Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RXfPctc3DzRwIMTimrey5KcgyAU.roa
File: RXfPctc3DzRwIMTimrey5KcgyAU.roa (raw, json)
Hash identifier: JOxCpkmVqSVlIRHNfVcDbP/7iYgNX7t6ZFtYDdlZj+U=
Subject key identifier: 45:77:CF:72:D7:37:0F:34:70:20:C4:E2:9A:B7:B2:E4:A7:20:C8:05
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1464045872B5C1CBA8D2DE7895A5F39
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RXfPctc3DzRwIMTimrey5KcgyAU.roa
Signing time: Thu 08 Dec 2022 10:27:03 +0000
ROA not before: Thu 08 Dec 2022 10:27:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
109.124.64.0/18 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:40:45:87:2b:5c:1c:ba:8d:2d:e7:89:5a:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4577cf72d7370f347020c4e29ab7b2e4a720c805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:f7:7b:35:23:48:cb:04:00:72:a2:f7:61:
32:6b:d1:97:66:c5:86:96:07:51:ad:8b:a2:cb:58:
18:54:cb:34:7c:ed:62:64:84:98:9b:c0:f2:c9:cc:
29:a4:a1:f1:f4:5e:c7:9f:ed:f8:ac:81:cf:91:74:
fd:18:23:ed:6b:11:a0:9c:8d:2e:56:18:e5:38:96:
80:c4:60:70:79:b7:3b:65:48:76:aa:0e:31:22:bd:
3f:fe:db:4f:61:0e:2f:8d:61:d8:12:ea:f2:75:c1:
c7:3d:a1:35:bd:74:ad:eb:f7:75:af:cc:30:c8:bf:
13:9e:75:6b:3f:8b:78:39:88:69:7c:6b:95:f0:47:
dd:b4:7d:4f:5d:6b:8e:ee:32:eb:dc:60:6a:6a:c4:
e8:d5:3d:46:4a:bb:c0:19:56:77:3b:e5:a7:df:d5:
6a:18:e0:15:b6:6d:25:90:11:fd:3e:20:ba:2e:7d:
4b:74:60:8e:8e:80:55:5c:21:64:4c:9a:63:ef:e8:
b2:18:b0:6e:e7:15:88:dc:db:8e:f4:e4:c7:17:46:
d7:55:7e:aa:cd:4e:0f:4a:ed:e8:d9:53:dd:77:59:
81:c4:d5:fe:19:8e:57:f0:5b:73:82:a1:5c:46:35:
13:1a:5b:55:f2:a3:ea:ea:a3:ba:a3:b6:fb:4d:8f:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:CF:72:D7:37:0F:34:70:20:C4:E2:9A:B7:B2:E4:A7:20:C8:05
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RXfPctc3DzRwIMTimrey5KcgyAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
49:6c:2c:b4:4e:08:df:68:a7:d1:f5:83:a8:89:39:94:e9:b1:
0f:d0:d4:39:b5:71:fc:8b:5f:23:64:9d:76:5d:92:7b:96:d1:
2d:c1:d6:51:77:ef:eb:2a:24:09:af:b6:7b:44:3b:8c:6e:a8:
78:2a:18:89:85:7c:d2:69:2c:b6:8f:e5:b0:a1:5d:ac:ea:3f:
aa:fb:d9:c2:2f:87:0b:ac:33:db:fa:10:27:91:bf:39:10:03:
02:13:ff:ae:1b:0d:d6:5c:d6:b2:5c:7c:9c:06:26:79:2d:ff:
24:a6:4a:92:36:64:d4:f9:96:e6:39:82:fa:69:55:c5:8e:53:
fe:e9:4e:dd:31:2d:e7:ca:48:d6:9d:17:b8:a4:6f:90:f4:78:
e9:64:6c:42:ce:76:3f:c2:af:28:e7:9c:1d:13:53:5b:61:d6:
bc:a8:52:6c:f5:9c:a6:23:e6:64:a7:da:9b:21:b3:0a:6f:98:
db:01:c8:ad:67:30:92:69:24:2a:d7:34:73:ed:33:c7:f6:62:
3c:ba:e8:c3:33:37:fe:e5:43:94:7a:c7:56:0c:6d:c6:d6:17:
3d:2f:0b:6f:b9:37:af:ac:d6:a2:a2:00:81:c9:61:9f:68:ec:
93:6b:c5:8b:e4:6d:77:58:c2:49:f2:c2:c3:b0:7d:92:48:b5:
2b:4b:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:18 2025 by rpki-client