Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5smlc_M7IFMDZtKM_T5PtqfUaSI.roa
File: 5smlc_M7IFMDZtKM_T5PtqfUaSI.roa (raw, json)
Hash identifier: lxC+fmD2eT2hVc1ArUxAJPu5S4e7zS3Yr8aDCDri270=
Subject key identifier: E6:C9:A5:73:F3:3B:20:53:03:66:D2:8C:FD:3E:4F:B6:A7:D4:69:22
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BB789E85FE314574A5555533DC147
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5smlc_M7IFMDZtKM_T5PtqfUaSI.roa
Signing time: Thu 08 Dec 2022 10:33:01 +0000
ROA not before: Thu 08 Dec 2022 10:33:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
85.26.144.0/20 maxlen: 20
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
212.69.96.0/19 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
83.229.211.0/24 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:b7:89:e8:5f:e3:14:57:4a:55:55:53:3d:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c9a573f33b20530366d28cfd3e4fb6a7d46922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:c9:ea:96:d9:dc:31:93:fa:5f:c7:b6:1b:
08:eb:bc:66:fb:a1:34:e1:2c:60:61:c9:2c:32:95:
c4:ea:7b:6a:aa:ab:29:19:fe:ab:6c:3d:f1:10:92:
7e:61:a4:d7:5f:f9:e3:fb:6a:d9:f3:94:cc:fd:41:
74:20:84:a4:c8:8f:5f:ca:8b:94:5a:c6:33:c8:ba:
d6:aa:84:e1:52:a9:2b:ae:25:58:22:d3:d4:10:75:
ec:c8:27:3c:06:83:6e:3d:58:c4:59:11:8c:3d:92:
f1:ed:ad:8d:03:87:8b:89:5d:f6:36:c4:e6:e3:2e:
20:dd:13:0f:81:f3:e3:ce:38:9c:17:e1:fe:0b:17:
69:ba:c9:7f:91:55:53:aa:dc:2c:90:e4:19:9c:b3:
6f:b7:3b:54:3c:b9:08:87:e8:fa:6e:bc:d6:e2:10:
66:14:9f:d1:01:60:d7:a8:72:e8:6b:5b:65:81:10:
b2:f7:67:ec:3d:bf:fa:ea:2c:88:a2:c8:06:f3:f0:
76:0e:a1:f0:f2:30:5d:14:b3:9b:db:0c:d5:2c:f5:
84:0d:34:2a:86:27:81:c7:e2:36:b1:c4:48:db:bc:
31:29:ce:2a:e6:57:be:3b:78:08:3b:c3:ad:ed:91:
d8:8d:0d:d5:7e:65:a9:70:58:4b:67:2a:51:88:dc:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:A5:73:F3:3B:20:53:03:66:D2:8C:FD:3E:4F:B6:A7:D4:69:22
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5smlc_M7IFMDZtKM_T5PtqfUaSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:d6:a0:39:0b:78:cc:c6:e0:cc:da:e8:1e:4f:7a:6a:a2:58:
fc:01:70:bd:a7:1c:01:13:06:b0:21:b2:01:3f:7e:1a:af:8c:
d1:5e:fb:0c:d4:59:9b:5d:4a:3a:54:a8:4d:e3:34:ee:fb:64:
b9:24:54:74:2e:d8:bc:3a:2a:26:0f:18:ae:a1:fc:d4:ed:d9:
74:86:fe:81:8c:42:11:7c:77:af:15:31:49:6c:79:7d:5d:0c:
72:d9:71:06:58:bc:b1:e1:73:a7:9e:22:74:41:ef:a1:c9:4f:
53:f9:16:d0:0d:26:5e:2a:93:3d:ef:41:dd:14:a9:d0:97:60:
dc:ec:78:d3:8c:78:1f:ed:b6:08:8e:0e:44:a9:02:fb:13:6f:
90:ec:33:f2:d1:7a:22:b2:ef:87:b0:cd:b8:99:06:a6:e6:15:
95:db:91:63:da:b3:3d:d2:32:87:c5:9d:93:89:12:a5:ab:0f:
f4:20:eb:8c:db:67:f8:13:88:b3:2b:db:6d:b4:fb:50:46:8a:
e5:32:1a:89:fd:05:23:f8:ff:d7:bf:d8:24:27:cc:e1:c1:ef:
1a:6c:94:66:d1:54:91:88:9c:ed:e9:21:a4:5e:9b:35:37:b5:
23:83:0d:9d:68:5e:33:70:89:b6:ea:a9:a0:84:8e:ae:a9:88:
0a:0a:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:27:26 2025 by rpki-client