Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EWgXaX9-A3imlLlc09HeXWpUiKM.roa
File: EWgXaX9-A3imlLlc09HeXWpUiKM.roa (raw, json)
Hash identifier: yAltnw0TX5rO1D0e6EHuZzU7DN9VPsgdXr96VbMJ0Ik=
Subject key identifier: 11:68:17:69:7F:7E:03:78:A6:94:B9:5C:D3:D1:DE:5D:6A:54:88:A3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2C2DCE7696F8268854EB4B9E7A699
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EWgXaX9-A3imlLlc09HeXWpUiKM.roa
Signing time: Thu 08 Dec 2022 12:43:03 +0000
ROA not before: Thu 08 Dec 2022 12:43:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
178.176.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:c2:dc:e7:69:6f:82:68:85:4e:b4:b9:e7:a6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=116817697f7e0378a694b95cd3d1de5d6a5488a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:a9:a3:05:45:0f:f3:bd:92:e3:14:fa:02:
04:e0:62:2d:79:b6:2e:a0:83:5a:2f:f4:13:86:ca:
96:52:a9:b6:41:9f:25:cd:82:cf:81:96:19:3f:fd:
02:6e:23:43:56:ae:2c:42:1f:d0:5d:45:c4:0b:6d:
26:c3:31:d3:a7:25:6a:47:05:48:70:d7:7f:f4:db:
2a:62:75:82:3c:a7:21:bd:ed:e4:53:9c:ed:e9:87:
03:e5:db:f0:2f:dc:c5:c6:30:e9:cb:54:9f:37:9a:
0d:0f:a9:56:d3:bb:4e:cd:ef:ec:29:95:49:9f:54:
82:74:69:0d:e3:69:a1:d6:ed:fe:61:a9:92:65:38:
d7:60:04:33:52:b3:b0:10:59:6b:06:96:46:1d:1b:
cd:52:48:79:57:5e:f2:b6:cf:69:a3:75:7f:2b:47:
d9:8a:a0:7b:82:a1:b6:89:7d:ed:7d:ba:62:e9:31:
e4:7f:e1:c5:1a:40:fc:09:2e:a2:1e:0e:78:88:77:
6d:71:f8:7f:99:48:2a:0f:9e:fb:64:45:65:4c:92:
bf:19:ba:33:b3:82:00:c1:5e:6a:22:32:35:cb:0d:
bb:d7:43:64:47:0d:b2:fa:dc:50:ff:c7:74:fc:b4:
14:16:f1:63:2a:87:2a:f7:2b:a6:dd:5f:5f:1c:68:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:17:69:7F:7E:03:78:A6:94:B9:5C:D3:D1:DE:5D:6A:54:88:A3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EWgXaX9-A3imlLlc09HeXWpUiKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
128.204.64.0/18
178.23.144.0/21
178.176.154.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:90:7a:b3:61:b9:17:d4:4d:8b:f2:ca:5f:e1:b3:39:69:5d:
ea:eb:57:71:2a:c6:92:9c:0f:31:39:78:4c:54:4b:dd:eb:0b:
0a:b8:d1:b2:54:19:d6:1c:57:4e:93:23:da:5c:95:26:a2:f8:
6c:7b:9d:c7:9e:83:be:ed:a5:b5:13:c9:75:af:ed:eb:46:f9:
32:52:1c:2f:60:ee:83:c1:7a:fa:b9:4c:97:0b:19:b5:62:56:
2c:78:c0:c5:24:65:2e:30:6c:63:72:77:a7:1b:19:07:ae:0c:
98:3a:56:50:30:dc:ab:f0:fb:d5:95:be:a5:3e:92:aa:cc:d6:
86:0a:25:d2:d1:f1:7f:d3:c0:82:94:5b:fa:25:3e:b9:d6:5b:
8a:ef:4a:b9:da:66:6d:c2:f9:af:3e:34:75:3f:a3:f7:b7:d3:
e5:c1:c8:3f:d7:60:be:f4:08:8e:22:54:88:63:c2:9e:01:ab:
74:73:6e:e7:1f:98:19:d3:1b:49:bf:c7:de:04:22:fb:f7:2d:
37:26:c5:91:fd:fd:16:2f:2f:55:48:57:0f:01:d0:5f:26:be:
b9:7c:77:0d:c4:43:ea:98:05:ef:49:26:56:6f:92:dd:11:89:
6b:8f:84:21:27:c1:e4:ed:a6:c7:13:05:00:b2:e0:73:52:db:
f7:5c:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:01 2025 by rpki-client