Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/N7oxOVkDc0Vmxl8NOhPfYRcPbfA.roa
File: N7oxOVkDc0Vmxl8NOhPfYRcPbfA.roa (raw, json)
Hash identifier: 2fXA69L0+X+nOR/xpImr3ecN6PDs2ggFScE7dquocXc=
Subject key identifier: 37:BA:31:39:59:03:73:45:66:C6:5F:0D:3A:13:DF:61:17:0F:6D:F0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFC494C0D354B6076578959B31D537
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/N7oxOVkDc0Vmxl8NOhPfYRcPbfA.roa
Signing time: Tue 29 Nov 2022 15:09:41 +0000
ROA not before: Tue 29 Nov 2022 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
84.204.230.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 24
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
217.195.64.0/19 maxlen: 19
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/17 maxlen: 17
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
84.204.132.0/22 maxlen: 22
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
213.182.160.0/19 maxlen: 19
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:c4:94:c0:d3:54:b6:07:65:78:95:9b:31:d5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ba31395903734566c65f0d3a13df61170f6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:a0:c3:71:8e:cb:f0:77:63:6e:42:ba:2a:
33:c3:1a:ab:93:a4:40:a5:e9:11:2b:75:8e:c1:ce:
17:3a:c0:0d:29:f6:6f:ee:a7:be:ed:43:57:58:20:
10:52:5d:24:e2:b2:f9:dc:ef:ef:f0:26:a6:3c:07:
10:ec:36:90:f1:bb:d3:18:ac:60:51:3a:11:d8:39:
e1:44:cb:04:62:21:fd:eb:1d:18:f3:59:05:1d:77:
43:5c:65:cc:d8:d8:a3:90:1f:31:0e:53:f3:2f:dc:
20:9c:0c:a2:59:ea:35:96:dd:85:01:3d:e3:a2:50:
a6:46:41:a2:fe:cc:a6:2a:f1:54:0f:a3:3e:35:9e:
4e:ea:79:70:2a:64:33:aa:44:b2:fc:c4:27:99:a2:
63:8a:bd:54:0a:9c:c6:b2:1d:3d:8f:32:5b:d4:e2:
70:d2:1f:06:da:97:b7:3d:4a:bf:00:64:22:ef:65:
70:bb:3f:89:fd:eb:e8:e6:4b:f5:65:9b:95:6f:e9:
56:a5:38:6a:77:bf:82:f7:55:d2:26:41:cc:e8:a1:
83:b8:df:34:e2:ef:1b:3d:5f:be:66:1b:d5:95:a4:
b1:02:d4:7f:e6:9e:71:b9:a9:78:56:54:69:c5:7c:
fe:74:f0:6a:41:4a:c3:8e:ab:e3:77:67:3b:f6:31:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:31:39:59:03:73:45:66:C6:5F:0D:3A:13:DF:61:17:0F:6D:F0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/N7oxOVkDc0Vmxl8NOhPfYRcPbfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:a0:2b:20:22:58:68:28:bb:e0:1a:46:c0:7e:ff:3f:b0:20:
5b:6a:64:be:5e:de:95:ad:ae:3c:54:b2:d0:c9:df:b7:95:dd:
ba:61:8a:45:df:0c:25:91:07:07:75:06:0d:2c:d6:b5:f4:21:
63:1a:41:b4:a8:e3:34:f4:b0:83:5a:3f:f4:b3:19:9a:2f:d2:
85:f6:d1:71:b6:b3:29:65:9f:16:ce:47:83:5a:33:80:f0:f6:
bf:62:64:49:cd:f5:dd:67:56:0c:57:99:69:44:24:42:2c:ea:
29:ce:7d:7b:4b:fb:6d:35:11:c2:8a:09:5c:9a:5c:13:89:04:
86:f1:d1:59:81:76:d6:be:8f:87:60:43:b4:3c:04:bf:bb:92:
ff:7d:58:f6:f6:17:f3:36:d9:af:7b:22:62:90:54:cd:a6:22:
d3:af:42:56:59:b6:bb:bb:85:53:8a:bb:a3:e5:78:56:1d:59:
79:02:2e:94:51:88:07:38:c6:e6:26:10:e0:bc:da:e1:84:eb:
dd:7a:dd:c7:dc:90:d6:f1:86:f3:e6:51:a4:cd:d7:79:5f:6b:
d8:68:a3:d1:e1:ff:f2:c9:c3:20:4e:dd:58:93:d4:52:0f:5a:
c8:48:d3:7a:e2:2e:38:1e:6c:94:89:69:28:2c:6a:76:7f:82:
dc:c7:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:28 2025 by rpki-client