Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/P7Jn9o72x3Jy4CQHR8Pqlt_itlE.roa
File: P7Jn9o72x3Jy4CQHR8Pqlt_itlE.roa (raw, json)
Hash identifier: fXNSRsJ5OuWIlEA1fiZ+4FDYUcDYJRPaVGpMqAhDJhc=
Subject key identifier: 3F:B2:67:F6:8E:F6:C7:72:72:E0:24:07:47:C3:EA:96:DF:E2:B6:51
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E57CC61B273A76C56090CB30A0D9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/P7Jn9o72x3Jy4CQHR8Pqlt_itlE.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31208
IP address blocks: 178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
178.178.131.0/24 maxlen: 24
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.128.0/24 maxlen: 24
178.176.230.0/23 maxlen: 23
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
128.204.72.0/24 maxlen: 24
128.204.73.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
83.149.46.0/23 maxlen: 23
83.169.212.0/24 maxlen: 24
83.169.208.0/24 maxlen: 24
83.169.213.0/24 maxlen: 24
83.169.209.0/24 maxlen: 24
83.169.210.0/24 maxlen: 24
83.169.211.0/24 maxlen: 24
83.169.214.0/24 maxlen: 24
83.169.215.0/24 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.141.0/24 maxlen: 24
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e5:7c:c6:1b:27:3a:76:c5:60:90:cb:30:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb267f68ef6c77272e0240747c3ea96dfe2b651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:f4:8b:ab:e7:0d:92:37:ca:95:d6:6f:c9:
e5:1f:08:4e:ae:fc:2b:b0:8e:a6:03:29:0f:c3:da:
11:12:0e:8d:20:c3:25:7d:2c:e0:02:7b:f1:54:12:
74:de:f6:07:3d:fe:57:eb:b9:bc:90:00:c5:5a:a4:
33:70:9f:03:38:91:38:f2:75:08:40:07:29:41:ed:
16:1a:18:a4:6a:17:e9:f4:f3:5b:93:53:dc:be:68:
0c:f5:eb:59:16:1d:15:b9:f5:4f:48:84:27:2b:63:
83:8a:f4:16:aa:21:23:38:94:36:ab:0c:53:7c:8d:
8c:c9:4e:cc:7f:7c:0f:0b:64:8a:48:7d:e7:9b:41:
db:80:d1:3d:a8:c2:e6:2c:64:cb:7f:55:bf:2b:d7:
c6:83:4c:2b:70:7d:79:83:52:02:e9:19:41:c9:8d:
e3:3e:20:a5:dd:a3:68:5d:00:9a:57:eb:81:b6:63:
2e:ce:7c:69:44:76:48:d3:ee:fa:37:b4:97:81:4f:
4f:4b:b7:87:1e:d7:82:ea:44:bf:5c:66:ac:c5:e0:
72:b3:f4:99:42:c3:88:6f:58:88:4e:b3:e0:9e:08:
a2:d3:cb:57:2e:63:38:5e:7c:da:82:c9:7c:8c:33:
ef:be:78:2a:79:ac:95:b0:10:a7:21:07:66:3d:b6:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:67:F6:8E:F6:C7:72:72:E0:24:07:47:C3:EA:96:DF:E2:B6:51
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/P7Jn9o72x3Jy4CQHR8Pqlt_itlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
83.149.40.0/21
83.169.208.0/21
128.204.72.0/23
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
Signature Algorithm: sha256WithRSAEncryption
7f:af:74:af:ec:6b:54:af:6b:ac:ed:ec:42:40:45:e7:2d:7f:
8a:8b:77:96:e6:df:d2:6d:b8:20:22:9d:29:22:f1:90:d3:d5:
82:f0:9c:04:4d:76:8e:ba:55:3c:9d:2b:84:08:61:96:89:d0:
3c:10:72:5b:77:94:13:e9:76:0f:cb:4d:8d:4e:c9:a4:82:fe:
ad:18:93:96:20:f1:76:18:5e:1c:58:6b:e3:74:ad:3d:53:b5:
1e:24:ce:ca:ad:39:be:80:50:73:9a:21:d1:1b:b2:08:f3:2b:
48:ef:01:29:32:7e:10:aa:52:12:56:6a:fe:5b:25:8e:3e:ab:
2f:47:40:ee:79:cf:d0:20:c6:50:b5:12:7e:4a:aa:e5:be:09:
af:1a:85:30:04:82:76:73:ea:0c:66:cf:5f:9f:87:ea:f0:ab:
da:9b:37:21:02:f4:29:20:86:d9:e4:98:10:a6:40:2f:b5:1c:
6f:1e:15:f6:cd:1f:bc:a4:42:04:d1:1f:20:53:d0:70:c8:08:
51:ae:b8:9e:30:40:ea:a5:ce:87:0e:74:eb:3f:ab:4e:37:a7:
7a:bc:73:07:b8:b5:8f:03:89:ad:00:20:b4:da:aa:43:da:46:
e9:96:5d:7e:40:5e:15:89:74:bd:45:64:af:d4:91:7b:1d:81:
14:93:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:41 2025 by rpki-client