Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Cu7-cLO5GxkJSKjBxOq8F76PI1k.roa
File: Cu7-cLO5GxkJSKjBxOq8F76PI1k.roa (raw, json)
Hash identifier: P2VGuF79RxRblDSPOp1YsH8KJtsPwMgzsy2VbYbN7zM=
Subject key identifier: 0A:EE:FE:70:B3:B9:1B:19:09:48:A8:C1:C4:EA:BC:17:BE:8F:23:59
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF85128FC16D589EFA52367DAE22C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Cu7-cLO5GxkJSKjBxOq8F76PI1k.roa
Signing time: Mon 05 Dec 2022 12:21:31 +0000
ROA not before: Mon 05 Dec 2022 12:21:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f8:51:28:fc:16:d5:89:ef:a5:23:67:da:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aeefe70b3b91b190948a8c1c4eabc17be8f2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:95:78:05:72:8d:5a:ba:62:58:07:8d:54:
29:49:a1:c5:5f:f4:bd:e4:ae:54:44:17:63:2a:01:
1b:36:77:e0:4c:99:21:22:1d:39:12:68:79:47:88:
f7:fc:ec:da:20:87:19:00:3a:3a:01:fa:6b:09:d3:
8e:7a:89:22:4c:2a:e5:c6:46:08:cc:48:37:89:2f:
6a:67:af:26:5a:e0:ef:df:b7:96:28:7c:42:cf:39:
b3:e8:a6:7d:40:ec:51:95:c8:de:24:72:ed:dc:db:
92:e3:09:36:6e:ea:40:2b:16:ff:11:04:48:e6:fc:
b4:d5:cc:90:02:25:b9:60:06:2b:79:03:ba:87:09:
7a:07:c3:84:64:ca:24:29:83:cb:57:0a:92:f2:79:
0e:6f:c5:7a:65:e0:ee:9a:b4:94:9b:68:1f:7f:f5:
a2:a0:ce:48:42:f4:06:cf:1c:ff:5b:29:f0:82:3c:
64:13:4b:93:2e:2d:aa:75:ed:1d:2d:53:35:c8:79:
02:b9:87:af:c5:61:6b:67:8c:ed:1e:59:a3:84:18:
37:96:87:64:96:d2:86:6f:da:27:81:d3:10:8f:f8:
b4:37:bd:57:ea:20:4b:5f:0c:b2:fd:e8:c7:0d:06:
21:60:32:2d:f3:91:9b:d1:6f:51:a8:5a:7d:a9:02:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:FE:70:B3:B9:1B:19:09:48:A8:C1:C4:EA:BC:17:BE:8F:23:59
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Cu7-cLO5GxkJSKjBxOq8F76PI1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
55:86:40:05:7a:30:08:5a:f6:a2:ae:88:8c:f6:fb:2c:cf:14:
31:b9:92:f2:52:14:29:35:6d:20:ea:d4:f8:83:18:f4:a2:e7:
06:77:81:a4:cc:04:8d:10:8d:71:82:1f:e7:d1:38:eb:57:7b:
4b:9c:38:7f:0d:bf:af:33:4d:a2:03:8b:b7:ee:3f:3e:eb:ea:
62:b4:90:7c:b4:ea:b1:4f:4f:06:92:22:0f:50:1e:63:d9:a0:
12:c4:c3:66:84:39:45:1e:ec:9b:fe:0c:16:2d:4a:24:67:d0:
2e:c4:fe:43:e0:6f:16:09:b7:4d:06:9a:0e:6b:4c:2e:17:18:
f4:bd:77:79:a4:d3:9b:36:f5:f9:f6:08:7e:37:ab:94:f1:7a:
7a:cd:8e:05:98:92:17:93:c2:4a:9a:d9:55:b3:d9:9f:8c:05:
a4:24:cf:03:0b:5e:68:73:6d:6f:a5:c3:9a:7e:e8:ed:95:5b:
b7:b5:bb:c2:4c:39:2f:78:19:4a:d0:83:cb:38:c8:22:df:3a:
28:12:b1:6f:c5:53:ea:3c:d6:76:0a:09:81:a6:9b:02:22:ee:
25:13:c5:68:a9:d7:b6:f0:47:2d:61:e5:ad:18:24:96:e6:46:
4c:af:59:b1:bd:39:b2:33:f7:c6:a4:fb:8e:37:db:53:2a:4e:
05:31:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:20 2025 by rpki-client