Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EWkaxioC3K95x9diwdq09JFOh0s.roa
File: EWkaxioC3K95x9diwdq09JFOh0s.roa (raw, json)
Hash identifier: YwmMgn0+hnDRd519DedCbEbYnvp80KjW003raZSOWnc=
Subject key identifier: 11:69:1A:C6:2A:02:DC:AF:79:C7:D7:62:C1:DA:B4:F4:91:4E:87:4B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841D9455328AF52A86974C2C956E4AD472
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EWkaxioC3K95x9diwdq09JFOh0s.roa
Signing time: Fri 28 Oct 2022 07:52:51 +0000
ROA not before: Fri 28 Oct 2022 07:52:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
62.64.0.0/19 maxlen: 24
37.28.160.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:94:55:32:8a:f5:2a:86:97:4c:2c:95:6e:4a:d4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 07:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11691ac62a02dcaf79c7d762c1dab4f4914e874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:ca:11:9a:f1:50:d4:b6:20:5b:c1:c6:46:
04:bd:88:a0:9f:56:47:86:32:d3:4a:f1:52:5c:76:
e2:af:38:76:ae:84:75:cf:1c:c2:ea:32:2b:44:ed:
01:76:96:4a:2b:63:c0:fe:8b:c9:fc:91:a9:a1:81:
2e:d8:1f:1d:c4:49:eb:c1:8f:06:d5:bb:23:10:9f:
64:36:21:22:2a:0e:3a:58:f0:d0:3c:72:55:2e:9a:
5e:e1:47:ca:50:bd:df:e6:06:e6:5d:5f:00:66:44:
3b:6c:c8:35:90:11:96:4f:cb:f2:16:9a:c8:66:3a:
36:a8:55:44:03:7d:d9:1c:a4:64:49:e8:8a:f1:1d:
08:fd:63:6b:2d:6e:a7:37:5d:9c:33:2a:f8:a5:13:
c9:27:2a:c9:57:dd:ef:d5:95:c9:e8:12:9a:1d:cc:
91:a0:69:ca:7c:7f:41:3d:1a:63:fe:47:ad:5a:1a:
78:d2:06:dd:be:5d:f8:ca:77:1b:8f:0d:c7:ba:15:
e8:b7:25:db:84:a2:a9:f1:8f:95:bf:56:c2:ad:c0:
ed:00:db:c3:92:1b:2f:22:04:0b:7c:f7:19:14:d3:
5f:88:76:b2:23:98:ba:98:d7:e0:2c:85:4c:f8:21:
51:67:e5:d2:43:c5:0e:4c:95:3f:1a:e7:f1:3b:43:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:1A:C6:2A:02:DC:AF:79:C7:D7:62:C1:DA:B4:F4:91:4E:87:4B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EWkaxioC3K95x9diwdq09JFOh0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:42:0e:f1:7e:6b:b6:6b:57:ec:45:98:0f:8e:dd:71:2c:4a:
ac:9c:7b:33:4d:4d:5c:e8:51:f7:25:f9:bf:8a:d7:b6:6e:1f:
f6:1e:ed:15:8f:9b:be:03:f5:19:14:80:27:a9:04:5f:83:73:
75:b2:dd:08:2d:ec:69:c4:5e:4e:67:06:65:73:e5:f9:f1:5b:
c6:2a:19:be:a8:94:a8:70:83:d3:ad:6e:63:d3:38:dd:05:cb:
f7:8b:f8:8e:8c:d4:a0:4f:11:bc:10:0f:8f:fb:e2:4b:b3:f8:
e0:aa:09:f9:e7:ea:b8:56:56:01:19:00:76:f2:b0:50:8a:f9:
7d:c0:2b:13:4a:07:6b:f8:25:1e:2d:47:84:11:32:1d:14:05:
f6:e2:ec:a0:2c:fe:13:70:31:5a:87:25:59:71:19:1d:06:2d:
84:22:27:7b:71:12:25:43:4b:ab:25:4d:80:77:fe:29:2e:0a:
06:94:91:1b:73:71:50:82:6c:a9:be:16:d2:cb:3c:50:80:03:
c7:05:96:11:ed:d0:00:34:f5:a9:6f:ce:e2:b1:23:ff:fc:0a:
08:f2:ae:70:99:76:ce:b4:f5:af:9d:13:59:e5:fa:1f:7c:2e:
c0:eb:7c:87:1b:76:4d:e7:d9:3d:d0:39:67:96:13:12:ca:d4:
60:3e:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org