Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/S4J6AZT1BKUPIjE9g3-1qeoNxUU.roa
File: S4J6AZT1BKUPIjE9g3-1qeoNxUU.roa (raw, json)
Hash identifier: TtqypuciRuP1+XIelYLeFoXwUmp8LF0OeBuBOcGHQfE=
Subject key identifier: 4B:82:7A:01:94:F5:04:A5:0F:22:31:3D:83:7F:B5:A9:EA:0D:C5:45
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E908DC4601FD0B45849F5F3F74CC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/S4J6AZT1BKUPIjE9g3-1qeoNxUU.roa
Signing time: Wed 30 Nov 2022 09:17:44 +0000
ROA not before: Wed 30 Nov 2022 09:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e9:08:dc:46:01:fd:0b:45:84:9f:5f:3f:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b827a0194f504a50f22313d837fb5a9ea0dc545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:67:ae:bf:e6:7d:fe:78:82:eb:2b:95:73:
8b:b2:95:1c:1e:72:61:25:e4:b5:87:21:13:d6:f6:
1f:44:68:4c:bb:13:e4:f6:56:df:28:ee:87:d9:0e:
d9:05:1f:c5:19:6b:67:a9:af:75:d4:bf:a7:55:a9:
0d:8c:89:b7:73:e9:3b:eb:81:96:f8:36:8e:e1:2c:
aa:35:d0:38:c0:a1:0b:85:59:90:68:02:79:e3:73:
41:80:e8:d1:47:43:51:8a:03:5b:1d:9d:fc:f1:17:
32:12:d3:a7:38:a2:36:f7:21:7d:ce:66:b1:23:7f:
68:97:d3:6e:67:9d:49:b3:8c:5c:df:d7:2e:3c:a3:
e9:49:b8:c3:ba:ca:c4:53:71:d4:d2:28:1e:83:5e:
71:f9:25:ca:67:04:42:04:a8:95:e4:a0:81:6b:ce:
8d:d5:10:ae:8f:d3:9c:ad:97:69:50:19:0a:26:2b:
c9:af:3f:ac:db:26:70:a7:06:6d:dd:57:74:1a:7f:
8d:28:76:40:96:fd:48:97:c7:00:e3:a6:94:a8:ed:
6b:1d:ff:fc:36:24:62:33:f6:c5:02:9a:c9:45:45:
73:26:c8:32:f8:48:41:e2:ec:66:05:12:00:df:57:
fe:dd:91:ff:b5:2e:7c:9e:02:74:a5:f0:17:93:0e:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:82:7A:01:94:F5:04:A5:0F:22:31:3D:83:7F:B5:A9:EA:0D:C5:45
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/S4J6AZT1BKUPIjE9g3-1qeoNxUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
13:c6:12:12:a9:38:df:b2:21:fd:ee:50:94:6a:81:c8:de:93:
39:27:40:62:22:6e:21:af:76:94:d1:36:85:69:1b:a3:f1:0b:
08:0a:cf:f0:51:ea:14:af:c6:6e:69:15:cd:2b:66:66:98:22:
9a:7d:c4:dc:e5:a8:15:3c:0f:37:66:3c:2c:3d:5c:c2:a6:38:
ba:ce:eb:8a:2f:f2:33:c6:da:c9:2d:24:23:61:4c:d3:c3:ee:
11:91:d7:1f:f2:29:dc:30:74:a9:59:32:06:e0:74:12:5b:46:
65:01:21:8b:f9:8c:77:71:2d:85:26:af:82:4f:50:53:07:d6:
7d:36:69:4d:37:37:3f:9d:0d:18:f6:4f:4e:90:a5:b6:ab:d9:
03:bc:7d:0a:75:93:97:6e:f0:3f:6a:ae:0b:8b:05:ae:b7:ba:
0b:22:5a:ec:f0:e4:ee:54:fa:a4:c5:e9:5a:7b:00:59:e1:f3:
8b:de:cc:49:4d:7a:28:d7:5a:ee:53:47:56:83:9b:2c:50:73:
b4:fa:e4:a3:d3:c8:29:01:8d:03:70:c2:25:d1:4b:52:07:30:
2f:d0:0e:5a:77:43:7b:d1:57:a3:2f:ca:99:01:31:fc:7f:ff:
6a:c1:6a:f2:d0:1f:83:65:31:c5:84:d9:db:e9:d4:21:ed:e2:
50:82:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org