Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O7jwfGaP59jptH5FIdUpvZXKxoI.roa
File: O7jwfGaP59jptH5FIdUpvZXKxoI.roa (raw, json)
Hash identifier: TQx9t29pay4AS9EFZzL+l3lhWgPf5x0x/YfxAfaZWbs=
Subject key identifier: 3B:B8:F0:7C:66:8F:E7:D8:E9:B4:7E:45:21:D5:29:BD:95:CA:C6:82
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01850591130A67305582165C1357A2DEDFE0
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O7jwfGaP59jptH5FIdUpvZXKxoI.roa
Signing time: Mon 12 Dec 2022 09:01:11 +0000
ROA not before: Mon 12 Dec 2022 09:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
31.173.126.0/24 maxlen: 24
78.25.88.0/22 maxlen: 22
46.229.132.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:13:0a:67:30:55:82:16:5c:13:57:a2:de:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bb8f07c668fe7d8e9b47e4521d529bd95cac682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:12:9d:b1:4a:29:34:ed:17:82:66:ab:b9:
b6:09:af:a7:71:c8:dd:ad:0e:6a:b5:36:db:a7:34:
5c:17:86:53:a0:a0:7e:8a:30:54:f9:56:9c:59:9d:
36:3f:35:b5:2e:a6:a9:d8:65:a5:d0:5f:fe:63:fb:
a3:62:b6:65:41:0b:6b:a3:8f:9f:c8:89:e7:d4:85:
51:71:a3:0d:bb:1e:95:67:9a:08:4e:f3:ee:ab:fe:
b0:fe:ba:f9:d6:f0:53:b1:ed:bf:07:74:dc:50:66:
f2:5c:34:1d:09:28:40:76:21:e2:c1:c4:81:00:39:
f4:5b:87:ca:ef:42:11:a1:80:bc:df:b5:91:7c:59:
de:bf:d8:64:5b:ae:8e:5b:0d:79:84:2d:60:30:49:
41:d5:35:ed:20:ba:f7:89:d4:d1:3d:5c:1d:bd:cc:
48:2b:ed:5e:03:05:a1:61:bb:db:b5:4f:71:a5:56:
19:06:b0:cb:a7:91:ee:2b:d2:db:aa:ba:b3:27:7d:
85:68:f9:fe:a7:cb:09:27:66:20:c3:81:fb:72:74:
0e:db:73:8d:c9:33:6e:7a:b4:66:1b:a6:cf:fa:be:
06:03:cc:d4:97:b7:96:93:3a:bb:8e:d5:fe:a6:1a:
f7:c2:b4:2b:06:83:7e:13:78:57:9a:a9:d0:9d:a8:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:F0:7C:66:8F:E7:D8:E9:B4:7E:45:21:D5:29:BD:95:CA:C6:82
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O7jwfGaP59jptH5FIdUpvZXKxoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
62:5a:61:e8:47:c1:a7:5b:41:38:09:fc:86:9c:9f:8b:c2:7e:
53:6b:d3:57:d1:62:8e:bd:af:fe:ab:f7:24:5e:16:e6:89:d6:
6a:22:00:83:a3:8b:ad:3e:bd:1c:1d:3d:39:21:59:82:56:1c:
f3:c5:30:7c:1e:2f:97:d6:3b:43:f4:71:d0:87:66:0f:49:99:
a8:2b:b7:fa:c6:d5:d6:e4:55:e9:49:64:c2:ee:bb:66:14:e6:
0f:b1:47:bf:f6:57:39:bc:5c:03:d9:0d:a3:70:b7:41:22:31:
5e:76:aa:6c:d4:2d:ef:45:32:80:c3:17:91:4b:e5:e3:aa:e4:
b7:14:88:cc:32:7d:da:a3:67:cc:0a:c2:91:94:a1:93:29:ea:
f0:70:4b:87:03:ab:1b:ca:0e:4d:35:ec:4d:76:77:ed:8f:2d:
33:2b:79:e5:99:8c:ac:52:86:00:2c:87:88:f8:a2:5d:97:93:
ce:6e:41:4c:a3:05:16:fd:05:60:d0:7e:fb:ab:15:fe:70:15:
8a:8a:65:65:04:49:b4:ab:68:59:a8:fd:c0:c8:9e:27:3b:73:
56:d6:39:ee:ac:8a:2d:3e:ad:2f:d9:b3:68:1a:e9:10:ba:3e:
56:9e:53:3b:16:cc:c8:df:d1:8e:7e:c5:20:a3:05:c5:3b:e4:
b2:93:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:35 2025 by rpki-client