Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xiSCTp-z6hcGxyNNbrEz0Ii5kZ8.roa
File: xiSCTp-z6hcGxyNNbrEz0Ii5kZ8.roa (raw, json)
Hash identifier: TE/C9KXoBWGZxhy6tP5iM4cuawlp3mX4nwFvxnQl+Xk=
Subject key identifier: C6:24:82:4E:9F:B3:EA:17:06:C7:23:4D:6E:B1:33:D0:88:B9:91:9F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018AD6F2F8B30DDB97429E85CA2AD967846E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xiSCTp-z6hcGxyNNbrEz0Ii5kZ8.roa
Signing time: Wed 27 Sep 2023 14:02:42 +0000
ROA not before: Wed 27 Sep 2023 14:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 19
213.243.64.0/18 maxlen: 18
195.230.64.0/19 maxlen: 19
80.253.0.0/20 maxlen: 20
83.222.192.0/19 maxlen: 19
83.229.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:f2:f8:b3:0d:db:97:42:9e:85:ca:2a:d9:67:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Sep 27 14:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c624824e9fb3ea1706c7234d6eb133d088b9919f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:58:1d:5a:34:a2:8b:6b:33:ba:61:8c:f6:
26:4a:97:27:1b:c4:ca:c2:08:d6:cb:74:3b:5a:e2:
c0:59:b3:2f:93:18:4b:f4:6e:d6:81:47:66:15:96:
45:3e:00:19:23:72:d8:bc:ac:8c:7d:2e:1c:89:10:
03:7a:be:44:01:b7:e6:9a:99:4f:e6:5c:83:e7:3f:
a9:2b:21:34:2c:50:cd:75:a3:22:89:d9:e6:f4:94:
c9:7d:f5:e3:38:d8:91:7e:7c:1f:ca:cd:53:69:33:
80:20:b2:3a:14:1b:78:8c:fa:13:54:ed:f7:60:5a:
01:5a:3d:62:ee:c8:26:bb:25:3a:8f:0c:3b:0f:e7:
4c:ff:79:09:da:88:c9:ba:57:bf:55:a2:53:82:13:
29:43:a0:20:0c:67:98:04:31:6d:f4:8e:75:60:d1:
84:34:1f:5f:0b:16:97:52:7e:e4:08:59:bf:c3:ee:
97:87:bd:ba:56:aa:d2:36:fa:fa:2b:13:15:91:62:
78:8d:2d:78:e1:59:f7:16:78:85:13:3c:91:16:e5:
2e:c2:ef:a0:cc:42:db:25:2f:58:df:96:7e:71:ff:
f7:29:5a:73:84:58:f9:0b:67:4b:97:b9:b7:12:0f:
c0:2c:bb:23:e0:30:cc:45:ed:14:f4:68:b3:46:d2:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:82:4E:9F:B3:EA:17:06:C7:23:4D:6E:B1:33:D0:88:B9:91:9F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xiSCTp-z6hcGxyNNbrEz0Ii5kZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
195.230.64.0/19
212.69.96.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:8e:fe:12:53:5f:1c:54:97:dd:63:4d:b4:2a:c3:35:5e:67:
8a:e5:10:02:44:76:6a:c4:f2:04:0b:2a:a3:33:d3:9d:3b:85:
71:19:df:e5:8a:a1:4c:72:b7:6b:6d:c3:05:74:6a:cc:00:45:
f0:d3:16:fb:36:5b:3f:98:0c:48:b1:06:28:f7:b7:41:38:59:
e0:48:27:06:a2:ac:6f:e5:39:6a:e1:c1:69:6c:38:dc:c8:7a:
d3:41:3d:04:83:aa:0c:ba:97:2e:6a:97:f1:05:5a:f7:bf:c5:
98:23:f3:f9:44:55:ba:21:0a:0f:26:80:c8:96:13:e4:85:33:
1d:8e:34:a7:df:6a:43:5a:e8:1c:af:9b:df:ac:e5:6f:83:81:
ea:7e:68:d0:92:81:a3:8f:60:28:a4:f5:fa:af:85:60:78:a4:
a4:96:6d:5d:4d:b6:86:20:48:88:d6:dc:b3:d2:3d:ba:68:e5:
9b:e1:9b:0c:7e:5a:6e:51:39:2f:8e:6b:d0:9d:d2:22:1c:14:
ee:90:4c:9c:df:3c:d6:d9:f2:6a:70:4a:0b:26:97:b8:ed:38:
b5:86:c9:a9:e6:13:86:fc:9e:dd:bf:e2:bc:1d:80:7b:05:7b:
1c:9f:c8:59:eb:f6:bb:09:27:fa:0d:8f:6f:1a:6e:90:d0:eb:
a7:55:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:07 2025 by rpki-client