Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0gQZHhp4LXePPjueMwWj5hij3C8.roa
File: 0gQZHhp4LXePPjueMwWj5hij3C8.roa (raw, json)
Hash identifier: Kx7gtJwKEdpyGyVVqMxKgzaUpcr6ksL9Bz35Xl4kiHo=
Subject key identifier: D2:04:19:1E:1A:78:2D:77:8F:3E:3B:9E:33:05:A3:E6:18:A3:DC:2F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EA53742F82DE14AA3015391E09043
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0gQZHhp4LXePPjueMwWj5hij3C8.roa
Signing time: Fri 02 Dec 2022 13:37:43 +0000
ROA not before: Fri 02 Dec 2022 13:37:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
84.204.230.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
217.195.64.0/19 maxlen: 19
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/17 maxlen: 17
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
84.204.132.0/22 maxlen: 22
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
213.182.160.0/19 maxlen: 19
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:a5:37:42:f8:2d:e1:4a:a3:01:53:91:e0:90:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d204191e1a782d778f3e3b9e3305a3e618a3dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:58:53:75:2f:12:a3:b8:28:d8:b7:38:33:
ab:a8:43:75:ad:44:16:90:5f:7e:0a:4e:b1:bf:f1:
da:1a:62:4d:18:9a:fe:ad:68:18:ff:35:c0:98:48:
52:20:6f:e6:b1:cd:4f:76:c2:5e:50:39:08:dd:e9:
5b:ff:47:d0:c8:1a:2c:e5:d5:62:66:4e:72:74:ce:
33:32:76:79:76:e0:47:1c:cf:e8:83:5e:98:8a:2b:
37:12:0d:83:00:ef:38:0c:a0:69:da:df:4f:39:71:
36:35:6f:28:2c:9b:57:9e:23:d1:dc:32:9a:1b:7d:
29:75:42:0b:68:38:92:04:c8:2d:48:34:b6:1f:80:
32:b9:1f:3d:38:5a:28:7d:76:e3:52:a3:f7:a5:c5:
b0:42:4a:ff:a6:90:60:1b:14:09:8d:12:56:bc:b6:
f0:b1:88:78:2c:b6:dd:be:d7:39:c9:5a:57:56:37:
9b:33:89:db:1a:89:22:6f:bc:29:6f:d1:76:fd:4c:
2c:cc:c1:af:8a:70:aa:14:2d:ff:3a:f5:52:95:3e:
d8:0e:ee:e8:dc:fe:7f:36:ca:f1:65:a5:e6:18:86:
f9:37:7f:30:49:35:e3:f0:29:ea:70:72:5b:04:24:
ec:15:0c:f0:b0:fa:15:b4:ad:ef:59:1d:cc:16:41:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:19:1E:1A:78:2D:77:8F:3E:3B:9E:33:05:A3:E6:18:A3:DC:2F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0gQZHhp4LXePPjueMwWj5hij3C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:79:4f:71:4a:a4:6a:8c:6c:51:d4:ae:68:04:e2:0a:33:ee:
f9:4e:7b:ec:1b:bb:16:35:c5:3a:05:d3:12:88:9a:37:8c:29:
90:c7:dd:c4:04:a1:90:24:ae:98:31:e1:0b:8b:48:4a:38:c6:
8e:dd:e4:8f:1f:a2:3c:e0:74:81:46:76:85:3d:d8:84:0d:3b:
a3:17:85:08:01:cc:d6:fd:f3:ef:45:43:99:5b:93:10:ce:9f:
e8:1e:e5:3c:ea:d6:53:d3:5f:e7:b9:32:de:3f:f9:03:54:21:
70:a9:78:5c:8a:dc:59:bd:9b:e7:19:e2:74:5b:52:14:a2:a3:
09:33:4d:67:fe:f9:5d:70:74:c2:32:53:5a:b6:fa:4e:8c:9e:
47:0d:8e:8f:b0:5d:9a:e6:dd:67:43:16:be:33:35:7e:4a:21:
c6:04:fa:b6:39:99:dd:0f:41:23:62:77:cc:51:a9:1e:8b:0c:
05:b9:50:fd:d8:ae:8b:e3:dd:4b:95:83:8a:07:f7:3f:48:94:
82:62:fb:d9:30:ca:74:5d:70:eb:77:5f:4a:13:0f:4f:d1:1c:
40:85:12:78:4f:a3:23:c6:f4:b9:02:8d:87:de:39:83:1d:9b:
0c:eb:3b:c0:b1:0e:dc:6f:b7:e8:26:3e:4e:02:7e:59:cb:58:
fe:ca:5d:3e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgISAYTTDqU3Qvgt4UqjAVOR4JBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAyMTMzNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjA0MTkxZTFhNzgyZDc3OGYzZTNiOWUzMzA1YTNlNjE4YTNkYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwxYU3UvEqO4KNi3ODOrqEN1rUQW
kF9+Ck6xv/HaGmJNGJr+rWgY/zXAmEhSIG/msc1PdsJeUDkI3elb/0fQyBos5dVi
Zk5ydM4zMnZ5duBHHM/og16Yiis3Eg2DAO84DKBp2t9POXE2NW8oLJtXniPR3DKa
G30pdUILaDiSBMgtSDS2H4AyuR89OFoofXbjUqP3pcWwQkr/ppBgGxQJjRJWvLbw
sYh4LLbdvtc5yVpXVjebM4nbGokib7wpb9F2/UwszMGvinCqFC3/OvVSlT7YDu7o
3P5/NsrxZaXmGIb5N38wSTXj8CnqcHJbBCTsFQzwsPoVtK3vWR3MFkE3ewIDAQAB
o4IDPDCCAzgwHQYDVR0OBBYEFNIEGR4aeC13jz47njMFo+YYo9wvMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvMGdRWkhocDRMWGVQUGp1ZU13V2o1aGlqM0M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUAYIKwYBBQUHAQcBAf8EggE/MIIBOzCCATcEAgABMIIB
LwMEBi4vwAMEA0+rCAMEBFD3sAMEBlEDgAMEBFEYgAMEBlKMQAMEBVLEQAMEBlOp
wAMEBVPewAMEB1PlgAMEB1TMADAMAwQCVMyEAwQAVMyIMAwDBAFUzIoDBANUzLAw
CwMEAlTMvAMDAFTMAwQHVRqAAwQFVm3AAwQCW8HUAwQHXZmAAwQHXhmAAwQHX4kA
AwQEbUpwAwQGbXxAAwMAbbwDBAaAzEADBAOyF5ADBAK5AyADBAK50owDBAO8XqgD
AwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEBcOQ4AMEAMOVbwMEBcPmQAME
BdQOoAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBdWsAAMEBdW2oAME
BtXzQAMEBNlzUAMEBdnDQDANBgkqhkiG9w0BAQsFAAOCAQEAbnlPcUqkaoxsUdSu
aATiCjPu+U577Bu7FjXFOgXTEoiaN4wpkMfdxAShkCSumDHhC4tISjjGjt3kjx+i
POB0gUZ2hT3YhA07oxeFCAHM1v3z70VDmVuTEM6f6B7lPOrWU9Nf57ky3j/5A1Qh
cKl4XIrcWb2b5xnidFtSFKKjCTNNZ/75XXB0wjJTWrb6ToyeRw2Oj7BdmubdZ0MW
vjM1fkohxgT6tjmZ3Q9BI2J3zFGpHosMBblQ/diui+PdS5WDigf3P0iUgmL72TDK
dF1w63dfShMPT9EcQIUSeE+jI8b0uQKNh945gx2bDOs7wLEO3G+36CY+TgJ+WctY
/spdPg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:13 2025 by rpki-client