Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EnU79HFk4zyEFlH5ClG1YWgN3Vs.roa
File: EnU79HFk4zyEFlH5ClG1YWgN3Vs.roa (raw, json)
Hash identifier: hgWq8sJMcBV4fR3GQhjEVdvXyyQPdQ+fcF0WHxrTvm0=
Subject key identifier: 12:75:3B:F4:71:64:E3:3C:84:16:51:F9:0A:51:B5:61:68:0D:DD:5B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F777DE82E9251020E5E1EB1C697C9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EnU79HFk4zyEFlH5ClG1YWgN3Vs.roa
Signing time: Mon 12 Dec 2022 07:32:03 +0000
ROA not before: Mon 12 Dec 2022 07:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
83.169.216.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
46.229.132.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:77:7d:e8:2e:92:51:02:0e:5e:1e:b1:c6:97:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12753bf47164e33c841651f90a51b561680ddd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:d5:8e:6a:bb:e1:2a:72:07:ad:38:f6:9b:
28:59:22:b6:94:e0:aa:57:71:ea:56:34:fd:57:6b:
4a:df:65:ca:2a:44:ff:01:20:d7:ec:1b:f3:b5:4d:
91:6e:31:19:4f:dd:d5:8f:9d:63:d0:0f:9a:f7:b9:
a5:99:82:93:49:38:2d:1a:7a:fc:6e:70:4f:44:0b:
8d:cd:8a:0c:e7:96:08:58:40:f8:c0:75:a4:4c:73:
60:8a:6a:d8:5b:7c:85:42:f8:60:e6:54:d9:27:6a:
65:6b:1f:7b:32:9f:89:73:96:93:30:d4:66:b5:cd:
9e:b0:04:a2:f4:23:8e:1e:52:30:a0:f9:2e:16:8a:
13:a2:96:ba:11:42:a8:15:15:9d:2a:87:c6:ef:88:
36:b3:02:7f:2c:b8:91:65:7d:3a:e7:be:f9:f0:d9:
6a:d3:bb:d6:91:86:cd:d1:24:24:11:85:07:fc:6f:
0b:35:79:fe:eb:87:5f:82:60:0d:31:17:f7:bb:ec:
b7:fc:3a:86:fb:c7:60:77:33:68:5f:01:56:99:f6:
63:dc:fd:ab:65:ec:7a:e3:60:58:f7:0b:8e:91:45:
ec:08:b1:ba:4d:99:b8:a5:48:b9:9d:d5:cb:16:12:
77:31:bb:2f:b6:31:27:70:3d:96:05:1a:c4:a1:12:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:3B:F4:71:64:E3:3C:84:16:51:F9:0A:51:B5:61:68:0D:DD:5B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EnU79HFk4zyEFlH5ClG1YWgN3Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:2d:cc:72:e8:e9:2b:aa:b4:ac:93:55:f6:fe:b1:05:99:cd:
12:15:2c:9f:04:21:51:e9:38:3d:18:cb:4e:9a:4f:6c:8a:24:
32:40:01:43:bc:b0:7c:e5:8e:58:5d:86:04:ac:43:16:df:f0:
f9:12:0f:2c:7d:2a:4e:df:e0:8a:c6:c8:3a:6c:79:65:fe:74:
44:fe:65:36:83:37:b0:b3:c1:84:da:db:ca:cb:76:ac:d4:67:
a1:96:6c:05:39:07:63:18:62:6c:3d:86:20:74:0b:69:a6:e0:
9a:14:ec:55:51:54:d9:ff:3c:a6:a5:27:d8:ff:62:62:b9:86:
0d:54:04:29:c5:34:9c:f9:fd:54:5e:6d:7b:5d:56:79:e5:5a:
7f:5b:a2:87:2a:2d:ca:98:4e:f4:f2:b8:5a:ec:1b:1b:bb:66:
9a:3f:60:ee:e6:f7:15:79:68:9e:db:4d:de:f7:34:65:3a:06:
ea:b8:68:93:12:73:cb:49:67:53:f0:99:5e:6a:ac:a7:3e:c4:
9b:fd:06:32:76:ed:67:4f:39:3e:6d:9d:da:5a:98:a1:9e:a3:
98:65:a1:9b:9d:83:f7:c9:37:10:6f:56:f7:32:08:0a:46:f0:
9e:98:92:3d:c9:10:81:11:b2:25:69:aa:18:f4:5e:ef:82:21:
6c:ba:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:25 2025 by rpki-client