Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A-2lvoVMtl3UWyhfJZ8xM3tvYDs.roa
File: A-2lvoVMtl3UWyhfJZ8xM3tvYDs.roa (raw, json)
Hash identifier: 9ySMEkAAKe6Me+sX3fvkPjeS3hRQUcRnTIqgSx7BAUc=
Subject key identifier: 03:ED:A5:BE:85:4C:B6:5D:D4:5B:28:5F:25:9F:31:33:7B:6F:60:3B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0873FD1C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A-2lvoVMtl3UWyhfJZ8xM3tvYDs.roa
Signing time: Sat 01 Jan 2022 04:02:29 +0000
ROA not before: Sat 01 Jan 2022 04:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
62.64.0.0/19 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141819164 (0x873fd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03eda5be854cb65dd45b285f259f31337b6f603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:f5:cf:39:2b:ce:b1:84:8f:16:cd:ed:10:
84:b6:05:f9:43:57:e3:49:32:6f:dc:d3:e9:19:39:
ad:30:16:ed:6f:37:3f:4e:12:04:69:5e:77:52:bb:
4c:dd:65:56:8d:f3:d1:69:80:78:69:e9:a6:23:ce:
46:c3:01:1e:95:e0:d6:d3:7c:fd:6d:ea:ce:21:d9:
71:fc:c3:b7:84:38:c5:bd:c7:3c:29:0d:8c:b5:d1:
39:25:51:0d:7e:c1:00:b8:e3:9a:5a:84:36:b5:71:
62:11:e2:25:fd:ec:ac:c1:a3:a8:3c:78:4e:b2:67:
5c:15:8e:cf:78:62:8e:a6:65:1e:7b:1a:61:9f:2e:
5f:d9:27:06:5f:57:df:85:52:75:0c:37:2f:55:d6:
f2:46:68:f4:3f:cf:79:bc:63:6b:22:d0:eb:79:1e:
d5:be:9d:2a:4e:11:fb:bc:87:f6:44:a8:e1:00:c9:
05:15:65:d0:9f:36:d7:4c:31:a4:3f:01:99:e4:f4:
4e:76:fa:62:0a:72:b9:de:9b:97:22:cf:c5:47:cb:
e4:4f:57:51:af:67:02:1f:2c:cf:f7:08:c9:5d:97:
4b:f5:a2:84:f9:7c:ca:ed:3a:6c:74:7d:9a:39:46:
13:53:af:23:65:87:35:c1:b8:45:9c:df:f3:4a:d2:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:A5:BE:85:4C:B6:5D:D4:5B:28:5F:25:9F:31:33:7B:6F:60:3B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A-2lvoVMtl3UWyhfJZ8xM3tvYDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
77:91:f4:32:a0:bb:2d:c9:7c:6c:a0:c6:6a:ef:c6:4d:9b:8c:
27:9a:32:45:ce:71:01:ee:c8:53:9a:34:dd:e2:12:aa:4e:4f:
c1:1c:b9:1e:81:96:a9:7d:ab:fc:8f:2d:f3:e3:1f:dd:9e:1a:
ba:1a:02:a5:53:b1:0f:6a:86:0f:b5:91:3f:e6:10:44:db:ba:
0a:0f:a2:80:a5:98:3e:51:30:4c:86:e8:90:00:ae:11:08:2d:
df:c3:b7:48:90:8e:a7:56:ea:06:ec:56:33:37:4d:23:46:d2:
40:8a:49:06:02:eb:b4:bc:54:54:c3:4c:2b:46:f5:0a:be:58:
8c:ec:ec:ea:a7:df:75:c0:a9:36:b6:28:df:a8:41:34:49:00:
46:23:83:b0:67:fc:aa:35:5a:95:2e:92:2f:78:04:58:0e:7c:
d4:7c:b0:be:e8:ca:82:c6:2c:98:71:c7:bb:5e:2c:08:a9:de:
5a:f4:76:bc:78:66:f3:9b:35:67:2b:55:88:42:e2:73:1a:73:
ed:39:9e:9f:2c:0a:71:e3:27:8a:5c:9a:a6:e1:5f:38:49:38:
47:6c:35:89:4d:e6:b4:75:87:7c:5e:f2:1f:9a:f1:5f:32:11:
21:cb:96:29:3e:f2:df:93:6f:d2:66:7f:95:9e:86:db:24:04:
51:a1:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:11 2025 by rpki-client