Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZCMlKjJ-nkP8BUbLfRvsdJvvzY8.roa
File: ZCMlKjJ-nkP8BUbLfRvsdJvvzY8.roa (raw, json)
Hash identifier: +jwDy+Jq2ppFg+0CSvVI4UH8mkugmT7zHqm11faUuLs=
Subject key identifier: 64:23:25:2A:32:7E:9E:43:FC:05:46:CB:7D:1B:EC:74:9B:EF:CD:8F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D1D4971E7DB0177A22503D8D1790A3AD
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZCMlKjJ-nkP8BUbLfRvsdJvvzY8.roa
Signing time: Fri 02 Dec 2022 07:54:41 +0000
ROA not before: Fri 02 Dec 2022 07:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
78.41.100.0/22 maxlen: 24
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
2a03:d004::/36 maxlen: 36
2a03:d004:1000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:d4:97:1e:7d:b0:17:7a:22:50:3d:8d:17:90:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 07:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6423252a327e9e43fc0546cb7d1bec749befcd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:60:04:46:60:e1:e9:5d:9d:e1:cd:95:20:
28:03:e6:45:43:52:e0:8c:31:24:54:c3:a2:64:3b:
00:f0:80:12:fc:37:ea:ce:a4:4c:55:11:fc:53:74:
7d:aa:10:b3:ec:c6:a0:db:3c:3e:20:6d:82:5f:99:
29:da:d2:cc:30:aa:77:c2:b8:f6:dd:e4:e3:fa:9e:
cd:07:b3:3e:2d:6b:20:41:bf:3b:c2:65:5d:29:92:
98:03:28:32:f2:5b:b8:57:24:21:8e:00:55:57:e0:
5e:66:00:96:5d:41:43:e0:9b:fc:66:5c:dc:77:b4:
7f:77:dd:ba:db:2a:38:3d:88:27:6a:f5:df:66:89:
24:de:0e:cc:c5:05:06:5a:52:b2:83:d4:ef:8b:0d:
0f:c6:86:fe:86:7a:8f:a1:70:47:30:2a:a5:e1:80:
0f:84:cf:6e:93:79:8a:f6:63:87:e1:49:62:1b:87:
29:a5:cd:80:a8:98:04:48:3c:8b:41:a4:21:74:15:
43:7e:a3:3b:8f:ee:c8:89:bb:e5:6b:a0:f2:b0:b3:
1f:38:e6:fa:ed:de:20:dd:06:df:85:c5:d9:55:dc:
ff:ba:84:38:fa:fa:40:83:81:ab:27:fc:cd:99:17:
16:b9:99:53:de:db:77:80:e2:59:dd:1a:be:4e:f6:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:23:25:2A:32:7E:9E:43:FC:05:46:CB:7D:1B:EC:74:9B:EF:CD:8F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZCMlKjJ-nkP8BUbLfRvsdJvvzY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
IPv6:
2a03:d004::/35
Signature Algorithm: sha256WithRSAEncryption
13:8c:08:3b:ec:16:a7:84:dd:48:ba:56:c1:7a:e0:f6:52:de:
47:80:c2:3c:10:39:c5:44:67:2b:42:04:3d:1a:64:d2:8b:0c:
93:9a:11:43:d8:1a:27:2d:82:f1:c7:cd:a0:2d:68:26:ec:1d:
4c:57:ac:6b:d8:26:07:b5:64:68:9d:1c:27:d1:0a:c1:16:1b:
f7:39:21:e1:41:11:23:8c:3c:f2:1c:a4:ea:0c:23:f3:6d:f1:
61:85:60:a3:4b:ad:5b:c0:30:06:51:b9:b5:ff:79:b4:7e:31:
3a:4c:4e:ba:da:55:18:9f:3b:0b:e1:bf:9c:a2:ce:ce:fd:ce:
85:e6:b6:89:f6:a3:c4:d1:77:7a:0b:b0:6e:a6:df:61:3d:f7:
82:fa:ce:8e:e9:7b:d3:84:bb:a8:81:80:31:a9:8b:65:d7:ca:
0a:7e:de:1c:9b:b5:76:44:6d:f0:24:36:dc:4d:96:8c:08:19:
57:54:45:0d:a0:db:6e:83:d1:e8:b1:67:6e:4b:99:11:03:e5:
3f:cf:14:f3:20:98:fe:97:57:61:e0:39:84:27:10:40:92:52:
c2:08:22:66:49:4c:60:f8:bb:c7:be:bc:2a:50:85:1d:0e:c7:
2c:4d:54:4c:48:e4:1f:15:e8:ad:c7:d6:19:94:9e:a3:5a:89:
cc:bb:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:51:04 2025 by rpki-client