Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CuineN_FKTF91LBo-n1ygp8sUmo.roa
File: CuineN_FKTF91LBo-n1ygp8sUmo.roa (raw, json)
Hash identifier: b668cBLcTyNtIhVtVZ8xRkHun/aF5e668+W3l8MGdug=
Subject key identifier: 0A:E8:A7:78:DF:C5:29:31:7D:D4:B0:68:FA:7D:72:82:9F:2C:52:6A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184328867E30D90BBC6C36584CEA34ADE65
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CuineN_FKTF91LBo-n1ygp8sUmo.roa
Signing time: Tue 01 Nov 2022 09:31:51 +0000
ROA not before: Tue 01 Nov 2022 09:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.244.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.245.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.252.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.248.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:88:67:e3:0d:90:bb:c6:c3:65:84:ce:a3:4a:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 1 09:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ae8a778dfc529317dd4b068fa7d72829f2c526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:f5:3f:90:ca:b2:37:1b:3c:91:2f:20:7a:
a9:f9:bd:af:66:e8:e7:7e:ec:2c:1e:fa:68:6d:70:
b8:6b:bc:74:d7:f5:d2:0b:64:31:60:6b:8d:a3:c0:
ba:5e:1a:37:1c:3d:72:be:c1:01:b7:65:ad:57:9d:
2b:4a:5a:75:6e:db:73:eb:63:5f:42:ee:e0:35:e8:
a2:db:93:50:9a:22:fc:67:28:48:44:b5:96:7d:de:
13:52:5e:91:64:5c:27:de:0c:2f:cc:c4:4c:be:05:
ea:1d:26:36:b1:e0:fb:0a:62:3a:9c:14:b5:aa:a2:
d4:62:bb:8e:9a:75:b3:70:b9:3f:89:12:39:e2:9a:
f6:8e:bb:68:45:a6:b5:f3:cf:d7:15:38:9f:7d:08:
b4:8c:c5:bb:22:98:a5:66:61:61:51:a3:7c:6d:f7:
b7:25:75:f4:1e:52:8a:14:e7:85:44:ba:df:76:0d:
9b:5e:16:36:94:8f:d8:34:a0:63:48:04:a3:2c:a9:
82:a5:f8:d5:0f:38:e2:f8:db:13:01:61:4e:34:f6:
6e:b7:f8:91:54:3a:e9:2b:f2:9f:c0:39:1a:08:57:
f7:4e:fe:b9:e1:e4:89:93:6b:b1:87:85:59:1d:c7:
64:da:6f:f0:2f:8c:5a:16:3c:de:4e:e5:ac:09:48:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:A7:78:DF:C5:29:31:7D:D4:B0:68:FA:7D:72:82:9F:2C:52:6A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CuineN_FKTF91LBo-n1ygp8sUmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.248.0-178.176.253.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.244.0/23
188.170.248.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
38:57:46:6b:9a:9c:d7:7a:92:d8:74:84:46:c8:81:05:7e:7a:
84:57:8a:ef:1a:e4:de:08:4e:84:9f:41:25:d3:de:7c:be:28:
c2:ce:39:c4:46:d2:6a:c6:58:2f:21:e7:44:f7:01:71:68:92:
b7:80:92:10:83:9e:fb:da:e0:9d:f8:e9:53:e3:23:1b:dc:48:
05:23:84:97:d7:f0:3d:8d:9f:7c:4d:6c:9c:f3:5d:e4:ec:ce:
df:53:4b:7d:53:c7:14:fd:45:38:76:82:50:cd:1d:13:88:8f:
26:ca:ed:b0:9f:32:fe:a3:b2:96:fd:71:9e:82:01:b0:38:0c:
be:76:b8:30:e6:f5:b9:8d:3b:4d:1a:cb:f2:3a:18:b2:8e:a8:
4f:f6:7f:07:3c:f2:1b:b6:c9:5b:ec:57:be:27:e3:a6:4a:92:
4e:a2:76:e1:ca:2e:66:eb:24:0e:74:d5:e5:7b:ae:62:e9:9c:
da:b5:d3:97:c7:88:38:1e:69:8b:7a:ea:d4:b3:9e:9a:8e:95:
73:91:95:ab:82:b8:22:5e:de:82:5a:44:f3:44:59:8f:dd:29:
c9:7e:a7:61:c7:ed:ab:64:50:51:a4:6e:56:b9:2a:cc:c5:c8:
e5:82:a6:37:f2:17:87:e4:73:95:7d:1e:f6:30:e5:c7:ae:d2:
91:b0:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:30 2025 by rpki-client