Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xTyGbzuznQvYibpW22ofHyQ1Ug8.roa
File: xTyGbzuznQvYibpW22ofHyQ1Ug8.roa (raw, json)
Hash identifier: bVV4jJdPMUVY1TRmYDGzbVtUUfoiWVVOSJq5VJ3eKTQ=
Subject key identifier: C5:3C:86:6F:3B:B3:9D:0B:D8:89:BA:56:DB:6A:1F:1F:24:35:52:0F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D5BA47BE53536095B53A73AC263B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xTyGbzuznQvYibpW22ofHyQ1Ug8.roa
Signing time: Thu 08 Dec 2022 15:04:02 +0000
ROA not before: Thu 08 Dec 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d5:ba:47:be:53:53:60:95:b5:3a:73:ac:26:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c53c866f3bb39d0bd889ba56db6a1f1f2435520f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:ae:b6:a1:a3:9f:87:40:07:ed:3d:4b:80:
c5:e8:f1:48:ad:05:4d:1d:93:d4:6d:a5:4d:e3:e8:
88:a5:84:0b:e0:59:2e:e4:de:5e:97:e0:08:b4:f9:
d1:2a:74:cb:bf:9f:f9:78:07:a2:4f:06:41:37:04:
35:76:d7:6e:3c:9b:c7:fb:3f:84:eb:8b:69:aa:44:
d7:84:6a:c9:47:6e:d5:98:b4:1d:c6:d9:0a:61:4d:
9c:2f:53:6a:d2:ca:61:95:84:b3:fa:4c:e9:be:9c:
26:29:35:e3:1a:a6:33:e9:40:55:5a:c5:43:db:f9:
a2:64:9c:08:17:bb:f3:f3:15:91:88:bd:32:ac:4b:
c0:7f:e0:9a:07:1c:63:c4:88:bc:20:1e:d3:32:0d:
91:f4:ae:ee:0e:a9:0b:61:bf:4a:5f:ee:9c:9b:0c:
c4:35:a1:49:4c:7a:85:e4:ae:36:b7:19:f0:4a:ea:
13:dc:49:ca:6f:1c:5e:2a:08:07:34:3c:56:57:be:
fe:7a:4a:24:9e:4a:aa:f6:d9:2f:00:d4:f1:4d:e0:
1f:38:2e:68:23:8c:ee:11:13:26:11:93:b2:b4:a6:
db:71:18:93:4f:a9:a3:69:4c:32:2f:44:43:76:32:
4f:46:a7:99:d8:3b:53:d8:ab:b2:6a:3e:4c:35:7c:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3C:86:6F:3B:B3:9D:0B:D8:89:BA:56:DB:6A:1F:1F:24:35:52:0F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xTyGbzuznQvYibpW22ofHyQ1Ug8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
97:8d:68:33:1b:d5:bc:80:9e:6e:8a:62:cd:7d:62:f9:01:c3:
2a:3a:5d:68:c8:cb:66:0a:d6:7f:fd:d8:79:d7:e7:11:06:33:
23:dd:e2:7b:d2:04:76:35:72:ae:43:4e:2c:0c:ac:7e:83:68:
68:0d:c0:cf:7d:a0:41:fb:e3:fa:8a:78:4d:8e:a0:34:04:05:
fd:65:12:fe:f2:3f:68:55:23:9e:9e:d3:5a:f0:b9:57:a8:ba:
4e:e2:38:34:db:0d:5d:c9:46:63:ec:68:99:9b:33:79:ec:74:
83:d5:01:f9:50:f7:61:a2:f2:dc:7d:55:82:1b:f7:82:b6:d3:
07:ed:3e:b3:cf:1a:da:32:dc:73:af:5d:9a:bd:ec:f6:ae:79:
99:55:0a:65:22:a2:80:49:40:be:54:9f:ad:87:9c:b0:cd:15:
a2:2c:07:ef:d7:17:57:fe:a3:99:5d:fd:54:4d:1a:ba:60:28:
21:fd:1e:cf:ed:a7:42:30:51:03:d9:78:48:82:f4:88:87:ab:
35:7c:f6:66:90:65:c7:f0:33:39:de:01:dc:82:db:72:63:cc:
52:dd:43:5c:bc:79:54:aa:9a:50:61:96:0f:b9:2f:0d:5c:f6:
9f:62:61:d5:bc:e4:3e:94:e1:3f:15:79:d3:c9:4b:20:03:0d:
1d:85:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:26 2025 by rpki-client