Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/906U5PPwyRGn1kqfaSJxWTXRpfg.roa
File: 906U5PPwyRGn1kqfaSJxWTXRpfg.roa (raw, json)
Hash identifier: cCdCXVz4uq168C+tGWRahXr+4eRfb2RhDbrPRFypcEk=
Subject key identifier: F7:4E:94:E4:F3:F0:C9:11:A7:D6:4A:9F:69:22:71:59:35:D1:A5:F8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E0BC3A52FA6DE58F2D9AFF9AD3D5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/906U5PPwyRGn1kqfaSJxWTXRpfg.roa
Signing time: Wed 30 Nov 2022 09:17:42 +0000
ROA not before: Wed 30 Nov 2022 09:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.227.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e0:bc:3a:52:fa:6d:e5:8f:2d:9a:ff:9a:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f74e94e4f3f0c911a7d64a9f6922715935d1a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:48:e0:7a:6d:ac:07:ce:85:cf:ec:20:91:
f0:62:28:91:4b:c8:4e:00:bf:e4:b1:4f:d4:75:c3:
f4:af:03:0d:55:b0:8b:d1:ba:29:89:6a:fa:b8:58:
9f:97:ad:6d:44:bb:eb:72:9c:0e:71:fe:14:49:88:
7a:36:19:a8:1b:b0:2f:3b:72:97:b1:f5:cc:a0:ab:
63:96:e0:cd:9b:17:e5:f5:00:98:44:7b:d6:30:7c:
bf:47:56:91:e4:a2:fa:75:dc:d0:28:d3:22:99:1b:
54:3c:11:b1:0b:41:30:61:68:09:13:44:c8:18:ba:
73:73:6b:14:a9:86:cf:e9:31:4e:86:a8:f7:6a:7d:
bb:60:2c:cb:20:71:17:aa:bb:66:a9:57:71:d2:29:
3b:5c:1e:e9:b7:01:64:eb:db:94:9f:bd:a3:cf:9c:
ae:43:62:0d:4a:4c:77:93:74:83:cc:93:ca:25:a8:
fd:78:9b:09:4e:db:33:4b:25:37:7d:f9:27:8a:f1:
93:0b:7f:b4:e4:0f:d1:b4:03:cf:e5:d5:36:4b:12:
78:66:41:61:f4:51:12:d9:b4:38:8f:f4:6a:07:96:
8f:83:84:aa:76:dd:91:7b:c4:13:24:21:3e:26:33:
19:26:3a:ae:9f:45:69:25:8f:e1:55:17:c2:f2:6b:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:94:E4:F3:F0:C9:11:A7:D6:4A:9F:69:22:71:59:35:D1:A5:F8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/906U5PPwyRGn1kqfaSJxWTXRpfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.227.0-178.176.229.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
89:43:d9:d7:af:38:98:6f:0f:2b:96:b7:db:44:f3:b6:78:bd:
a3:04:ca:84:82:b5:cd:c8:e3:5d:76:c0:0f:a1:1b:7c:5d:77:
11:09:ad:cd:da:e7:b7:e6:04:92:89:f2:95:23:66:ea:ce:94:
bd:48:68:30:79:6b:76:3b:a7:d4:64:74:5c:44:56:e7:ba:e1:
40:4b:1f:10:33:6d:ad:2b:80:82:94:d4:5a:0d:9e:47:08:51:
bc:f9:60:2c:11:9d:0c:52:0c:3b:6d:f5:0c:3a:3f:d7:9b:ad:
7b:4e:30:23:e2:1f:3c:f1:5f:e4:ab:97:3a:6e:13:d5:86:61:
b6:f4:71:e2:af:d3:64:a5:f3:27:2b:e6:1b:b2:f7:4f:d7:bf:
dd:d9:ae:aa:42:02:ee:f7:78:cb:15:0c:36:92:76:86:28:1d:
b7:2a:76:08:6b:ae:39:21:21:85:a6:e7:08:17:e7:77:9f:91:
36:04:c8:23:c6:f5:85:fa:ec:f6:f3:08:83:fb:a9:ba:e2:df:
91:0e:f6:e2:07:5d:32:f3:eb:0b:af:64:52:06:c7:57:76:8a:
6c:01:d7:53:f9:1a:e6:93:7b:c1:3d:51:df:a7:36:25:27:b2:
68:8d:51:5d:6d:7c:ae:1c:41:21:2e:91:32:89:31:ad:50:f1:
c4:6d:c0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:12 2025 by rpki-client