Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_DQhWulmt5s0nRYdvVLNVdhT5io.roa
File: _DQhWulmt5s0nRYdvVLNVdhT5io.roa (raw, json)
Hash identifier: M1rF4TworSj5LDBcsX9v6I/9R6qria1j5Il/Odx7uVs=
Subject key identifier: FC:34:21:5A:E9:66:B7:9B:34:9D:16:1D:BD:52:CD:55:D8:53:E6:2A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176C60850BBAA560338A9C6A74C5726
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_DQhWulmt5s0nRYdvVLNVdhT5io.roa
Signing time: Thu 08 Dec 2022 11:20:03 +0000
ROA not before: Thu 08 Dec 2022 11:20:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 94.25.128.0/18 maxlen: 18
109.188.0.0/16 maxlen: 24
212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:c6:08:50:bb:aa:56:03:38:a9:c6:a7:4c:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc34215ae966b79b349d161dbd52cd55d853e62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:88:d4:7e:9a:1d:b5:e7:b4:69:d7:e6:b1:
4b:45:58:79:2c:0a:a2:ce:f1:3f:05:f8:07:6d:28:
fa:13:13:c3:7b:d0:a6:1e:a3:c9:d0:12:fd:ae:42:
68:4f:4c:47:7e:6f:39:a2:ac:92:b0:6b:1b:9a:0c:
cd:85:ba:72:39:c8:d5:83:8b:28:94:37:b9:5c:42:
d9:96:cb:6c:4f:fd:8e:06:ba:b3:23:76:98:20:12:
1b:a1:ac:26:78:6e:ad:08:65:f7:04:17:20:c1:49:
9b:1f:a8:41:21:99:4d:44:57:3b:49:f6:a6:f3:a7:
54:93:11:f8:87:c0:df:a2:28:2f:3c:c4:70:f9:a8:
8f:c5:b0:2d:29:69:fe:b1:a3:17:42:1f:13:25:4d:
4a:09:ed:b7:c4:3f:74:38:0a:53:29:14:cc:44:22:
e5:6e:ce:08:dc:f5:07:17:da:4a:18:e2:0c:04:fa:
0f:22:1c:c2:93:42:11:78:2b:31:5f:f9:53:3e:90:
b6:83:4d:5e:65:c0:7a:16:3f:35:13:4f:b5:66:38:
2e:b5:8b:c5:ed:d9:d9:39:a3:f5:8f:e4:bd:45:2a:
50:4f:c3:b9:46:34:f4:78:1a:52:a4:36:2b:05:bc:
4e:f6:10:5b:67:ac:60:e3:c3:15:8d:d3:23:bd:0d:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:34:21:5A:E9:66:B7:9B:34:9D:16:1D:BD:52:CD:55:D8:53:E6:2A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_DQhWulmt5s0nRYdvVLNVdhT5io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
66:2c:8b:6f:05:3a:35:be:11:11:74:9e:67:5d:68:21:85:a6:
a8:5f:b8:c4:95:80:d2:51:bd:2e:1e:d8:58:b3:6b:bf:60:b7:
7d:5e:ed:f1:16:b9:48:0f:a8:c5:0d:ef:08:9e:05:13:3e:87:
3a:67:3d:09:38:a0:05:ce:bf:f0:5f:44:29:51:9e:74:aa:09:
52:61:87:28:da:de:30:38:a3:fd:0d:a9:09:23:bd:6c:dc:04:
1c:70:be:d8:1c:88:ad:19:40:5e:e3:da:44:cd:2a:ce:54:80:
37:d6:96:c2:8f:92:50:c4:a3:39:8d:a5:5a:d4:b5:e8:02:dd:
b1:e2:fe:b4:9e:f8:6e:db:9f:ac:60:42:d0:48:ed:c1:63:2d:
49:48:15:e6:9c:1d:b7:63:2b:96:df:ad:81:eb:69:b8:e2:fd:
95:f5:b9:48:b7:79:12:5e:b1:7f:95:7a:9d:79:ff:47:b9:ea:
80:7f:f8:b2:b0:6b:81:6d:7c:ca:64:9d:dd:5c:95:4e:cc:c2:
36:42:fb:bf:2f:eb:b0:ec:97:f7:59:85:59:8e:d4:75:9a:16:
95:3d:4c:97:fb:76:a6:f1:f8:a0:da:9f:e0:48:e2:f7:4b:6a:
36:c8:f5:bb:35:91:f9:3e:7a:da:59:64:3c:b0:12:cc:8f:42:
46:a9:b6:e5
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYTxdsYIULuqVgM4qcanTFcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTEyMDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzM0MjE1YWU5NjZiNzliMzQ5ZDE2MWRiZDUyY2Q1NWQ4NTNlNjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMSI1H6aHbXntGnX5rFLRVh5LAqi
zvE/BfgHbSj6ExPDe9CmHqPJ0BL9rkJoT0xHfm85oqySsGsbmgzNhbpyOcjVg4so
lDe5XELZlstsT/2OBrqzI3aYIBIboawmeG6tCGX3BBcgwUmbH6hBIZlNRFc7Sfam
86dUkxH4h8DfoigvPMRw+aiPxbAtKWn+saMXQh8TJU1KCe23xD90OApTKRTMRCLl
bs4I3PUHF9pKGOIMBPoPIhzCk0IReCsxX/lTPpC2g01eZcB6Fj81E0+1ZjgutYvF
7dnZOaP1j+S9RSpQT8O5RjT0eBpSpDYrBbxO9hBbZ6xg48MVjdMjvQ3/tQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFPw0IVrpZrebNJ0WHb1SzVXYU+YqMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvX0RRaFd1bG10NXMwblJZZHZWTE5WZGhUNWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAZe
GYADAwBtvAMEBoDMQAMEA7IXkAMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnk
AwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVg
AwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IB
AQBmLItvBTo1vhERdJ5nXWghhaaoX7jElYDSUb0uHthYs2u/YLd9Xu3xFrlID6jF
De8IngUTPoc6Zz0JOKAFzr/wX0QpUZ50qglSYYco2t4wOKP9DakJI71s3AQccL7Y
HIitGUBe49pEzSrOVIA31pbCj5JQxKM5jaVa1LXoAt2x4v60nvhu25+sYELQSO3B
Yy1JSBXmnB23YyuW362B62m44v2V9blIt3kSXrF/lXqdef9HueqAf/iysGuBbXzK
ZJ3dXJVOzMI2Qvu/L+uw7Jf3WYVZjtR1mhaVPUyX+3am8fig2p/gSOL3S2o2yPW7
NZH5PnraWWQ8sBLMj0JGqbbl
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:33 2025 by rpki-client