Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HiXQsog96WXNMSuKPlykLjsJnDw.roa
File: HiXQsog96WXNMSuKPlykLjsJnDw.roa (raw, json)
Hash identifier: +E61HBT7OCBY1ZXkCHc5IL/vtahK5yoeHhJ99hMjLYI=
Subject key identifier: 1E:25:D0:B2:88:3D:E9:65:CD:31:2B:8A:3E:5C:A4:2E:3B:09:9C:3C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E26613A55FC0D406A881D895DD8666B6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HiXQsog96WXNMSuKPlykLjsJnDw.roa
Signing time: Mon 05 Dec 2022 13:07:31 +0000
ROA not before: Mon 05 Dec 2022 13:07:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.120.0/22 maxlen: 22
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
91.193.212.0/22 maxlen: 24
78.25.104.0/22 maxlen: 22
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:13:a5:5f:c0:d4:06:a8:81:d8:95:dd:86:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e25d0b2883de965cd312b8a3e5ca42e3b099c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:ee:8a:cc:a9:6b:0b:64:4a:7f:e5:8c:d9:
3c:e1:94:0e:83:d4:eb:7a:33:b8:07:25:60:fe:7f:
ef:59:46:b3:66:37:f1:ca:34:d8:f3:62:35:7a:78:
ec:dd:77:02:18:d4:c0:65:54:28:ed:16:a0:29:63:
fe:62:b3:a4:88:65:56:3c:84:84:00:1c:b2:2c:68:
7c:52:e5:2e:0a:57:1a:c1:8b:a4:ca:53:bc:a3:77:
5f:9c:72:c4:6a:a1:6e:45:c1:ec:b1:ae:ff:71:0b:
3f:3b:28:6c:c8:54:2c:4f:46:22:a0:e8:41:64:c7:
3c:46:ed:d2:a7:f1:9e:2e:5d:78:3b:38:9f:b1:33:
e2:73:30:f4:b5:e3:68:41:d2:21:43:bc:30:09:35:
c0:b2:14:f7:d0:fa:1b:b4:92:83:de:6a:d0:95:f1:
85:16:98:14:db:72:9c:8a:4a:20:79:a7:b3:1b:96:
83:33:df:d9:c5:f7:d9:f0:2c:58:79:9a:7e:b8:8d:
25:5f:a2:ef:72:bf:a2:80:87:f6:8b:83:76:2d:38:
54:9d:01:98:52:2d:67:93:9d:c0:28:7a:72:92:4e:
18:fc:07:7d:08:e0:05:58:1d:5a:fe:9c:74:1c:25:
de:27:d1:87:0d:03:e7:35:8e:13:0e:03:89:9d:3b:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:25:D0:B2:88:3D:E9:65:CD:31:2B:8A:3E:5C:A4:2E:3B:09:9C:3C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HiXQsog96WXNMSuKPlykLjsJnDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
60:71:cc:aa:b9:74:5b:44:a5:60:55:da:82:b0:c7:be:a4:b7:
67:7c:b9:10:3a:e7:e9:f6:56:38:82:96:cb:b3:a3:71:05:fb:
c4:54:d1:67:30:35:58:15:c0:db:b2:5c:1f:6a:88:a3:09:bb:
51:ca:bf:d8:5a:21:d4:e2:77:ad:df:c9:76:d2:07:5b:59:2e:
13:35:ae:d2:fb:e3:13:e7:73:97:fd:b8:ea:55:8c:e7:ad:80:
53:3e:62:6b:f6:1e:96:5f:24:84:7f:51:1f:62:f7:bf:a7:20:
0a:13:38:17:27:9e:9b:d3:77:c4:f9:0c:06:3b:46:ab:4d:25:
e2:30:1d:de:56:9f:67:56:eb:79:2f:84:67:07:1f:54:eb:68:
c2:6f:3c:34:03:21:ea:61:57:2e:4b:f6:11:78:cd:e9:a0:d0:
54:35:9a:35:7c:44:b9:e6:3d:74:d2:75:97:3a:90:24:8a:65:
2f:f9:09:b9:4e:97:7f:72:54:35:db:39:96:2e:7e:60:85:74:
0a:23:7a:33:0a:5b:a5:dd:5e:bf:31:fe:39:e1:de:90:8b:ac:
9b:d2:44:0a:ee:85:80:75:ce:f0:18:e4:19:95:15:9d:ad:fe:
75:c4:a1:45:c4:53:58:c7:54:8a:52:f1:ea:f0:5a:71:76:7c:
8b:1f:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:33 2025 by rpki-client