Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QCIHB7OnWTGO_dv4dcLXq6SvURU.roa
File: QCIHB7OnWTGO_dv4dcLXq6SvURU.roa (raw, json)
Hash identifier: qPlSE94tpf6MaIY83fpwbD1CfZ4pn60QlzmwSg/NOGU=
Subject key identifier: 40:22:07:07:B3:A7:59:31:8E:FD:DB:F8:75:C2:D7:AB:A4:AF:51:15
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFC739E039CDA35D956EB52DB379AF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QCIHB7OnWTGO_dv4dcLXq6SvURU.roa
Signing time: Tue 29 Nov 2022 15:09:41 +0000
ROA not before: Tue 29 Nov 2022 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24767
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:c7:39:e0:39:cd:a3:5d:95:6e:b5:2d:b3:79:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40220707b3a759318efddbf875c2d7aba4af5115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:65:4a:d1:e7:be:99:65:79:2a:9b:d9:a0:
d7:0d:33:90:4d:7e:63:d5:d9:49:66:66:78:60:84:
02:ad:91:e0:1c:06:ef:bf:c3:1a:4c:3a:cd:9c:97:
3a:87:6f:15:e8:a0:20:ee:f2:8c:d8:e1:58:3d:64:
a6:a0:33:6e:32:a7:bf:5f:a3:78:e5:ad:c7:fb:46:
c9:22:76:10:b2:e6:cf:ec:ea:9b:82:e8:46:0f:e3:
31:49:49:94:7f:81:03:0f:12:9c:ec:08:57:e2:2f:
a8:eb:91:a2:45:3b:77:aa:9a:2e:d6:4a:a2:4c:4f:
74:b2:1e:14:3d:53:1a:32:7d:88:ba:4f:61:aa:45:
43:56:4e:7d:7e:29:43:60:bb:9b:ad:58:e0:ba:a3:
d4:71:62:cc:d9:97:93:d4:3d:11:9b:85:2a:45:48:
64:89:4b:a7:32:60:bc:1e:33:10:12:fb:08:28:46:
6e:4e:79:f6:6b:69:18:5a:f0:fc:41:e6:31:77:b1:
5e:38:3a:9b:12:9d:60:01:3f:68:6e:f7:c6:f1:5b:
9b:d2:7c:a0:58:a6:61:00:56:2b:9b:d1:af:6d:87:
9b:5f:94:6b:78:6d:89:20:1e:22:f1:1c:4d:b5:44:
e8:eb:8a:60:45:27:e3:5e:95:70:1f:14:f6:26:9b:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:07:07:B3:A7:59:31:8E:FD:DB:F8:75:C2:D7:AB:A4:AF:51:15
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/QCIHB7OnWTGO_dv4dcLXq6SvURU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:3e:95:3b:4b:34:6d:1b:7e:6e:46:30:8c:4f:e8:52:a0:68:
f3:1a:06:b5:f4:8c:74:70:80:f9:35:3b:ef:b1:a9:32:b9:55:
e9:f5:57:8f:36:a8:20:8a:df:74:ca:f3:6c:cf:cf:5a:a0:90:
4e:27:13:8d:d4:08:9f:98:7e:47:58:94:01:c4:85:15:79:32:
95:d3:28:f5:6b:99:47:02:59:a6:cb:c9:82:06:72:f3:45:70:
cb:41:19:83:7b:24:97:89:6f:15:c0:17:18:50:e8:5e:d2:87:
b4:93:a5:47:ef:86:44:20:a0:c0:6c:8b:de:df:59:8c:52:b7:
56:8c:f8:b7:5e:26:54:fd:17:ba:f6:bd:f2:c4:ca:af:8c:87:
84:4b:ec:5a:fc:14:c6:9d:3f:12:4b:bd:58:f1:e4:00:d6:99:
ee:5e:8f:41:d7:7e:c3:b0:58:f3:f4:ed:8e:69:c4:27:cd:02:
6c:07:cf:90:84:41:c8:79:16:92:6f:ed:27:6f:dc:bd:52:3c:
b0:06:06:21:a9:9c:35:98:f1:8c:03:f3:7e:ba:2b:8c:45:01:
f3:49:29:eb:15:a9:e9:ac:3b:42:1e:d2:c9:e9:b2:bb:85:33:
93:cb:9b:cc:7a:59:e9:cf:f7:f5:a3:cf:1c:75:74:97:7c:45:
04:1a:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:09 2025 by rpki-client