Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2frAqTP-83S5u6SbYx1eJlX7exs.roa
File: 2frAqTP-83S5u6SbYx1eJlX7exs.roa (raw, json)
Hash identifier: Mwn/Gd9dgG5TO+qiwtY6YDvVVCGu7YI/3Ik9X9bWRTI=
Subject key identifier: D9:FA:C0:A9:33:FE:F3:74:B9:BB:A4:9B:63:1D:5E:26:55:FB:7B:1B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018601A3A969B93E3EF31889477D7A2EF0EA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2frAqTP-83S5u6SbYx1eJlX7exs.roa
Signing time: Mon 30 Jan 2023 07:45:48 +0000
ROA not before: Mon 30 Jan 2023 07:45:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 19
193.201.228.0/22 maxlen: 22
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
195.16.110.0/23 maxlen: 23
195.16.114.0/23 maxlen: 23
85.26.144.0/20 maxlen: 20
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
128.204.78.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
62.64.0.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4400::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d000:4200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:a3:a9:69:b9:3e:3e:f3:18:89:47:7d:7a:2e:f0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 30 07:45:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9fac0a933fef374b9bba49b631d5e2655fb7b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:f3:81:50:d9:d2:8d:80:58:79:20:29:54:
e3:36:1f:c1:7a:77:b4:53:72:47:2d:99:ae:46:2c:
1b:65:f9:1a:68:27:b4:04:99:31:f8:59:ac:5c:c6:
f5:de:8d:e5:20:f1:70:08:78:47:a8:de:9c:b5:d1:
10:a0:74:de:e6:14:86:33:b5:20:5d:b9:09:fa:ff:
22:5e:b2:df:1d:e9:8b:dd:43:6f:f1:4e:80:ed:d8:
8d:dd:5c:65:70:dd:38:2d:a4:0a:43:b0:20:26:eb:
54:17:ea:9c:57:a2:31:5f:56:d8:fb:1e:e5:68:2b:
8d:69:13:10:2b:ce:7c:40:3d:17:e3:68:c3:b0:6e:
54:79:5b:00:f5:af:c8:93:8c:2f:77:3e:0c:aa:6d:
60:4e:26:74:95:9e:8f:98:c4:0b:3d:d1:4b:f0:40:
63:cb:a8:06:1e:b4:b2:27:98:0f:07:37:17:96:07:
48:a4:25:06:94:9c:15:fc:5f:77:47:5d:40:5c:c6:
34:7a:23:7e:29:50:ad:2a:f3:5e:35:8f:36:a2:32:
60:0f:fd:d8:cb:17:61:46:53:6d:51:f8:df:c9:9d:
94:4c:45:16:49:58:e3:49:95:d1:f5:4b:0d:ed:31:
e9:62:c8:42:41:b7:50:5b:35:4f:d7:35:30:f9:ef:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:C0:A9:33:FE:F3:74:B9:BB:A4:9B:63:1D:5E:26:55:FB:7B:1B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2frAqTP-83S5u6SbYx1eJlX7exs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
Signature Algorithm: sha256WithRSAEncryption
6d:6d:dc:82:50:94:2b:ab:2c:6b:c2:a4:b7:f3:6d:db:b2:48:
ee:ad:16:0d:e3:42:58:a2:3d:5d:b2:92:72:bd:e0:53:6d:76:
35:7d:63:89:da:d2:73:e7:32:79:dc:9d:4f:55:1f:77:3a:8d:
a1:39:5f:4e:fc:64:61:78:57:2b:55:2e:78:4a:93:b9:b0:29:
24:46:d3:e6:33:cb:75:b7:2d:2f:ae:e4:66:9a:88:b1:7a:b2:
04:50:1c:17:cd:24:9b:08:15:25:d0:6b:3a:72:ae:6c:e6:b4:
dc:a9:03:ad:15:a0:ed:20:33:90:1c:d4:ca:19:51:2e:15:f9:
e4:a8:15:47:74:60:ee:a6:54:07:61:dc:6d:4f:54:86:c5:cf:
08:b3:89:fa:40:e7:74:5b:99:43:59:06:67:1e:d3:c5:16:94:
ab:f3:09:59:d5:ab:c7:e2:07:a6:27:84:b5:df:ed:65:7f:d5:
93:c8:b6:f0:c8:d0:60:b9:19:8a:e1:17:5b:d3:f4:60:09:34:
e5:ca:d0:f0:fd:0b:69:ca:cb:c8:fa:60:c9:48:c7:e3:f6:a5:
3b:1b:cf:8e:37:e2:a9:ee:18:18:15:8d:03:ad:57:f6:9d:26:
6d:62:e0:bc:a5:a2:87:b2:f1:d6:06:d4:d7:3e:49:46:74:89:
8d:92:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:07 2025 by rpki-client