Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dhAmFJGmwbydKqsF7k024oUPhDg.roa
File: dhAmFJGmwbydKqsF7k024oUPhDg.roa (raw, json)
Hash identifier: Sc/QYDMD+Q68qCBHoF9lqQPdhV7MNZ6ZSxslzy8tl5Q=
Subject key identifier: 76:10:26:14:91:A6:C1:BC:9D:2A:AB:05:EE:4D:36:E2:85:0F:84:38
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3DED334BD019EDD58E64572DEE9A9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dhAmFJGmwbydKqsF7k024oUPhDg.roa
Signing time: Wed 30 Nov 2022 09:17:41 +0000
ROA not before: Wed 30 Nov 2022 09:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
84.204.230.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 24
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
217.195.64.0/19 maxlen: 19
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/17 maxlen: 17
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
84.204.132.0/22 maxlen: 22
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
213.182.160.0/19 maxlen: 19
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:de:d3:34:bd:01:9e:dd:58:e6:45:72:de:e9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7610261491a6c1bc9d2aab05ee4d36e2850f8438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:62:85:e5:4c:f0:0b:57:09:8d:d5:25:2a:
3f:4e:ab:0e:72:fb:18:4d:4c:86:95:32:8c:36:5b:
22:e7:7f:1f:13:a1:b2:06:da:ab:16:ba:9a:98:57:
a7:45:b6:77:98:82:cd:8b:9f:4d:7b:97:3e:bf:d5:
40:b3:95:62:b9:b6:e0:bc:ff:b1:68:7b:47:09:9a:
17:10:39:24:1d:c9:72:52:d3:7c:1c:43:66:20:cb:
0f:6a:56:d9:d6:31:07:7c:18:53:99:27:68:65:1b:
e9:dc:29:5a:90:10:7e:66:24:fd:d6:c9:e6:f2:ab:
49:75:36:09:fe:91:15:15:52:82:4d:29:af:83:2f:
71:63:9a:6b:cc:c1:6a:09:c7:c4:e4:38:4c:aa:00:
09:1b:21:91:b8:1d:fb:4d:4a:3d:f1:fe:5e:8f:72:
85:f1:c8:bc:14:db:40:37:24:9b:5b:2c:78:f3:98:
16:da:c8:bf:89:31:63:4b:aa:8a:04:39:7f:f0:d1:
5c:03:80:f1:c8:31:8f:da:47:ef:ab:2c:6a:fd:78:
db:f8:e7:48:31:1d:ea:d0:f5:3a:90:e8:6c:8f:02:
16:10:81:70:7b:66:58:1d:0c:a8:94:6a:4e:53:79:
8d:ea:81:cb:e0:e6:77:9a:14:e9:6c:f6:ef:1f:72:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:26:14:91:A6:C1:BC:9D:2A:AB:05:EE:4D:36:E2:85:0F:84:38
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dhAmFJGmwbydKqsF7k024oUPhDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:d1:2e:cb:e9:71:82:a6:7e:a0:3e:ab:3a:8e:bd:47:47:e3:
7f:5a:63:c9:f3:c8:ec:08:40:f8:99:93:86:62:f4:0f:57:80:
44:98:f1:94:c7:f6:a8:e7:6c:01:4c:3e:e4:51:97:2f:25:76:
95:59:02:bf:66:45:9c:4f:b8:b1:51:c1:cf:bf:da:80:e7:8e:
73:cb:2e:d9:8d:4f:0a:86:20:57:7c:4f:8f:2a:e3:95:ef:c9:
30:c0:61:45:8b:b8:b3:51:8d:cd:1d:76:39:52:c2:a4:87:38:
a9:15:a9:a6:d3:b0:15:12:35:36:c5:53:94:04:05:b6:a6:10:
95:32:65:52:a3:f3:70:87:74:1f:c9:6c:0a:f8:f9:9c:15:60:
b8:73:8a:5d:fa:26:91:3b:0d:3d:25:a1:f1:70:aa:87:71:55:
1f:db:3c:63:04:3f:a7:f0:5c:31:66:a2:33:e8:74:7c:ff:99:
7e:39:53:dd:38:ea:20:2b:8d:c9:ba:92:98:b6:b9:1e:a8:0b:
90:fd:49:0e:90:8d:0c:f9:98:9b:78:c8:8a:fd:73:aa:3e:d5:
4b:19:6c:f2:83:86:3b:ba:27:2b:ed:01:4b:d7:c9:63:d0:74:
ed:c5:b2:e5:77:7a:41:1c:dd:06:b8:fd:09:f4:bb:9f:f8:9a:
4d:53:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org