Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WF73-d9_5GfnwBrvxXg7W-I6Ctc.roa
File: WF73-d9_5GfnwBrvxXg7W-I6Ctc.roa (raw, json)
Hash identifier: CJWrJQ+f+Hi085oj8PRXf9UthGWBaY+uK6xlgoe6onY=
Subject key identifier: 58:5E:F7:F9:DF:7F:E4:67:E7:C0:1A:EF:C5:78:3B:5B:E2:3A:0A:D7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505614EADA16FEEAA7F88237E98A9B80D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WF73-d9_5GfnwBrvxXg7W-I6Ctc.roa
Signing time: Mon 12 Dec 2022 08:09:01 +0000
ROA not before: Mon 12 Dec 2022 08:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 84.204.230.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
84.204.160.0/20 maxlen: 20
82.196.64.0/19 maxlen: 19
84.204.176.0/21 maxlen: 21
81.24.128.0/20 maxlen: 20
79.171.8.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
109.124.108.0/22 maxlen: 22
217.195.64.0/19 maxlen: 19
109.124.64.0/18 maxlen: 18
213.154.160.0/19 maxlen: 24
213.172.0.0/19 maxlen: 19
84.204.0.0/17 maxlen: 17
93.153.128.0/17 maxlen: 17
93.153.144.0/21 maxlen: 21
212.69.96.0/19 maxlen: 24
93.153.158.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
93.153.162.0/24 maxlen: 24
93.153.161.0/24 maxlen: 24
195.144.224.0/19 maxlen: 19
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 20
81.3.128.0/18 maxlen: 18
84.204.132.0/22 maxlen: 22
94.25.248.0/21 maxlen: 21
84.204.139.0/24 maxlen: 24
84.204.138.0/24 maxlen: 24
213.182.160.0/19 maxlen: 19
84.204.136.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 17
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:4e:ad:a1:6f:ee:aa:7f:88:23:7e:98:a9:b8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585ef7f9df7fe467e7c01aefc5783b5be23a0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:ad:4c:4b:41:70:30:0a:7c:f8:a1:b2:6a:
7a:b1:01:c3:6a:7f:07:a3:b6:0a:76:c8:da:9b:52:
da:3d:6e:c1:ec:42:ca:4a:45:7f:f4:83:ad:3d:33:
f7:53:af:af:6a:d4:4f:72:66:40:68:63:ac:81:59:
b8:90:0f:90:e6:e7:f3:1c:27:e5:d9:21:2a:c2:7d:
da:03:7a:5a:3f:c6:f1:17:cd:36:8f:f5:ea:ef:d2:
c1:70:3c:8c:70:8a:79:52:4e:39:17:f2:4a:44:54:
42:44:aa:fc:4b:7c:cf:75:ec:10:7e:b8:b4:09:36:
f3:e0:a8:4f:8e:af:dd:81:40:29:4c:2c:dd:f4:38:
92:e6:b7:dd:40:04:07:51:3b:e4:b1:9a:6e:23:fa:
de:90:26:f2:89:11:5b:63:07:8b:3f:b3:95:5b:6f:
3b:9e:09:6d:9e:bf:6a:38:a4:13:b7:98:94:53:7b:
a5:91:fb:18:b6:39:cc:8c:d6:0b:d2:a0:26:3c:8f:
73:69:79:77:16:5d:04:da:74:b9:64:c2:76:08:81:
87:18:70:83:f8:27:4c:d8:82:1f:83:61:2a:8e:f9:
66:2f:7d:13:81:ef:41:6e:53:18:ca:c7:18:68:a9:
c6:44:8d:ac:ef:6a:20:77:1e:0d:23:72:83:92:f6:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:F7:F9:DF:7F:E4:67:E7:C0:1A:EF:C5:78:3B:5B:E2:3A:0A:D7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WF73-d9_5GfnwBrvxXg7W-I6Ctc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
93.153.128.0/17
94.25.248.0/21
95.137.0.0/17
109.124.64.0/18
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.172.0.0/19
213.182.160.0/19
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
71:0a:c5:8f:f8:00:13:e5:32:12:e7:44:1d:32:70:62:7a:c3:
08:85:a3:73:93:05:73:4b:69:92:91:b7:9f:a5:39:fe:91:cc:
71:c6:61:d3:66:3f:8d:28:ad:d2:1f:fa:29:b4:19:e8:16:88:
0e:53:6e:d5:5d:5d:b2:e3:b0:e8:4d:e6:aa:61:de:e1:84:15:
34:b4:e3:35:a8:8e:2e:b7:81:9f:0a:bc:4c:8c:14:54:57:9a:
ba:4e:ca:3d:4f:85:c9:32:25:6b:c6:8e:c4:bc:c2:f5:e0:7d:
be:4c:a4:26:e0:e4:06:1a:1c:a8:1b:83:d5:01:09:66:ef:77:
20:ad:20:ae:f8:af:dd:4b:e8:a1:5b:1a:c9:68:ec:e1:69:8d:
d7:5e:57:85:ef:e1:94:81:9f:8f:a3:dc:93:fe:56:a3:8c:13:
37:90:55:ee:f6:ab:12:9b:3d:c3:45:38:89:f5:bf:1d:94:e5:
14:c4:d7:a0:75:13:9b:21:7d:70:d9:11:04:c5:45:1a:3f:3c:
74:36:8b:14:06:c7:e8:a9:6e:86:a9:a9:af:36:a2:ed:65:19:
c9:21:89:2a:fe:f1:94:6b:87:95:1f:25:b1:24:53:6f:32:48:
5d:35:49:46:8b:9b:da:67:1b:37:12:30:51:6a:d9:98:3e:7d:
8a:5c:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org