Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DHrCEhdhMVQRlBh0ymRecnKX6-Q.roa
File: DHrCEhdhMVQRlBh0ymRecnKX6-Q.roa (raw, json)
Hash identifier: wQLxWc3DUXXsopdrON3Q0uRY3UYf0u3HfkpkygqLL+0=
Subject key identifier: 0C:7A:C2:12:17:61:31:54:11:94:18:74:CA:64:5E:72:72:97:EB:E4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D1C33292945E566BF7D1DB54836BA1E4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DHrCEhdhMVQRlBh0ymRecnKX6-Q.roa
Signing time: Fri 02 Dec 2022 07:35:41 +0000
ROA not before: Fri 02 Dec 2022 07:35:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
78.41.100.0/22 maxlen: 24
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
2a03:d004::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:c3:32:92:94:5e:56:6b:f7:d1:db:54:83:6b:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 07:35:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c7ac2121761315411941874ca645e727297ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:fb:98:27:0e:6c:46:f9:c7:14:2c:c3:db:
c9:9f:62:aa:bd:e3:fd:a8:68:f2:f8:87:0a:be:c2:
d8:1f:22:26:31:89:6a:e0:ac:2a:06:f3:b3:75:07:
02:5d:43:dd:fd:91:6a:20:00:45:bc:57:17:d3:1a:
dd:90:1f:07:6f:96:8a:0a:8c:b3:b3:72:30:8b:0c:
97:77:11:8a:be:9f:70:95:35:e8:7d:a5:01:b0:48:
bb:da:b7:d8:e8:ef:a4:31:b4:e3:5b:63:ab:e3:05:
30:32:73:4f:5c:07:a2:cc:66:29:71:c9:04:a3:69:
dd:07:c9:6e:86:ca:07:2b:7c:9f:c5:84:88:33:29:
bb:3d:a5:03:a9:e8:57:f1:bb:5e:e1:ec:07:af:89:
b9:93:8f:28:7c:96:c3:00:2b:e9:1c:77:5f:ae:2d:
b9:8f:4c:eb:e3:44:2b:f4:73:e9:f0:c3:77:3e:a1:
dc:6f:c7:b9:6f:10:01:6f:93:9b:6c:3d:41:09:a6:
a1:5e:9a:bd:a6:39:89:c0:fd:b9:9f:69:42:3a:80:
86:86:ed:44:ee:de:a5:e3:69:21:da:e8:bb:ae:5d:
9b:ee:69:64:82:f9:31:d4:f5:f5:67:40:fb:cf:0e:
18:0b:32:9d:e8:d9:de:d3:40:17:dc:30:07:7f:f9:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:C2:12:17:61:31:54:11:94:18:74:CA:64:5E:72:72:97:EB:E4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/DHrCEhdhMVQRlBh0ymRecnKX6-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
IPv6:
2a03:d004::/36
Signature Algorithm: sha256WithRSAEncryption
50:37:72:4d:5f:04:14:6d:56:0c:91:ad:47:f5:05:1a:76:4b:
4e:3a:33:f3:6f:7c:a8:f3:b8:2d:9d:78:9d:58:38:4b:42:14:
41:d7:d7:78:f2:78:50:dc:15:ba:ba:8f:ec:6b:62:14:71:8e:
0c:af:2f:3f:b3:51:10:e3:74:f8:b9:4d:ab:01:8b:7e:6b:60:
57:3d:8e:4f:f6:28:d3:fc:ff:c4:f9:75:69:69:12:96:0e:fd:
93:5a:bf:ac:40:47:8f:99:41:b8:6b:61:50:f5:2f:7a:2b:a1:
1f:68:19:28:62:a7:20:56:4e:d2:d1:2f:c3:9b:c8:90:df:46:
34:fe:f2:6f:17:f5:7e:f8:f7:5a:32:90:00:87:4f:b4:56:83:
a1:06:18:a3:1c:23:51:e1:29:fd:ff:e3:38:c1:52:d9:ba:b8:
7c:72:b4:d8:03:15:fe:40:3f:a4:b1:99:7c:4b:db:19:6b:47:
52:f5:77:ab:8f:3e:99:df:e1:76:c9:34:0a:32:ca:61:0e:27:
f5:ef:b7:ad:d4:9b:35:b8:f1:3b:2c:8a:9c:1e:cc:5a:95:77:
6c:f4:6c:3c:cd:82:d1:d5:d8:b1:f3:b0:35:f1:5c:62:07:25:
c8:b8:1f:58:68:60:e7:71:3c:56:3e:45:15:8a:37:64:3b:1a:
93:21:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:15 2025 by rpki-client