Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ckcZ2DYAPHwhsRGlfaGzYBdeNk8.roa
File: ckcZ2DYAPHwhsRGlfaGzYBdeNk8.roa (raw, json)
Hash identifier: mjAEvM/M9i0R2Emfo3aNpgKoI7Jk2W/pH0Nt2hzOZS0=
Subject key identifier: 72:47:19:D8:36:00:3C:7C:21:B1:11:A5:7D:A1:B3:60:17:5E:36:4F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185F2D3744C7D0A0A23895C146ED9A2AF22
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ckcZ2DYAPHwhsRGlfaGzYBdeNk8.roa
Signing time: Fri 27 Jan 2023 10:43:42 +0000
ROA not before: Fri 27 Jan 2023 10:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31261
IP address blocks: 81.23.0.0/21 maxlen: 21
81.23.9.0/24 maxlen: 24
81.23.8.0/23 maxlen: 23
81.23.14.0/24 maxlen: 24
37.16.80.0/22 maxlen: 22
185.68.145.0/24 maxlen: 24
83.220.32.0/19 maxlen: 19
185.68.146.0/23 maxlen: 23
77.242.15.0/24 maxlen: 24
217.171.152.0/21 maxlen: 21
188.164.214.0/23 maxlen: 23
185.196.246.0/23 maxlen: 23
185.6.172.0/22 maxlen: 22
185.6.174.0/24 maxlen: 24
188.68.189.0/24 maxlen: 24
188.164.212.0/24 maxlen: 24
89.107.141.0/24 maxlen: 24
89.107.142.0/23 maxlen: 23
188.164.209.0/24 maxlen: 24
77.74.79.0/24 maxlen: 24
5.8.177.0/24 maxlen: 24
91.198.212.0/24 maxlen: 24
94.124.192.0/21 maxlen: 21
77.74.72.0/22 maxlen: 22
77.220.211.0/24 maxlen: 24
77.74.78.0/24 maxlen: 24
77.220.209.0/24 maxlen: 24
185.22.24.0/24 maxlen: 24
77.74.77.0/24 maxlen: 24
109.73.12.0/23 maxlen: 23
93.191.16.0/21 maxlen: 21
93.191.23.0/24 maxlen: 24
109.73.0.0/22 maxlen: 22
109.73.4.0/22 maxlen: 22
109.73.8.0/22 maxlen: 22
2a02:330::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d3:74:4c:7d:0a:0a:23:89:5c:14:6e:d9:a2:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 27 10:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=724719d836003c7c21b111a57da1b360175e364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:12:e4:f5:96:ee:c9:fc:40:2a:82:a2:8b:
e9:5a:85:8c:db:69:2c:1c:3b:c1:4b:e6:86:37:87:
5b:13:8d:a3:43:30:08:c9:1a:44:33:db:b6:ad:0d:
87:58:ed:b3:70:15:00:7a:37:91:b7:2b:7d:45:19:
a7:d5:b7:4f:94:46:ab:c7:21:e2:01:64:9f:eb:17:
c8:e5:07:65:2b:95:6b:a6:1e:a9:43:a6:cd:a5:f4:
3d:e3:49:99:9b:58:d6:f0:91:fc:4a:e9:ae:63:02:
34:dc:3d:f4:07:ba:ca:01:1c:ef:6b:76:6e:5b:50:
2b:b6:62:87:bd:89:29:6d:9f:9e:44:ea:da:7d:1a:
36:a9:68:dd:9f:fb:d2:cb:80:25:1e:89:15:2b:b7:
70:fe:0f:85:ec:93:a5:dd:b5:4f:4d:4b:ab:93:55:
c8:69:da:87:43:7a:23:27:7d:9d:23:97:ac:9a:4e:
39:8a:9b:22:cf:a3:a2:db:2b:92:8d:f8:03:8f:d9:
ba:15:4b:06:97:7b:c5:de:79:e3:a1:75:5a:e1:14:
e6:0c:74:ba:c4:8b:c5:91:c5:ef:bc:6c:61:9e:70:
b2:cd:cc:5e:7d:17:f4:0d:27:0a:cd:78:e5:78:b0:
90:e5:8a:c1:dd:4d:cb:ce:8e:53:be:75:12:c8:f6:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:19:D8:36:00:3C:7C:21:B1:11:A5:7D:A1:B3:60:17:5E:36:4F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ckcZ2DYAPHwhsRGlfaGzYBdeNk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.177.0/24
37.16.80.0/22
77.74.72.0/22
77.74.77.0-77.74.79.255
77.220.209.0/24
77.220.211.0/24
77.242.15.0/24
81.23.0.0-81.23.9.255
81.23.14.0/24
83.220.32.0/19
89.107.141.0-89.107.143.255
91.198.212.0/24
93.191.16.0/21
94.124.192.0/21
109.73.0.0-109.73.13.255
185.6.172.0/22
185.22.24.0/24
185.68.145.0-185.68.147.255
185.196.246.0/23
188.68.189.0/24
188.164.209.0/24
188.164.212.0/24
188.164.214.0/23
217.171.152.0/21
IPv6:
2a02:330::/45
Signature Algorithm: sha256WithRSAEncryption
44:1c:f1:72:fe:86:67:b7:53:74:ce:c4:51:c9:7d:57:e3:2b:
f8:ff:7a:7c:49:ab:d0:18:49:60:7f:23:22:53:c6:12:e9:de:
55:71:8d:9d:61:dd:1e:82:36:b7:8d:c3:be:df:56:94:7d:29:
f3:16:cf:41:06:b5:f5:3d:13:42:5b:d0:3c:4f:9a:81:6c:c5:
dd:e4:b3:75:8f:bf:6f:9e:b5:f1:1c:2f:bb:10:87:4a:d8:5f:
15:23:3a:65:ee:d7:3b:fb:b6:4a:4e:c8:dd:7f:52:d8:0d:f2:
ec:15:54:d0:59:b8:6b:f2:32:50:b8:96:2c:48:7a:28:13:8e:
17:f3:7c:e5:dd:d6:c4:27:09:6e:53:50:d3:d1:ce:28:46:d6:
1b:b7:6f:7f:c4:24:31:ef:f2:57:be:ed:a7:d0:01:a0:55:e5:
88:64:bb:ff:73:4e:01:36:3a:17:b2:30:02:62:e2:1d:b5:ef:
b6:19:16:49:f0:ab:2b:72:cd:27:5b:04:4c:c2:3d:3c:2a:4d:
36:c0:b9:26:1b:f5:97:c0:93:79:9b:ba:67:bd:f0:b3:3e:34:
02:c6:c3:1a:80:56:ae:fb:e8:89:07:74:19:18:ad:da:26:44:
0c:fd:65:22:fe:67:64:21:e2:11:b3:39:17:07:41:2b:1a:7c:
63:8f:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:29 2025 by rpki-client