Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BT1PsB11y0mqBTdXMm7uH6D8hx8.roa
File: BT1PsB11y0mqBTdXMm7uH6D8hx8.roa (raw, json)
Hash identifier: v7v6Agu6zHAzo6RR15Bzlt0HyvmPbZGaTbHrUtKqDC8=
Subject key identifier: 05:3D:4F:B0:1D:75:CB:49:AA:05:37:57:32:6E:EE:1F:A0:FC:87:1F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018476335705A36361140C1B0EE890DFE668
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BT1PsB11y0mqBTdXMm7uH6D8hx8.roa
Signing time: Mon 14 Nov 2022 12:53:06 +0000
ROA not before: Mon 14 Nov 2022 12:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:57:05:a3:63:61:14:0c:1b:0e:e8:90:df:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=053d4fb01d75cb49aa053757326eee1fa0fc871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:11:97:3f:d9:d2:72:71:0c:d5:1e:8b:05:
53:07:f7:dd:bc:ff:85:01:3e:1c:49:7d:2b:95:8f:
7c:43:19:0c:3d:57:3b:87:c7:aa:c7:9d:8c:35:99:
66:a4:e4:d0:9f:6e:32:95:eb:7b:39:a0:80:e6:e5:
2b:e1:3f:a7:12:ec:de:e4:4b:05:55:7c:14:88:b4:
70:dc:be:a7:64:00:94:de:29:4f:89:e2:22:eb:71:
60:4c:b7:88:f1:8f:a7:f2:8d:4c:92:b6:fe:82:f2:
8e:33:04:c0:2f:79:25:00:e5:d3:6f:ae:8b:1f:5e:
a0:97:0a:ef:02:d2:b1:f0:c1:32:29:21:77:ba:c0:
1b:35:37:24:fa:a0:91:f5:5b:d7:1e:26:08:ae:0e:
5a:66:8f:57:19:64:59:31:60:9f:e5:cf:39:99:e3:
c5:d3:42:e9:7e:1d:13:18:6a:61:84:87:9e:8f:9d:
5d:79:d3:08:80:32:09:00:d5:af:fe:0d:71:5f:2b:
63:74:9c:ae:78:1d:0a:c1:cf:ef:29:5b:7d:b5:71:
03:89:70:3e:63:92:2f:43:b0:11:6f:c1:9a:b2:41:
9a:0c:38:8f:70:18:ec:82:1c:55:4f:6f:71:d2:ae:
4a:92:5c:c7:cf:a8:49:a4:f1:25:eb:27:23:80:4e:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:4F:B0:1D:75:CB:49:AA:05:37:57:32:6E:EE:1F:A0:FC:87:1F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BT1PsB11y0mqBTdXMm7uH6D8hx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:fc:de:ab:55:1a:b8:a6:3e:d8:13:8f:f8:62:12:3e:b9:87:
8d:31:c7:c5:15:d0:88:89:6e:fc:43:fa:fd:c2:32:3a:f8:15:
d1:12:cc:a1:61:68:aa:0e:5a:d8:40:13:69:e3:44:e6:64:8f:
b0:fe:89:2a:3c:14:5e:bc:d9:7c:7b:e4:6a:17:ac:d3:7e:43:
41:18:79:51:88:fe:fd:d7:52:c1:63:25:71:23:d7:6d:e5:81:
39:0b:99:1b:38:3e:e4:42:47:e0:6f:5e:a0:38:9c:dd:7d:9a:
ce:47:46:16:b6:3e:45:5a:7a:cd:94:09:50:7b:42:c0:c7:45:
56:92:11:6d:d1:3e:ac:6d:73:92:75:79:e9:55:32:0d:68:5b:
d5:18:ba:dd:e3:23:d0:31:bd:41:fa:3e:13:4e:ec:96:bf:7f:
da:30:82:e5:63:91:42:be:1d:b5:52:4e:54:a4:b9:b7:f9:75:
17:71:cd:06:13:18:72:07:36:55:55:3b:71:66:e5:41:88:ab:
f9:06:cd:ed:68:6f:b4:6d:fd:8c:6d:92:9b:20:16:16:51:ed:
ee:40:f2:34:ce:0a:27:22:1e:ed:e2:02:2c:e9:ed:f7:35:9c:
54:89:ed:d9:34:db:0f:0d:99:79:50:7a:73:b5:fa:11:33:d0:
5f:9f:0e:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:17 2025 by rpki-client