Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/e9mvG-c8-gMpIl1U-8DSZP4YxfA.roa
File: e9mvG-c8-gMpIl1U-8DSZP4YxfA.roa (raw, json)
Hash identifier: donNtvlwCb6aJqivhQ0pbZj2EfGzX2Vl0ZTI0cew08s=
Subject key identifier: 7B:D9:AF:1B:E7:3C:FA:03:29:22:5D:54:FB:C0:D2:64:FE:18:C5:F0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847633500F829A85CCD131025277CF8751
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/e9mvG-c8-gMpIl1U-8DSZP4YxfA.roa
Signing time: Mon 14 Nov 2022 12:53:05 +0000
ROA not before: Mon 14 Nov 2022 12:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
62.64.0.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:33:50:0f:82:9a:85:cc:d1:31:02:52:77:cf:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 12:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd9af1be73cfa0329225d54fbc0d264fe18c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:51:db:80:82:fe:0c:e7:d8:cf:a3:82:19:
f4:07:2a:22:35:8b:f3:ed:9b:ca:03:81:fa:42:56:
67:8b:53:18:73:f8:ad:ea:e4:0f:e7:75:a6:db:7c:
33:6e:a6:db:35:b5:ba:87:68:b2:34:a0:85:58:70:
e7:f7:6b:c3:cd:44:8a:af:89:c2:1b:c3:19:72:7d:
15:e6:26:d7:a7:06:28:05:52:81:35:1a:32:b4:3e:
2f:c3:83:05:13:59:06:39:ad:af:fd:55:d4:34:24:
5a:b6:69:1d:f8:4d:57:76:6f:8c:4e:61:b4:67:8e:
6c:24:a4:a2:b4:aa:8d:48:2a:62:16:bd:74:e3:1f:
b8:e3:cd:eb:d1:5f:36:89:bd:0c:f5:3f:26:12:ce:
12:35:c6:70:2a:2c:94:ee:e0:1a:c2:c2:58:e7:e9:
5c:6d:66:66:11:ca:39:57:79:6a:66:eb:9d:01:5e:
76:d2:94:22:b8:43:3d:c1:c0:82:45:16:69:3f:b4:
3b:4f:4f:76:3b:95:6a:5b:2f:ef:e9:58:e4:14:f3:
77:ba:fa:07:fd:7e:14:43:ad:a8:df:e8:f0:bf:fc:
8d:d8:e8:65:5a:ac:96:49:a2:29:98:92:0c:46:eb:
43:8b:b8:a1:84:71:92:d7:4c:7d:11:11:48:ae:07:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:AF:1B:E7:3C:FA:03:29:22:5D:54:FB:C0:D2:64:FE:18:C5:F0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/e9mvG-c8-gMpIl1U-8DSZP4YxfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
56:35:fd:40:f7:a0:3a:8c:d8:3a:70:c3:df:89:63:b3:c0:cd:
42:d4:56:fb:7a:97:0c:98:fd:8a:09:d6:01:e2:5c:4d:dd:be:
58:e6:29:55:55:4a:a7:17:5e:32:63:ab:2a:f3:87:69:d2:53:
61:ce:41:ad:8b:f7:87:9f:91:ad:31:dc:01:9e:4d:d5:45:29:
f4:6e:56:69:2c:0c:d8:23:44:dd:8c:99:34:1d:b6:a9:5e:4d:
52:a3:39:de:78:5f:37:fa:e3:79:64:d8:2d:ec:21:93:e0:3f:
9b:74:82:6c:37:63:80:65:df:45:40:67:c7:b9:7b:6b:42:eb:
00:71:e1:be:68:20:b7:d6:e8:e4:b2:db:bb:f4:73:33:31:5f:
35:24:55:a4:49:91:2a:d5:52:b2:64:1d:5e:33:a2:cc:2b:59:
fc:41:2b:bd:f6:9e:9b:40:ed:0b:70:6f:63:8c:c0:74:ff:88:
39:49:d1:8a:10:54:19:ae:08:95:af:5d:62:25:a6:80:57:71:
51:79:96:07:5f:e6:f4:db:8a:42:43:e2:78:75:cd:9f:2f:32:
09:2e:20:e6:4d:fd:84:86:9a:b4:28:1a:81:92:11:57:59:d6:
0f:ec:15:ab:ec:91:b5:fc:9b:4a:79:67:4e:d4:6c:5b:7d:dd:
d7:50:8e:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org