c1:1e:2d:f4:35:86:ed:dd:37:
02:9a:8a:4f:34:dd:f8:f3:5d:80:e9:ee:bd:33:fa:1c:d6:56:
a0:30:50:f5:c0:50:9d:d5:28:9d:9c:95:4b:cb:e8:a8:3c:09:
5a:cd:d6:63:9b:f3:ec:bc:f4:26:18:fa:45:60:f9:44:a4:b4:
83:a2:68:2a:43:09:cf:25:cf:ef:bb:98:d0:44:3b:af:37:44:
61:4c:ba:7b:69:c0:47:1f:a7:2b:61:43:c0:0f:40:6f:18:93:
82:d5:d9:fd:88:fc:14:44:f5:8d:0f:8d:84:56:26:4c:a3:55:
1e:3f:f3:30:4e:84:0e:9b:5f:0f:e0:6a:2f:d9:80:35:f6:b1:
25:00:c0:bd:93:05:46:c8:88:fb:d7:02:09:29:60:18:fe:4c:
d0:87:92:4c:56:4e:09:7d:a0:50:1d:c4:42:8c:89:4a:f4:0c:
77:ad:8d:d8:f4:7a:03:36:a4:71:25:a2:96:fe:73:0b:fa:5f:
35:59:08:88:cf:12:18:35:8d:0a:89:b1:0c:bd:ae:38:8c:30:
01:58:2e:ba
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYUFkRS1lRXuiBPSi54MjpXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDkwMTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU1NmE2NGNkNTJkOTljYjg1YWE0ODIzZDY1MGQzOWE2ZDNiNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnQoCcyWZ7rSZZyVQau83cyJe7fJ
oWklBTzDPPvelj3UPkeVPka+wKC55mn+HYxoJC5CUS82nwwoW39V6XtWPmG1KXZl
QqmQiHRcFuWIH72ci4cWSq4Xu+apNLL0oPNHlXzxJI059bh9VcboMSg6Iwoib4MM
FITD0bbQNYI1qKPT09hmWMXiKKcXXqGmXGC51VcFvau9O6hBhssqiGB9ikVmyTzs
0SIT2WyjJyvk+eHFWhyWnxr8vQjHfWiONh2CxrgfcxzD6N+26veOjr/1wKByHTJr
DRB3Ci8MutsEnuCVWeG8RMnB2aJF7hKEtCTT9d6De60d/Tjg2d+6rtpVKwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFL7lamTNUtmcuFqkgj1lDTmm07QLMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvdnVWcVpNMVMyWnk0V3FTQ1BXVU5PYWJUdEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwQEbUpwAwMA
vKIDBALByeQDBAXDBYADBAXDEGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXV
qCAwDQYJKoZIhvcNAQELBQADggEBAH51MfY5m63sYY91IuCBqmNT4wDdAXGcYCDI
WUkR51mLrpCH2kK35SueYyQTecEeLfQ1hu3dNwKaik803fjzXYDp7r0z+hzWVqAw
UPXAUJ3VKJ2clUvL6Kg8CVrN1mOb8+y89CYY+kVg+USktIOiaCpDCc8lz++7mNBE
O683RGFMuntpwEcfpythQ8APQG8Yk4LV2f2I/BRE9Y0PjYRWJkyjVR4/8zBOhA6b
Xw/gai/ZgDX2sSUAwL2TBUbIiPvXAgkpYBj+TNCHkkxWTgl9oFAdxEKMiUr0DHet
jdj0egM2pHElopb+cwv6XzVZCIjPEhg1jQqJsQy9rjiMMAFYLro=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:17 2025 by rpki-client