Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/cHIC_3DhR3cJd3M2Rbcz7lZgLEI.roa
File: cHIC_3DhR3cJd3M2Rbcz7lZgLEI.roa (raw, json)
Hash identifier: pEYnYMoyMatifZg+O1T4au9oQIX1Rcf1eISrR5iLIno=
Subject key identifier: 70:72:02:FF:70:E1:47:77:09:77:73:36:45:B7:33:EE:56:60:2C:42
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E46AE1602E4B64E5A2900897141C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/cHIC_3DhR3cJd3M2Rbcz7lZgLEI.roa
Signing time: Wed 30 Nov 2022 09:17:43 +0000
ROA not before: Wed 30 Nov 2022 09:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.80.0/23 maxlen: 23
178.178.130.0/24 maxlen: 24
178.178.129.0/24 maxlen: 24
178.178.132.0/24 maxlen: 24
178.178.131.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
178.178.128.0/24 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.42.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
178.178.135.0/24 maxlen: 24
178.178.137.0/24 maxlen: 24
178.178.134.0/24 maxlen: 24
178.178.133.0/24 maxlen: 24
178.178.136.0/24 maxlen: 24
178.178.143.0/24 maxlen: 24
178.178.142.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.141.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e4:6a:e1:60:2e:4b:64:e5:a2:90:08:97:14:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=707202ff70e147770977733645b733ee56602c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:fc:4f:73:77:a7:54:6d:fe:75:0b:be:91:
9a:8f:72:9f:1d:0c:93:5e:12:c3:13:04:f5:0f:1b:
01:e1:e3:05:8b:6c:0e:d9:b0:3a:76:74:19:a7:c1:
fd:29:12:fc:f2:43:e0:96:78:a5:8a:64:f2:1b:4d:
78:1e:2d:f4:de:03:e9:4c:d8:b1:fe:5a:8a:17:d4:
62:90:17:54:e4:c5:0a:57:cd:f3:2b:a8:58:3a:6f:
36:54:4c:07:98:20:d4:e8:31:d1:a8:e6:62:22:a8:
76:e1:9a:67:d3:0c:a0:f8:97:a4:be:3e:90:6c:9e:
2a:b9:0f:91:4b:f4:5d:8a:59:bc:9b:6f:cb:f3:bf:
f9:ed:9b:a9:f4:bb:b0:89:66:fb:8c:be:92:98:67:
ce:ab:07:9c:63:a5:4a:35:ce:a1:78:76:13:93:d5:
a1:5b:c5:3f:0f:6d:fd:cd:b3:91:5c:16:b6:d6:54:
ea:18:81:66:c6:4f:8d:40:98:f7:09:28:20:70:57:
ca:d3:34:ea:27:11:43:20:be:c9:13:63:5b:bc:d1:
be:64:2f:ba:eb:71:f1:66:2a:4a:db:f8:b4:54:69:
14:4f:10:7d:7f:c7:d0:09:3a:fc:7d:f9:05:5b:56:
9c:c1:29:8c:ba:61:e4:cb:f0:a5:33:7e:c0:24:47:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:02:FF:70:E1:47:77:09:77:73:36:45:B7:33:EE:56:60:2C:42
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/cHIC_3DhR3cJd3M2Rbcz7lZgLEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.40.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
178.178.128.0-178.178.137.255
178.178.142.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:61:2c:19:58:b1:99:51:18:7c:f9:29:ea:b5:29:b8:8e:87:
f9:2d:a1:96:36:79:60:1f:db:0b:5b:6b:9a:51:8a:47:a4:a1:
21:91:c8:92:be:a1:f5:dd:79:e6:98:36:06:9a:27:00:41:a5:
12:37:fc:83:2a:d6:6c:eb:79:7c:4f:e1:7e:5d:20:ad:c0:93:
60:b0:96:2b:2b:ed:af:f2:4d:33:09:44:40:d1:ff:4d:0a:74:
6d:fb:9b:7e:f5:e6:c0:30:02:c1:29:ef:18:69:6e:54:81:9a:
00:a4:1f:80:4a:e1:6a:a4:dd:c9:9d:14:8a:3c:4a:2b:ea:0b:
8e:20:17:f2:53:52:bd:d3:46:4a:28:a0:9f:9c:9f:2b:43:79:
57:00:b7:65:e5:2b:82:d3:8c:fd:72:68:7b:b7:e5:04:98:a5:
24:f7:3e:3e:7d:0d:61:9c:4d:0b:9e:c5:32:f2:bb:2b:ee:cd:
fe:99:d7:23:1b:36:45:05:d1:4a:74:29:c9:f3:16:bb:95:f8:
45:8b:da:ae:5a:d3:a8:72:c2:33:f3:47:1a:cf:fa:a7:75:8c:
2d:5f:0e:5d:b3:88:57:31:c5:d8:5f:8e:68:87:aa:d7:e9:61:
9a:7d:65:42:08:fc:18:42:dd:28:8e:31:5c:ff:7e:37:13:9f:
24:db:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:25 2025 by rpki-client