Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y-fkecmtltqqy7hB4whQ-2kcDTg.roa
File: Y-fkecmtltqqy7hB4whQ-2kcDTg.roa (raw, json)
Hash identifier: q/dWwImx5/p9/nnZBJTODpSJny2BTRIApdtsJ2lCt00=
Subject key identifier: 63:E7:E4:79:C9:AD:96:DA:AA:CB:B8:41:E3:08:50:FB:69:1C:0D:38
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01875B3E4F04A8649301A4A6F70980287CEE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y-fkecmtltqqy7hB4whQ-2kcDTg.roa
Signing time: Fri 07 Apr 2023 10:23:42 +0000
ROA not before: Fri 07 Apr 2023 10:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50928
IP address blocks: 46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
188.170.244.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.245.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.252.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
178.23.144.0/21 maxlen: 21
178.23.149.0/24 maxlen: 24
178.23.151.0/24 maxlen: 24
178.23.148.0/24 maxlen: 24
178.23.150.0/24 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
178.176.254.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.80.0/24 maxlen: 24
37.29.82.0/24 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.252.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.248.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
2a00:9780:300::/40 maxlen: 40
2a00:9780:500::/40 maxlen: 40
2a00:9780::/40 maxlen: 40
2a00:9780:800::/40 maxlen: 40
2a00:9780:600::/40 maxlen: 40
2a00:9780:900::/40 maxlen: 40
2a00:9780:100::/40 maxlen: 40
2a00:9780:400::/40 maxlen: 40
2a00:9780:700::/40 maxlen: 40
2a00:9780:200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:3e:4f:04:a8:64:93:01:a4:a6:f7:09:80:28:7c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Apr 7 10:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63e7e479c9ad96daaacbb841e30850fb691c0d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:14:76:8f:8a:8a:dc:6a:e1:1e:b4:10:4f:
ba:93:5f:53:a6:e9:83:86:f2:fe:a2:44:80:24:bb:
f9:25:6d:bf:69:73:c5:a2:56:da:6d:5a:d6:32:1e:
a8:ee:3e:fe:c0:53:fb:45:36:9d:c9:9f:f7:56:df:
3c:0b:55:69:69:85:fe:91:ae:5c:84:1e:6b:61:57:
72:ab:fa:9f:f8:df:4e:ec:36:35:e1:e0:15:d0:c5:
96:4f:ee:ba:3b:8b:ba:6c:91:32:dd:a0:8f:ba:c2:
cc:a8:2b:76:03:5b:3a:4a:7e:c4:e0:70:86:88:3f:
a1:e1:3a:2c:2d:7f:db:77:2e:b3:06:52:62:d2:f1:
78:92:fb:76:4f:8c:de:27:bb:16:43:62:88:80:bf:
09:51:ae:7a:c8:65:cb:c5:ba:e3:4f:d0:23:82:33:
be:3e:5a:55:fe:47:04:84:57:09:76:d4:1f:a9:c3:
fa:b5:2b:79:e6:81:0c:ea:df:0d:18:1d:34:84:c0:
24:05:40:9e:be:da:33:1b:17:0e:f9:5c:6d:5b:6c:
7e:f4:63:de:24:84:4e:12:79:bc:12:79:71:2d:8a:
1a:d3:7a:82:ab:0b:a9:0c:ba:7a:51:53:06:aa:43:
63:ed:c6:11:ca:84:af:59:45:11:7d:cb:dd:7e:e2:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:E4:79:C9:AD:96:DA:AA:CB:B8:41:E3:08:50:FB:69:1C:0D:38
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Y-fkecmtltqqy7hB4whQ-2kcDTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
178.23.144.0/21
178.176.248.0-178.176.254.255
188.170.244.0/23
188.170.248.0-188.170.252.255
IPv6:
2a00:9780::-2a00:9780:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:07:df:4f:3d:ee:ff:32:87:1f:6a:f9:40:80:c4:0e:3e:48:
c4:3b:c9:c0:25:87:e0:ed:ff:ea:85:37:2b:4d:6a:f9:cc:31:
cc:6d:12:67:18:d7:62:ad:67:7f:b2:05:e7:56:f8:d9:bb:06:
7c:4b:a7:5d:e9:c6:3a:72:71:6c:31:f4:77:48:84:bc:8c:5a:
4f:46:fc:48:27:f6:11:07:89:fd:66:a4:36:d1:65:31:73:21:
ce:16:14:0d:52:5b:d7:8f:51:d8:a1:f8:d2:ad:f5:08:76:71:
93:62:b4:d1:fc:31:41:47:34:bb:96:d6:ac:06:06:9e:77:25:
c2:36:fc:8d:4a:6e:44:23:56:96:ba:1d:fe:c5:03:6e:9e:05:
9d:86:36:af:9a:05:7a:c3:e9:de:7e:4a:d4:81:cd:0a:2b:ba:
8b:f9:e2:8c:03:09:8b:d3:3d:c0:fd:07:b0:b1:1b:dc:59:5e:
e2:f7:d8:76:02:d4:43:2c:aa:0a:4b:9d:15:d7:a2:15:21:17:
04:1e:ad:1a:92:67:97:0a:03:95:ce:7c:49:e0:29:8f:a9:28:
b3:2b:96:14:f3:2b:44:2b:2a:27:5d:8a:f2:2a:51:66:65:0c:
f8:18:1b:5a:0c:a6:a2:95:9b:b1:95:85:bc:51:9f:24:d8:95:
c1:3c:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:11 2025 by rpki-client