Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DGA49iD2sccWHNxHHc2W_OMBf8E.roa
File: DGA49iD2sccWHNxHHc2W_OMBf8E.roa (raw, json)
Hash identifier: SlR2HoV+2lsbyYn7EFS/YMMvKXGl341FK+iWKQ5ucSA=
Subject key identifier: 0C:60:38:F6:20:F6:B1:C7:16:1C:DC:47:1D:CD:96:FC:E3:01:7F:C1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 087C497B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DGA49iD2sccWHNxHHc2W_OMBf8E.roa
Signing time: Sat 01 Jan 2022 04:02:37 +0000
ROA not before: Sat 01 Jan 2022 04:02:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
62.64.0.0/19 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142363003 (0x87c497b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c6038f620f6b1c7161cdc471dcd96fce3017fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:bd:00:df:e4:5c:0f:f2:12:29:2a:53:1b:
ac:04:79:5e:fa:63:47:45:5f:68:95:ab:f3:12:19:
6e:4c:c4:6c:db:ef:bf:ff:dd:cf:59:e2:08:26:7c:
0b:af:76:c0:cb:2f:e1:66:0c:64:42:cc:7f:e7:cf:
31:6f:33:33:de:77:fd:0b:61:38:1a:75:bc:a1:21:
d9:5a:eb:b4:47:c2:c6:c7:e8:f6:1d:d6:e9:91:d2:
26:ad:81:d3:64:c6:13:2a:12:9f:2d:0b:7e:26:70:
b4:bf:28:79:54:d4:6e:e4:f7:a2:50:cc:c1:6d:0a:
10:64:5f:0f:f8:0b:55:83:b6:c1:e1:14:1c:d6:7b:
56:ab:ff:71:d9:35:1a:f8:ee:c4:e1:41:3a:f4:8c:
a6:84:62:73:89:dd:92:8d:39:6d:c0:1f:f0:c1:7a:
86:50:56:88:6b:b6:d9:b7:b4:1b:ea:fb:e5:d3:4c:
02:ec:66:d0:5c:ef:08:81:65:de:fa:39:56:5f:d8:
af:6c:0f:fa:a1:de:44:9e:2b:62:e2:65:7b:49:aa:
f9:ce:16:ca:ca:44:5e:df:0e:48:f8:c9:d7:cc:3e:
c0:60:14:87:b7:28:d0:fa:dc:12:72:da:97:5c:2a:
f6:d9:4a:b2:6e:5e:05:88:5b:cf:06:b8:60:d3:66:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:60:38:F6:20:F6:B1:C7:16:1C:DC:47:1D:CD:96:FC:E3:01:7F:C1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DGA49iD2sccWHNxHHc2W_OMBf8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:c9:7e:17:d1:92:81:fa:5f:8f:d8:c1:67:99:d9:5b:0c:68:
f7:7f:f2:09:04:13:85:27:0e:28:ff:c4:2a:9a:d8:56:2c:dd:
49:7b:b3:ce:8f:83:c2:0f:48:95:3c:4e:c7:d9:0b:7a:52:cd:
b7:f1:ac:46:f6:ec:b6:84:33:78:e9:29:e2:1c:5c:b9:96:95:
8e:e3:ea:56:0c:55:59:5d:8e:23:b5:bf:76:59:d9:bc:de:08:
e2:c6:31:fa:d7:23:1d:56:01:14:98:6e:3c:44:36:c1:38:c1:
ac:8c:09:57:9d:6e:52:e2:68:f0:36:04:28:5f:86:b6:c8:23:
55:8c:54:32:02:65:48:44:90:d2:a1:cd:74:b3:56:ed:fa:cd:
62:34:50:6d:c6:5b:9f:db:e7:d9:20:c4:7c:41:56:59:be:e5:
d9:b0:ca:35:6a:8a:bf:c7:da:59:e3:13:bf:9d:a3:a7:61:53:
00:3b:67:5a:5d:29:1d:7b:da:29:34:46:64:d5:e8:12:0b:29:
9f:62:f3:4b:74:26:26:12:db:88:99:09:07:9c:05:29:34:ce:
0f:17:13:1c:ad:36:cb:7b:e2:e0:c0:50:bb:c2:36:98:a1:3f:
13:08:d8:a1:3c:8a:1b:be:99:c5:e7:61:ad:a6:97:a3:61:e3:
6b:47:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:44 2025 by rpki-client