Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/717bc2dyU3ZEnqDQMkliv4h6m5s.roa
File: 717bc2dyU3ZEnqDQMkliv4h6m5s.roa (raw, json)
Hash identifier: cl4xRrX8xzppHFpa6xnKCRFrDypFpv9pcV2lU3282j0=
Subject key identifier: EF:5E:DB:73:67:72:53:76:44:9E:A0:D0:32:49:62:BF:88:7A:9B:9B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BBDBE873860052D0A79FA6590B10C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/717bc2dyU3ZEnqDQMkliv4h6m5s.roa
Signing time: Thu 08 Dec 2022 10:33:03 +0000
ROA not before: Thu 08 Dec 2022 10:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
109.124.64.0/18 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:bd:be:87:38:60:05:2d:0a:79:fa:65:90:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5edb7367725376449ea0d0324962bf887a9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:ef:c4:16:34:3e:00:a0:c5:6b:77:0c:64:
36:70:56:56:09:53:6f:b8:2c:22:22:d7:6e:0b:3e:
55:43:4d:4d:95:1e:fb:99:57:1b:e5:f5:05:ed:b7:
a0:10:75:59:7c:34:ea:2c:19:c0:21:22:6c:a9:8d:
36:c9:df:02:56:7b:78:1c:a0:f3:be:9d:3e:0f:05:
89:e9:59:e6:19:30:ed:d0:ef:2a:04:0a:11:3e:e3:
c7:fe:bc:02:3f:16:c8:a9:ae:0c:38:63:ed:bd:1b:
90:f1:ee:52:a4:cb:5d:69:a5:bc:c3:1d:58:70:f6:
35:ee:78:06:44:9f:86:7f:2c:b2:23:1d:5d:3f:00:
38:b4:ae:1b:37:7f:fd:d6:be:17:dd:6a:66:36:0f:
aa:25:d5:3c:9d:fe:3d:c2:9e:b4:bd:b6:20:13:eb:
29:ee:1e:19:3c:3a:1f:9e:e4:18:b9:d1:7c:66:1d:
c1:b4:0b:b8:26:d7:ed:13:2c:d5:0d:ef:77:16:61:
5e:9c:35:2d:5c:29:e2:0e:5c:ee:a6:47:66:1d:20:
64:bd:c0:2a:b9:3a:86:53:7a:86:a3:df:26:29:e4:
4f:0a:87:36:28:cc:8e:21:75:97:95:29:a4:00:46:
fe:42:0d:03:76:0c:61:81:71:fd:8f:9e:1e:3f:ff:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:DB:73:67:72:53:76:44:9E:A0:D0:32:49:62:BF:88:7A:9B:9B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/717bc2dyU3ZEnqDQMkliv4h6m5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:8b:38:f3:21:27:28:62:ee:ef:81:ac:99:e5:a7:2a:59:a9:
19:f5:05:9e:0e:d7:8d:28:cd:46:27:4e:93:2a:c1:ff:a3:b9:
ea:05:5f:7f:a5:b6:23:df:bb:fa:6a:c0:92:9c:78:be:6e:37:
f8:e5:08:44:20:af:be:25:67:f1:6e:a7:52:b8:0b:fc:bc:f7:
16:cf:7b:a1:c0:56:cb:80:8f:3a:e1:07:97:6f:27:8a:69:76:
41:f3:77:c2:69:e2:3b:14:17:5c:02:c4:dc:7f:18:a1:6d:0b:
b3:8f:77:90:20:9c:d8:99:59:d3:f3:7e:1a:70:9a:c2:a7:f1:
4b:c9:25:6f:5f:44:83:ae:2b:c6:59:77:76:62:9c:ad:e1:56:
de:08:48:b2:67:77:5a:9e:3a:6a:f4:b6:27:6a:df:3e:81:c7:
64:a5:4c:ad:6c:6f:70:96:a2:94:2c:a3:50:c6:f5:43:17:58:
2d:b2:d7:bb:90:16:94:40:5a:fc:8d:d6:20:4b:5e:53:9f:eb:
99:74:b3:c1:d5:8d:e2:f8:08:f6:6f:89:fb:e4:08:82:74:be:
31:cd:8e:61:7d:b8:a2:90:c9:72:9a:3d:37:83:9e:5d:26:9a:
82:8f:2b:61:83:c8:97:1b:6d:a0:c4:9d:6b:11:b0:d6:47:e3:
01:f5:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:30 2025 by rpki-client