Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Z3fTBTC6SYQDx3BYkd00c-B_yQ.roa
File: 7Z3fTBTC6SYQDx3BYkd00c-B_yQ.roa (raw, json)
Hash identifier: dHEjVfFI+MGwo3MiFTqOsVW1VR7l1pAvcKYhfQmyDwI=
Subject key identifier: ED:9D:DF:4C:14:C2:E9:26:10:0F:1D:C1:62:47:74:D1:CF:81:FF:24
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EA66C790248CD58558CF7BCC7968A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Z3fTBTC6SYQDx3BYkd00c-B_yQ.roa
Signing time: Fri 02 Dec 2022 13:37:43 +0000
ROA not before: Fri 02 Dec 2022 13:37:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.227.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:a6:6c:79:02:48:cd:58:55:8c:f7:bc:c7:96:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed9ddf4c14c2e926100f1dc1624774d1cf81ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:bc:f7:02:3a:04:e1:7f:76:ca:10:d6:54:
9e:66:e7:88:1a:61:6e:d2:64:78:36:4b:03:2d:ef:
97:d3:0c:c9:fc:14:1f:06:50:1a:f9:41:5e:63:84:
2d:37:ea:5b:0d:0b:68:47:f6:2d:40:84:89:d3:fa:
aa:91:94:7b:54:e9:17:ae:75:b8:eb:5a:af:de:b2:
7f:bf:81:ff:c7:78:8b:da:1a:2a:34:6c:cc:43:cf:
44:b1:42:87:d1:9f:70:2e:1b:39:f9:d4:ae:84:c2:
52:db:a2:14:ea:ab:88:d8:3c:f2:3d:67:eb:6e:7b:
af:ec:1d:0e:e1:78:e1:9f:9d:99:66:e4:c1:6e:8c:
07:03:86:3b:18:a7:94:7c:1d:e4:d3:9c:8e:4d:da:
a7:ae:85:b8:53:1b:03:18:44:ec:09:5e:c2:c7:c6:
9d:da:c4:66:5f:34:43:3f:cf:b5:0a:15:be:3b:e3:
b2:85:12:70:a8:75:cc:8b:01:f3:64:03:d1:e1:b9:
3f:bf:72:19:11:c4:f4:ee:1b:c6:c1:7b:dc:cf:55:
34:3d:6c:fd:74:32:87:ea:c2:6a:62:84:5f:03:0c:
1b:9c:37:70:da:11:26:d8:31:a8:94:63:24:4e:53:
8c:e0:4c:72:d8:f7:4f:7c:e0:23:11:28:40:a6:b1:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:DF:4C:14:C2:E9:26:10:0F:1D:C1:62:47:74:D1:CF:81:FF:24
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Z3fTBTC6SYQDx3BYkd00c-B_yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.227.0-178.176.229.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:3b:f0:1d:41:62:bc:dd:64:82:1d:30:ac:95:25:6f:8a:37:
bf:45:a8:e9:cc:99:fc:c4:dc:02:65:42:82:e8:c7:7e:cd:0f:
2f:72:a2:73:fd:77:8a:04:6b:5e:e1:a2:13:ed:78:e9:77:67:
07:98:13:78:fd:42:22:9f:2b:c8:7a:28:d6:bd:1b:0b:e6:b5:
b4:fe:3b:42:aa:b2:1e:df:39:a9:ef:30:e1:86:ca:1d:7c:7b:
7e:a3:82:d4:5e:03:56:37:72:e6:03:f0:9a:50:b2:b2:30:57:
cd:82:f5:21:a3:f2:94:44:9b:4d:76:0f:31:de:ab:0c:89:7b:
82:5c:7c:df:78:f2:a6:3f:d7:96:58:40:e6:5c:38:69:0d:6a:
8c:63:11:f0:fc:98:bc:ba:40:f8:a6:a8:41:46:fe:40:d9:10:
0d:31:98:de:3f:c0:c1:c5:02:f5:6e:55:cd:d8:bf:08:49:89:
e8:89:13:9e:2d:1e:d3:2f:35:63:97:de:07:71:a1:84:b7:90:
4e:52:8d:3d:f4:cb:1b:bc:f5:0c:73:ec:f8:3c:2d:7f:8b:1c:
c0:36:58:c6:fb:33:65:e6:34:8e:12:c4:41:ea:7e:af:34:2b:
e5:42:f3:5b:00:a8:71:de:aa:e8:38:9c:1b:92:77:df:46:20:
c0:73:e0:a9
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAYTTDqZseQJIzVhVjPe8x5aKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAyMTMzNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDlkZGY0YzE0YzJlOTI2MTAwZjFkYzE2MjQ3NzRkMWNmODFmZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuu89wI6BOF/dsoQ1lSeZueIGmFu
0mR4NksDLe+X0wzJ/BQfBlAa+UFeY4QtN+pbDQtoR/YtQISJ0/qqkZR7VOkXrnW4
61qv3rJ/v4H/x3iL2hoqNGzMQ89EsUKH0Z9wLhs5+dSuhMJS26IU6quI2DzyPWfr
bnuv7B0O4Xjhn52ZZuTBbowHA4Y7GKeUfB3k05yOTdqnroW4UxsDGETsCV7Cx8ad
2sRmXzRDP8+1ChW+O+OyhRJwqHXMiwHzZAPR4bk/v3IZEcT07hvGwXvcz1U0PWz9
dDKH6sJqYoRfAwwbnDdw2hEm2DGolGMkTlOM4Exy2PdPfOAjEShAprGFowIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFO2d30wUwukmEA8dwWJHdNHPgf8kMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvN1ozZlRCVEM2U1lRRHgzQllrZDAwYy1CX3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBARQ
97ADBARRGIADBAZTqcADBAVT3sADBAdT5YADBAdVGoADBAVWbcADBAJbwdQDBAdd
mYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkDAMAwQA
srDjAwQBsrDkAwQCuQMgAwQCudKMAwQDvF6oAwMAvKIDBALByeQDBAXDBYADBAXD
EGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6ADBAXV
mqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQADggEBAJ078B1BYrzd
ZIIdMKyVJW+KN79FqOnMmfzE3AJlQoLox37NDy9yonP9d4oEa17hohPteOl3ZweY
E3j9QiKfK8h6KNa9GwvmtbT+O0Kqsh7fOanvMOGGyh18e36jgtReA1Y3cuYD8JpQ
srIwV82C9SGj8pREm012DzHeqwyJe4JcfN948qY/15ZYQOZcOGkNaoxjEfD8mLy6
QPimqEFG/kDZEA0xmN4/wMHFAvVuVc3YvwhJieiJE54tHtMvNWOX3gdxoYS3kE5S
jT30yxu89Qxz7Pg8LX+LHMA2WMb7M2XmNI4SxEHqfq80K+VC81sAqHHequg4nBuS
d99GIMBz4Kk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:03 2025 by rpki-client