Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OcRr1Af9LqEcObNvv9SNEf8AGno.roa
File: OcRr1Af9LqEcObNvv9SNEf8AGno.roa (raw, json)
Hash identifier: HeVTvOpkUiz/gzqTTnS5GoNtKBVe3PefzMhM5qIEfTI=
Subject key identifier: 39:C4:6B:D4:07:FD:2E:A1:1C:39:B3:6F:BF:D4:8D:11:FF:00:1A:7A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF20D8421631DFFDAE755499360AE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OcRr1Af9LqEcObNvv9SNEf8AGno.roa
Signing time: Mon 05 Dec 2022 12:21:30 +0000
ROA not before: Mon 05 Dec 2022 12:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f2:0d:84:21:63:1d:ff:da:e7:55:49:93:60:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39c46bd407fd2ea11c39b36fbfd48d11ff001a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:93:80:7e:34:de:af:68:7e:d2:b8:fb:5e:
cc:d5:a9:b2:71:43:8d:47:bc:c2:98:93:00:90:a7:
ee:d6:be:5c:87:57:d0:f5:98:d6:2b:d8:cd:4f:07:
88:b5:4f:ac:fe:8f:7d:cc:b9:e1:03:09:9a:f0:57:
88:69:29:a1:cd:bb:ec:0f:a1:9b:3d:11:04:b8:10:
a4:03:b8:22:42:d1:50:32:6e:f4:f1:22:62:54:fd:
06:6b:fc:9e:34:f4:c1:e8:2d:b2:0e:ce:4d:4b:32:
f0:31:f3:12:02:61:ae:02:2b:6c:23:23:d7:04:9b:
3b:b8:84:7c:67:9d:89:8b:c9:c3:33:67:d3:60:b9:
b9:7c:fc:89:96:f2:22:53:70:28:73:8f:51:7a:11:
29:9c:be:2e:f2:66:9d:17:b3:1a:0f:d5:70:2b:10:
b5:ca:7d:e1:d4:c8:c3:6b:50:2b:96:89:b4:ee:70:
75:76:ae:e3:55:1e:dd:ad:10:d8:a1:9e:13:8b:18:
6d:35:ec:0b:c0:b6:25:e8:56:f9:a6:12:47:89:8a:
60:a4:a4:7a:5c:3f:e6:50:f4:a0:a4:49:50:02:fe:
ae:24:d5:c0:00:75:ae:5d:93:3a:05:75:a9:2c:d3:
10:6e:38:bf:16:09:18:b1:9a:ac:b0:65:ac:b0:83:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:6B:D4:07:FD:2E:A1:1C:39:B3:6F:BF:D4:8D:11:FF:00:1A:7A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OcRr1Af9LqEcObNvv9SNEf8AGno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:3b:43:9d:82:20:0c:6a:4c:57:5c:8e:60:3d:43:6b:16:f1:
1c:59:7e:50:61:58:aa:0c:40:35:48:ad:b7:c4:45:f9:89:94:
c9:c4:f6:6c:c6:fa:bd:83:5f:5d:31:60:d4:fd:95:32:0e:87:
18:7b:b1:c4:90:20:c2:6b:d8:2d:e0:87:06:43:04:22:60:0d:
5d:1b:4f:ad:00:da:f9:b6:fc:23:32:5e:0b:84:be:32:2d:86:
21:eb:60:27:3b:b0:1d:9c:d2:97:14:45:f4:92:63:1f:1f:b6:
eb:b6:21:ff:16:06:20:24:1c:7f:16:1e:c8:7d:35:25:f9:90:
0a:fe:ee:92:0b:c2:ae:0c:fd:c8:e9:81:a2:c1:ac:79:38:b0:
58:05:37:07:55:9b:81:3d:8e:f3:4c:b8:29:d6:31:5d:5f:57:
02:a6:49:25:fd:fd:6b:ce:51:a1:4f:4c:ac:da:2e:0c:87:e8:
65:64:d1:4e:e5:fa:ec:e1:12:eb:f1:94:b6:e2:b9:a5:cf:c2:
b7:f7:25:2d:77:ef:39:fd:2e:1d:b9:21:42:c2:90:a6:1c:a8:
30:92:03:a4:97:5e:68:16:46:58:6b:8d:06:6a:94:dd:f5:63:
aa:5f:06:3e:9a:09:98:83:3a:63:7e:6a:c0:76:64:be:c5:48:
24:47:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:13 2025 by rpki-client