Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NhrB5rkN-soNLnLX8q0gXrDKdj0.roa
File: NhrB5rkN-soNLnLX8q0gXrDKdj0.roa (raw, json)
Hash identifier: PCtwQNjrcI727NXMvJ9xdUw5XXEKkgeT6a6HceQfRjo=
Subject key identifier: 36:1A:C1:E6:B9:0D:FA:CA:0D:2E:72:D7:F2:AD:20:5E:B0:CA:76:3D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0875C943
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NhrB5rkN-soNLnLX8q0gXrDKdj0.roa
Signing time: Sat 01 Jan 2022 04:02:31 +0000
ROA not before: Sat 01 Jan 2022 04:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141936963 (0x875c943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=361ac1e6b90dfaca0d2e72d7f2ad205eb0ca763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:2b:bc:f6:31:21:e0:62:eb:62:bf:a1:4e:
6f:7b:19:ce:1e:ac:ce:e7:75:87:5b:38:c1:e8:a5:
e6:7d:cd:b9:57:35:97:a3:c4:3e:a5:d4:89:7c:98:
ee:03:be:86:a1:94:8e:92:28:79:db:85:a8:21:5c:
63:e2:ae:b6:58:52:43:f2:37:2e:be:a6:67:99:dd:
ed:ce:a1:26:9e:88:e5:d2:3b:45:ca:74:e4:c5:97:
be:07:00:9d:87:43:88:d1:33:4e:86:fb:1c:7b:09:
17:61:ce:af:e5:f8:d2:a1:22:76:d1:f3:dc:d5:05:
50:0b:98:3e:88:b8:2f:fb:6a:0d:dc:09:d9:02:d1:
a1:e3:7a:22:ea:16:fd:c1:86:08:34:eb:a6:fb:14:
6b:a5:4b:63:e1:9a:a9:83:cc:bd:11:05:7d:f7:ce:
85:ee:9b:75:c2:4e:47:ef:ee:9c:e6:0a:02:cb:42:
54:71:57:48:96:af:55:e7:90:98:1c:06:69:c4:e9:
50:37:82:b2:17:91:c4:08:38:61:63:c9:3c:65:35:
d6:46:c2:62:da:4b:61:d4:89:90:41:86:63:1c:b6:
fc:e8:69:6a:b9:6f:63:63:a8:af:27:d5:24:9a:4e:
01:94:ad:e3:d7:72:2e:28:2e:bc:33:df:50:a1:dd:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1A:C1:E6:B9:0D:FA:CA:0D:2E:72:D7:F2:AD:20:5E:B0:CA:76:3D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NhrB5rkN-soNLnLX8q0gXrDKdj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:1e:fa:81:d2:b2:6a:35:11:de:cd:73:ce:3d:4c:08:1f:8a:
2a:7f:71:d5:0e:72:cd:f5:76:f4:2d:50:d5:40:2b:09:d8:24:
94:03:0f:b2:25:2e:92:2a:ec:58:a7:2c:a7:b0:3d:0f:16:55:
1e:8b:3a:b5:3d:d4:2b:a0:ef:21:69:2b:c4:2b:b9:12:10:c5:
51:dd:46:04:07:c3:c3:0f:91:71:ef:33:54:ec:8c:2d:b2:b7:
0f:0e:e8:43:8c:d9:44:3d:89:5b:76:a7:1e:f7:c3:ef:88:c9:
43:cf:61:16:8a:8e:04:b2:8b:dc:83:3c:1d:1a:26:2d:29:e0:
f3:1d:52:f5:e2:c3:4b:1c:52:1a:12:df:d3:90:18:31:c2:50:
15:e3:85:ce:44:2c:53:fa:ac:a8:13:eb:cc:b3:1e:be:7b:25:
a5:06:42:4d:28:fe:9e:90:87:e5:f5:ad:d9:44:6f:db:e8:ba:
68:3e:35:91:29:14:c4:b7:c2:5a:d1:f9:15:e3:2e:55:3e:f2:
7d:6a:b2:0c:78:17:1e:74:bf:1b:bd:68:60:fa:40:d6:b0:3c:
b1:f3:1e:d9:09:6a:3a:4b:66:3e:63:b1:6b:6d:de:a9:f4:30:
4e:08:67:fe:8a:0f:1e:44:9e:ad:90:ff:c5:eb:62:85:27:ef:
98:d4:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:13 2025 by rpki-client