Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FkHy58j428AqMPj5mEVAUVEO0Hw.roa
File: FkHy58j428AqMPj5mEVAUVEO0Hw.roa (raw, json)
Hash identifier: SsFEBWJrxnaUEs3JAdBSUPmiEf/lj6p1J1P8pFyyI8c=
Subject key identifier: 16:41:F2:E7:C8:F8:DB:C0:2A:30:F8:F9:98:45:40:51:51:0E:D0:7C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D29A7898C9A89F2320A8764A818953CC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FkHy58j428AqMPj5mEVAUVEO0Hw.roa
Signing time: Fri 02 Dec 2022 11:30:49 +0000
ROA not before: Fri 02 Dec 2022 11:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:78:98:c9:a8:9f:23:20:a8:76:4a:81:89:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 11:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1641f2e7c8f8dbc02a30f8f998454051510ed07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:42:78:f8:3b:8c:63:a9:1b:70:14:e4:51:
29:fc:f5:9f:b1:2c:18:e0:92:58:eb:b1:00:c0:7e:
94:63:f7:b1:68:05:ae:78:cb:34:1d:6e:92:67:b1:
af:e4:4a:5f:ff:8e:32:38:35:b9:ff:00:a5:7e:86:
a6:c9:d7:62:bc:64:1f:37:01:2b:a9:8b:a8:65:b8:
85:89:17:ab:da:ca:d0:1a:55:2e:c9:1c:2b:44:d3:
f9:f3:12:aa:9f:79:2f:01:7a:7a:be:d4:c3:2b:82:
d6:51:08:bf:09:55:8b:91:06:78:30:5b:20:1e:c9:
22:d7:30:7f:ac:36:13:d1:2b:54:aa:dc:3f:12:d1:
ce:8a:79:a6:23:2e:7a:8a:55:0d:6d:55:30:53:7e:
fc:84:3a:a3:71:50:e2:36:d7:3a:09:60:ae:46:e3:
d4:32:79:95:3b:10:92:91:a3:e3:ee:19:d6:aa:20:
08:cb:4a:20:65:95:0e:b0:ea:8f:8d:52:87:00:4b:
8f:d2:7d:7e:3b:b8:ff:7c:b4:e7:a7:ed:54:22:e5:
08:f0:eb:8d:86:40:c3:94:7c:d2:55:fc:70:ec:01:
76:d6:de:30:bf:9c:c2:b7:65:b1:f9:47:28:bb:b1:
fe:9d:49:c3:55:70:49:aa:75:30:34:1d:24:42:08:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:F2:E7:C8:F8:DB:C0:2A:30:F8:F9:98:45:40:51:51:0E:D0:7C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FkHy58j428AqMPj5mEVAUVEO0Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
44:13:6c:9b:e8:2b:9b:e3:cb:ab:81:3f:16:55:45:bf:4c:ee:
cd:9c:98:98:68:5e:e1:4c:f1:d2:93:a0:c7:ce:e6:e0:ba:0e:
83:7e:4b:be:f1:f6:b2:db:64:b7:84:6a:95:dc:06:cf:ed:a1:
50:d6:d2:6f:e7:2c:13:f7:25:02:47:59:82:7d:d1:33:35:21:
b8:c6:f7:5d:8b:95:42:19:31:ff:2b:f1:fa:9e:1e:83:de:1b:
64:6b:f4:bd:89:4b:d9:1f:e2:57:32:61:1f:e6:81:2c:1c:61:
fe:af:b7:55:68:c7:46:35:f1:57:fe:89:4b:42:40:e9:f5:15:
05:a8:06:84:d6:c3:3a:33:09:0c:12:b9:9f:7d:26:80:81:c8:
ee:39:d2:93:c9:e0:32:66:ae:ad:c0:58:71:7b:51:6b:65:ac:
cd:70:9f:bf:db:2a:ba:b9:7b:99:71:93:57:e5:9e:8e:14:fa:
d3:76:d9:3c:cc:6c:ad:8a:04:e0:46:1b:9a:8f:39:bf:93:d4:
8b:a4:15:fd:9e:5b:a5:6c:01:2d:fa:ad:9d:6c:49:c8:f4:5e:
60:ac:af:9d:8c:4d:93:53:26:8b:2b:0f:5f:d7:59:a1:df:1d:
32:7e:ad:af:a7:85:9a:e1:b7:54:10:a0:4c:45:7b:aa:a9:f6:
84:21:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org