Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FbiVN5R89vsyjmqPrmbImwu3Mtw.roa
File: FbiVN5R89vsyjmqPrmbImwu3Mtw.roa (raw, json)
Hash identifier: A8OYaSRbgScFmJ/5DfQaOLBu3sDLKSJkkqOsoJTGrlo=
Subject key identifier: 15:B8:95:37:94:7C:F6:FB:32:8E:6A:8F:AE:66:C8:9B:0B:B7:32:DC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184763354B449DA3D9F4060DB031E29E70E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FbiVN5R89vsyjmqPrmbImwu3Mtw.roa
Signing time: Mon 14 Nov 2022 12:53:06 +0000
ROA not before: Mon 14 Nov 2022 12:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
78.25.64.0/18 maxlen: 24
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:54:b4:49:da:3d:9f:40:60:db:03:1e:29:e7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15b89537947cf6fb328e6a8fae66c89b0bb732dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:b1:29:21:ec:8c:fd:c7:54:a9:e2:1c:15:
35:50:2b:6a:3c:b8:fa:1c:da:71:d9:b8:25:e5:bb:
7f:36:b9:dd:2c:e5:26:c4:2f:0e:7f:11:0e:f3:b9:
f2:82:99:fa:01:6f:82:9e:96:d5:62:75:dc:11:b4:
50:54:d9:b2:48:1c:25:f4:94:0e:78:1b:fe:98:32:
40:ee:81:d2:e7:52:ed:e6:9b:e9:4e:3e:81:9f:84:
54:63:f9:95:d6:54:f0:49:8b:a1:29:c3:ba:fd:73:
b6:c1:0a:62:59:c6:5b:0b:fd:f5:86:56:aa:f7:5d:
3e:d8:d0:32:c4:55:c8:d5:4c:49:2a:73:ac:88:4a:
1a:03:0d:f8:4c:ec:78:4c:67:01:8e:5b:c1:52:52:
63:04:a4:97:91:2a:3b:5f:6f:5e:45:0f:4e:4a:86:
2f:fb:df:17:09:15:5e:88:2e:6f:f5:9d:7c:f1:ae:
e9:1e:f6:9e:71:4d:32:4a:38:a4:38:0a:d7:de:fe:
e1:b1:15:06:87:d3:84:78:52:cb:b5:d7:22:34:70:
d4:26:95:49:cf:16:6e:76:de:9b:ed:1c:89:44:1b:
31:fc:cf:1a:97:df:7b:f9:e8:69:f2:da:86:35:26:
c1:78:46:4a:be:e3:55:f9:91:fb:9a:e5:cd:ef:38:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:95:37:94:7C:F6:FB:32:8E:6A:8F:AE:66:C8:9B:0B:B7:32:DC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FbiVN5R89vsyjmqPrmbImwu3Mtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.0.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:da:2b:90:ab:59:6b:8b:d4:97:af:51:a2:c1:4b:0f:8a:ab:
18:11:2c:a6:6c:eb:c3:42:82:39:f2:40:60:4f:c0:5c:50:0b:
bd:05:75:e5:49:37:54:1c:36:1e:c6:d6:77:06:c5:f9:60:28:
81:0f:9d:02:74:21:fd:fa:88:2c:5e:04:dd:98:50:77:10:b2:
e0:84:73:73:a3:3f:61:1c:ec:8c:0a:05:ce:63:9b:d8:a4:c8:
ed:18:85:43:35:65:a8:3c:8f:20:8a:bf:43:e1:67:9d:65:37:
6e:6c:57:a5:d8:fe:0e:26:4d:32:bc:ce:22:e7:a6:0a:7d:82:
00:af:09:70:28:94:08:27:5e:41:b5:30:b2:21:eb:d2:29:62:
12:a9:a4:39:cf:a6:d5:bb:48:b0:16:91:19:e0:36:d5:26:62:
a9:45:8f:e0:7a:03:1b:7f:49:75:f7:b0:6e:b8:1a:8d:64:c6:
ba:8c:e0:ff:07:d4:ab:b6:50:06:1f:a7:aa:91:4b:c2:12:83:
fc:8b:2c:4f:dc:6b:2a:32:59:8e:75:e3:1b:13:b7:c9:8a:df:
94:a7:79:b6:c0:3b:a4:0a:31:6f:55:95:f1:fb:7e:53:ed:d1:
60:3a:06:0d:dd:39:ec:e8:8b:82:8f:ea:63:aa:ea:68:07:3d:
e3:f5:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:14 2025 by rpki-client