Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/H7rP9EtYpsw_qXjJZ0fFOvfCGIc.roa
File: H7rP9EtYpsw_qXjJZ0fFOvfCGIc.roa (raw, json)
Hash identifier: S6kkKcWmhjN7uf9vQoubZcgjoN1LTdKWRAeBbOEZwMQ=
Subject key identifier: 1F:BA:CF:F4:4B:58:A6:CC:3F:A9:78:C9:67:47:C5:3A:F7:C2:18:87
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCDBC11772CE938C70A07BE06C450
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/H7rP9EtYpsw_qXjJZ0fFOvfCGIc.roa
Signing time: Tue 29 Nov 2022 15:09:43 +0000
ROA not before: Tue 29 Nov 2022 15:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:cd:bc:11:77:2c:e9:38:c7:0a:07:be:06:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fbacff44b58a6cc3fa978c96747c53af7c21887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:51:92:73:e2:14:d0:c9:ab:b7:e3:0b:bf:
f8:79:28:78:c8:22:99:32:32:09:f3:a9:96:93:0a:
af:fe:17:26:57:87:ca:6e:3f:49:df:db:92:90:19:
40:2b:f6:c1:76:81:6d:cb:f9:6f:89:26:43:a8:b6:
e9:a8:0e:bf:18:88:7c:27:73:b0:56:1a:29:03:9c:
d3:c1:f1:c8:52:eb:2c:b0:c9:af:85:74:2a:ee:bf:
e2:f7:86:08:ea:d2:25:d3:c3:af:d5:67:5c:3c:b2:
38:cd:90:1b:56:33:9d:56:4f:a4:3d:56:66:8a:8b:
15:d1:b5:04:cd:48:6d:3e:3e:e3:02:72:17:63:dc:
91:45:0a:5b:63:dd:f7:82:be:0e:9e:98:4c:7c:8c:
06:38:e5:28:0d:5a:97:c2:c2:6f:0d:f7:28:25:47:
a8:73:33:73:65:5e:dd:0f:01:1d:c1:79:ed:51:85:
75:44:d9:36:2d:38:83:67:2c:8d:ff:5a:29:50:61:
c7:df:6f:e6:8e:d9:a5:ea:b4:33:e9:88:b0:d5:e8:
6e:67:92:fa:87:ad:45:e1:9b:90:d7:99:13:4b:63:
c3:06:04:dd:2e:58:e6:65:e3:dd:ac:07:52:19:8f:
98:8e:17:16:e6:b5:27:0b:1a:6d:2f:93:f7:40:9b:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:CF:F4:4B:58:A6:CC:3F:A9:78:C9:67:47:C5:3A:F7:C2:18:87
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/H7rP9EtYpsw_qXjJZ0fFOvfCGIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:f0:7c:3d:d0:f5:ad:f9:0a:90:c5:48:02:94:d4:de:ac:ed:
d2:5e:aa:92:34:63:d3:e1:22:27:1f:85:cd:b4:19:f8:6b:b6:
d3:c9:6c:e8:21:c1:0c:98:72:4a:28:97:45:46:1c:f6:e8:fa:
e7:e0:73:4e:97:74:5b:ab:1e:51:76:a5:4d:7c:78:07:ee:5a:
f7:af:95:d4:2c:c5:79:0b:5e:15:59:84:ba:01:5d:5f:1a:d1:
ef:eb:9f:8f:6f:06:90:53:fb:cc:ff:64:5a:a0:86:e9:15:f2:
92:da:81:51:77:4e:8e:64:16:4c:f0:01:62:cc:e1:f7:02:1a:
fa:a0:54:c9:e7:d3:08:dc:62:4a:10:0c:74:a4:ec:3b:75:55:
16:31:e1:c3:7e:c4:70:00:1a:90:07:75:fd:bb:0f:88:18:94:
1e:d7:c8:d5:55:4c:b9:11:6f:c9:13:6b:62:c0:e0:62:dc:16:
8a:ec:87:ec:74:c7:d1:59:9a:93:57:1d:ac:4f:77:e8:d2:3f:
58:0c:f0:00:d7:b7:d1:11:05:a3:57:9e:90:9b:90:8b:66:6b:
25:76:67:24:21:8c:9e:74:4b:db:a2:f1:aa:ad:06:b6:17:d0:
66:4d:51:54:eb:1f:db:85:55:a7:f4:3d:17:bf:10:8f:6f:85:
49:34:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:23 2025 by rpki-client