Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AzV317VuRZDJEWO-QqmyULJDwhM.roa
File: AzV317VuRZDJEWO-QqmyULJDwhM.roa (raw, json)
Hash identifier: JTPOASXqGv5jDUi769EkHTu+9FFAeQWrip66u2SHJU8=
Subject key identifier: 03:35:77:D7:B5:6E:45:90:C9:11:63:BE:42:A9:B2:50:B2:43:C2:13
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176C371CC36B1CC3C51A2004AD35A64
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AzV317VuRZDJEWO-QqmyULJDwhM.roa
Signing time: Thu 08 Dec 2022 11:20:02 +0000
ROA not before: Thu 08 Dec 2022 11:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
178.176.154.0/23 maxlen: 23
31.173.176.0/20 maxlen: 20
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
37.29.76.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:c3:71:cc:36:b1:cc:3c:51:a2:00:4a:d3:5a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=033577d7b56e4590c91163be42a9b250b243c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:cc:5d:63:bf:4c:b9:53:4b:df:1d:b1:06:
99:02:2a:64:c5:72:d7:ea:98:e8:05:e5:32:a6:d8:
53:10:6a:37:5c:02:6e:9b:31:03:37:5a:02:cc:12:
73:4f:d2:6c:54:f8:9c:a8:a2:60:62:71:c5:ee:ae:
44:74:a1:b0:d5:07:20:81:2e:1d:dc:04:66:e2:27:
85:7c:37:4f:83:9c:f1:54:4e:95:3f:5b:8f:ae:65:
3f:f0:ac:94:c8:0d:a4:60:95:bb:ac:ae:86:35:4f:
b2:73:ea:db:c1:5c:6b:de:65:20:63:10:ef:41:b3:
e0:2f:da:4b:40:c6:e3:3b:f5:ff:bb:de:c1:55:aa:
28:b7:22:36:12:9c:80:1f:04:59:ab:65:95:55:c2:
fb:3e:25:e1:62:26:60:1a:49:90:12:ea:17:a5:04:
0b:e7:ba:4c:e9:92:8c:32:3a:6c:ce:61:7c:b4:99:
9d:e2:5d:71:d7:07:2e:13:c7:6e:e1:ac:ad:ec:d7:
f3:5d:fd:fe:54:84:4f:ba:e1:db:e9:6d:26:96:22:
84:ad:4f:d7:89:a3:47:84:28:3e:c8:2c:20:13:a2:
e3:18:d3:24:a4:54:55:ad:11:ac:b6:a7:5f:d4:28:
4a:0f:8b:48:9d:3d:21:4f:8e:27:76:dc:a9:07:b1:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:77:D7:B5:6E:45:90:C9:11:63:BE:42:A9:B2:50:B2:43:C2:13
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AzV317VuRZDJEWO-QqmyULJDwhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.154.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
02:2b:55:2a:4d:d1:02:4e:77:77:67:ea:19:86:a3:95:ed:c2:
20:4f:cc:04:ba:25:54:35:4b:a0:d5:d8:bc:4c:40:d4:76:6c:
c3:3f:d1:30:3b:b4:7d:7d:1a:3d:e6:c9:65:d7:63:ab:43:22:
41:d2:84:f6:f2:b6:f6:d9:01:73:d4:cc:f5:33:e7:15:a3:fe:
54:86:77:9a:df:20:0d:b5:d0:c2:16:8c:05:68:7e:6d:4a:98:
05:33:d2:70:08:09:27:6f:da:27:1e:a0:50:6c:8c:c3:ad:df:
f4:2d:06:47:dc:42:22:a0:dd:81:d9:da:0f:57:0f:83:69:c4:
e0:4d:0f:f2:d6:62:2f:f6:7a:b4:b2:00:0c:b8:c9:50:dc:21:
27:62:32:c4:3d:7c:f4:ed:3b:1b:1a:23:e1:fc:33:00:cd:86:
25:f4:c0:25:42:71:37:1f:b3:9c:4d:dd:20:6c:26:56:c2:b0:
7f:c3:5f:72:bc:e6:95:be:c7:41:c6:71:f0:22:33:f0:61:18:
14:18:c3:13:51:ac:30:bf:5d:27:cb:f1:d6:b2:18:7f:de:0d:
24:b1:2b:de:2e:48:bf:76:04:61:2e:03:34:6b:b0:bc:cc:1e:
89:8d:29:02:ee:d8:32:a3:ec:27:b1:a7:c9:35:c6:17:c6:1c:
f5:70:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:07 2025 by rpki-client