Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yPuz_a47-no8wPnElvJu4OLZwp0.roa
File: yPuz_a47-no8wPnElvJu4OLZwp0.roa (raw, json)
Hash identifier: GPepF+gvsHxzBlANHWdphjuzIUzc015b81dVJEq3ARU=
Subject key identifier: C8:FB:B3:FD:AE:3B:FA:7A:3C:C0:F9:C4:96:F2:6E:E0:E2:D9:C2:9D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F51C8887C1ADC7BBF83047C432E31B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yPuz_a47-no8wPnElvJu4OLZwp0.roa
Signing time: Thu 08 Dec 2022 13:38:03 +0000
ROA not before: Thu 08 Dec 2022 13:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 109.188.0.0/17 maxlen: 17
94.25.128.0/18 maxlen: 18
212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:1c:88:87:c1:ad:c7:bb:f8:30:47:c4:32:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8fbb3fdae3bfa7a3cc0f9c496f26ee0e2d9c29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8a:35:9f:c7:94:32:d1:bf:73:cc:72:f7:06:
74:36:5d:51:37:e7:0e:03:42:c7:0c:9f:f7:db:f5:
7d:bc:37:08:dd:ec:7e:0a:f1:da:2a:c3:24:67:86:
84:0f:70:4b:d8:f8:ce:2c:c8:87:e0:bc:d0:11:19:
67:a8:2c:9d:62:d4:33:5e:48:e6:86:c3:a4:c2:71:
0c:33:46:01:db:85:72:65:39:15:83:89:ca:cf:02:
58:10:c7:59:9e:fc:36:12:48:ab:8e:f9:29:bb:20:
c8:9e:61:4d:80:5a:67:fc:73:09:75:04:47:f0:3f:
c1:7d:0f:30:ee:99:dc:23:69:7f:2d:e5:74:bd:bb:
dc:66:6e:13:fb:76:ee:d0:27:ce:59:62:b6:e1:57:
ee:d1:f6:e0:52:2b:b1:df:43:38:ae:c6:2f:61:61:
b2:3a:c7:4c:d5:0f:83:66:c3:d1:1f:44:54:fa:87:
9f:b4:7b:8a:8f:a9:2a:bb:1a:b6:d3:d8:d4:26:25:
65:79:c2:35:e9:e8:77:1b:bd:9c:86:4f:91:63:1d:
44:32:b4:dc:07:fd:cb:03:fb:a3:65:41:27:e6:92:
00:e3:67:43:ca:1d:89:01:b1:78:6b:4b:c8:c1:7d:
a7:ad:3d:95:2e:dc:58:40:88:c6:16:03:f7:05:24:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:B3:FD:AE:3B:FA:7A:3C:C0:F9:C4:96:F2:6E:E0:E2:D9:C2:9D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yPuz_a47-no8wPnElvJu4OLZwp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/18
109.188.0.0/17
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:56:5d:da:a5:57:f1:e0:8e:5d:d5:19:2d:2d:10:61:d9:9d:
8e:c3:ec:05:71:1c:ba:52:85:a1:b1:d8:f2:de:01:e9:e2:47:
fd:c9:29:14:cb:df:53:a3:91:fc:70:6a:f5:0b:3a:38:32:f5:
23:da:44:5f:57:e7:ac:01:81:88:13:9e:89:9c:10:39:91:98:
b4:17:38:af:43:72:df:e9:a1:cb:43:03:cd:90:f5:5f:d3:3b:
18:2c:aa:a1:c9:f0:65:93:41:6a:a5:7d:26:2a:13:81:b1:23:
68:b4:01:ef:65:f8:e4:62:2c:5e:30:d6:0b:f3:d5:1a:61:ef:
5f:af:97:29:cd:76:40:0a:60:1f:9d:25:fd:f3:a9:8a:2f:28:
67:59:39:85:65:a5:68:cc:4a:68:e5:57:04:e5:23:37:63:c1:
c2:c6:85:37:c9:2d:bd:10:23:f1:b6:9a:0e:48:47:bc:fc:5f:
64:7c:5f:da:c7:11:51:7d:cc:d5:81:0e:e6:2e:96:bb:c8:66:
74:5a:ca:87:ab:c5:e5:96:1e:6c:09:19:30:93:22:de:73:28:
04:f9:85:45:59:84:5f:e2:94:35:a6:32:6e:84:33:b3:b3:64:
f2:2f:46:c6:fe:39:66:8d:24:fc:b9:61:ac:00:78:e0:82:89:
fe:55:26:5d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAYTx9RyIh8Gtx7v4MEfEMuMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTMzODAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGZiYjNmZGFlM2JmYTdhM2NjMGY5YzQ5NmYyNmVlMGUyZDljMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Io1n8eUMtG/c8xy9wZ0Nl1RN+cO
A0LHDJ/32/V9vDcI3ex+CvHaKsMkZ4aED3BL2PjOLMiH4LzQERlnqCydYtQzXkjm
hsOkwnEMM0YB24VyZTkVg4nKzwJYEMdZnvw2EkirjvkpuyDInmFNgFpn/HMJdQRH
8D/BfQ8w7pncI2l/LeV0vbvcZm4T+3bu0CfOWWK24Vfu0fbgUiux30M4rsYvYWGy
OsdM1Q+DZsPRH0RU+oeftHuKj6kquxq209jUJiVlecI16eh3G72chk+RYx1EMrTc
B/3LA/ujZUEn5pIA42dDyh2JAbF4a0vIwX2nrT2VLtxYQIjGFgP3BSRoLwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFMj7s/2uO/p6PMD5xJbybuDi2cKdMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEveVB1el9hNDctbm84d1BuRWx2SnU0T0xad3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MH0EAgABMHcDBAZeGYAD
BAdtvAADBAK5AyADBAK50owDBAO8XqgDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAME
AcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAME
BdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsFAAOCAQEADFZd2qVX8eCOXdUZ
LS0QYdmdjsPsBXEculKFobHY8t4B6eJH/ckpFMvfU6OR/HBq9Qs6ODL1I9pEX1fn
rAGBiBOeiZwQOZGYtBc4r0Ny3+mhy0MDzZD1X9M7GCyqocnwZZNBaqV9JioTgbEj
aLQB72X45GIsXjDWC/PVGmHvX6+XKc12QApgH50l/fOpii8oZ1k5hWWlaMxKaOVX
BOUjN2PBwsaFN8ktvRAj8baaDkhHvPxfZHxf2scRUX3M1YEO5i6Wu8hmdFrKh6vF
5ZYebAkZMJMi3nMoBPmFRVmEX+KUNaYyboQzs7Nk8i9Gxv45Zo0k/LlhrAB44IKJ
/lUmXQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:06 2025 by rpki-client