Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M_25ZwJgd8xYulKjVsPVjGippqQ.roa
File: M_25ZwJgd8xYulKjVsPVjGippqQ.roa (raw, json)
Hash identifier: 00Ygwk82rQTqbSAdOfHatw2sGe/lvBYYCzK9pEiPg4k=
Subject key identifier: 33:FD:B9:67:02:60:77:CC:58:BA:52:A3:56:C3:D5:8C:68:A9:A6:A4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176BC490763A21EDE6D7864CFAA4701
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M_25ZwJgd8xYulKjVsPVjGippqQ.roa
Signing time: Thu 08 Dec 2022 11:20:01 +0000
ROA not before: Thu 08 Dec 2022 11:20:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
195.230.64.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:bc:49:07:63:a2:1e:de:6d:78:64:cf:aa:47:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33fdb967026077cc58ba52a356c3d58c68a9a6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:3e:bf:37:96:20:6a:3a:71:fb:ff:14:8a:
f5:10:0a:5f:39:75:ec:6d:4b:6b:51:46:06:33:39:
ca:fe:2d:91:90:a8:17:41:08:e4:68:57:8d:a7:60:
cd:bc:f7:93:2d:f7:8a:de:12:b4:40:38:f0:fa:b8:
5d:5c:7a:33:58:25:9e:f9:35:b1:38:22:f8:95:5c:
e4:44:28:3b:f6:ea:64:b9:0d:1c:f2:cb:01:94:47:
39:5c:0f:a5:c7:97:08:2c:b2:6d:6e:9f:ed:68:be:
17:c8:f7:8f:bf:1d:0b:ed:a1:b9:2d:cd:9a:aa:d1:
b6:77:91:3d:5e:4b:f4:fd:5f:50:a0:7f:85:ec:b0:
76:83:41:5b:57:18:f6:92:af:2c:a4:f9:20:13:c2:
6f:27:b1:20:d2:6b:5b:e8:35:e4:37:e1:d7:c9:25:
a2:36:fd:65:e9:b1:f8:20:2a:01:9c:4f:94:43:7b:
2f:38:61:1f:4b:a0:8a:b4:97:2a:77:24:4c:70:b6:
ac:ea:f2:66:38:a9:7b:aa:05:4c:da:ab:d3:85:cc:
d7:9c:02:6a:b8:fa:81:78:e8:ae:83:c2:b1:95:92:
7b:7f:af:da:cb:18:29:71:22:37:45:1b:c9:28:b0:
7c:36:25:6d:4b:37:1e:44:2c:98:ae:55:fa:c9:6c:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:B9:67:02:60:77:CC:58:BA:52:A3:56:C3:D5:8C:68:A9:A6:A4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M_25ZwJgd8xYulKjVsPVjGippqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:c2:df:45:37:00:8f:a7:ec:3d:c1:5a:29:f8:b6:66:d0:1a:
be:c1:44:73:24:66:c4:6e:3a:b9:7f:1d:0b:9f:e0:ef:58:db:
a2:ac:73:52:30:f5:6d:d1:9e:09:bb:6c:1d:e5:2f:16:d8:4b:
c0:2a:cc:4f:12:dd:24:ac:35:3e:41:83:37:6a:ce:ba:a6:5e:
e3:6a:29:06:fa:0c:0f:76:e1:e0:dd:7b:ed:d0:bd:c7:d7:15:
08:58:85:9a:dd:33:04:3a:55:6f:0e:0e:84:3c:ae:ab:3b:05:
17:a9:3e:a6:1b:6c:28:a6:4e:73:38:41:af:96:66:45:fe:dd:
5d:8d:d9:21:1b:be:92:10:60:3f:51:ac:d6:06:02:af:ab:3f:
04:cf:df:08:5f:a7:72:40:52:c7:5f:50:2d:79:ca:b7:57:0d:
7c:9c:34:ca:91:f8:9b:13:a7:e3:bd:aa:a0:24:f2:fd:e0:88:
ed:24:48:6a:3a:7d:28:c8:a1:e5:65:cf:a6:1b:f3:70:63:42:
b9:00:c7:2a:1f:2c:a7:19:88:e4:fe:de:9c:98:7d:1d:eb:34:
f9:21:f5:ff:e0:03:f6:ea:5a:5e:de:66:97:cb:7a:0a:8c:22:
ef:49:74:66:30:59:81:bd:32:2c:69:04:7f:e3:a3:fa:a1:76:
13:c4:96:6a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYTxdrxJB2OiHt5teGTPqkcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTEyMDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2ZkYjk2NzAyNjA3N2NjNThiYTUyYTM1NmMzZDU4YzY4YTlhNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUI+vzeWIGo6cfv/FIr1EApfOXXs
bUtrUUYGMznK/i2RkKgXQQjkaFeNp2DNvPeTLfeK3hK0QDjw+rhdXHozWCWe+TWx
OCL4lVzkRCg79upkuQ0c8ssBlEc5XA+lx5cILLJtbp/taL4XyPePvx0L7aG5Lc2a
qtG2d5E9Xkv0/V9QoH+F7LB2g0FbVxj2kq8spPkgE8JvJ7Eg0mtb6DXkN+HXySWi
Nv1l6bH4ICoBnE+UQ3svOGEfS6CKtJcqdyRMcLas6vJmOKl7qgVM2qvThczXnAJq
uPqBeOiug8KxlZJ7f6/ayxgpcSI3RRvJKLB8NiVtSzceRCyYrlX6yWxLBQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFDP9uWcCYHfMWLpSo1bD1YxoqaakMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTV8yNVp3SmdkOHhZdWxLalZzUFZqR2lwcHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMDAG28
AwQGgMxAAwQDsheQAwQCuQMgAwQCudKMAwQDvF6oAwMAvKIDBALByeQDBAXDBYAD
BAXDEGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6AD
BAXVmqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQADggEBAD7C30U3
AI+n7D3BWin4tmbQGr7BRHMkZsRuOrl/HQuf4O9Y26Ksc1Iw9W3Rngm7bB3lLxbY
S8AqzE8S3SSsNT5BgzdqzrqmXuNqKQb6DA924eDde+3QvcfXFQhYhZrdMwQ6VW8O
DoQ8rqs7BRepPqYbbCimTnM4Qa+WZkX+3V2N2SEbvpIQYD9RrNYGAq+rPwTP3whf
p3JAUsdfUC15yrdXDXycNMqR+JsTp+O9qqAk8v3giO0kSGo6fSjIoeVlz6Yb83Bj
QrkAxyofLKcZiOT+3pyYfR3rNPkh9f/gA/bqWl7eZpfLegqMIu9JdGYwWYG9Mixp
BH/jo/qhdhPElmo=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:36 2025 by rpki-client