Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f9OthQttDrmdFLG5CeQmSLdLsdM.roa
File: f9OthQttDrmdFLG5CeQmSLdLsdM.roa (raw, json)
Hash identifier: uKmVIRg4Io6t0SeHkyLW+/4MUX1H0NsLu4O03k2OH1I=
Subject key identifier: 7F:D3:AD:85:0B:6D:0E:B9:9D:14:B1:B9:09:E4:26:48:B7:4B:B1:D3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BEE79F9E188BC961C7145260A128D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f9OthQttDrmdFLG5CeQmSLdLsdM.roa
Signing time: Mon 05 Dec 2022 12:21:29 +0000
ROA not before: Mon 05 Dec 2022 12:21:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
84.204.230.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
217.195.64.0/19 maxlen: 19
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/17 maxlen: 17
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 20
91.193.212.0/22 maxlen: 24
84.204.132.0/22 maxlen: 22
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.139.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 20
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
213.182.160.0/19 maxlen: 19
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:ee:79:f9:e1:88:bc:96:1c:71:45:26:0a:12:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fd3ad850b6d0eb99d14b1b909e42648b74bb1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:76:b7:22:cc:fb:f1:ee:a4:ec:82:0b:46:
5d:c8:fc:48:d7:2f:0c:7a:dc:7f:92:95:d0:9f:87:
18:76:de:22:ad:bb:8d:d9:8d:84:b1:44:b4:81:64:
d9:36:61:8f:c1:52:fb:ed:7f:55:7d:2c:6f:43:59:
82:65:15:61:ee:cd:f6:07:ff:db:18:54:31:1b:13:
74:bd:ed:56:00:e5:6e:84:12:a8:1b:85:f5:35:97:
4a:a1:b8:61:f9:13:80:3c:40:30:12:58:c7:7a:39:
4c:c1:d5:e0:82:1c:ac:75:31:86:c2:be:e7:41:2e:
01:5d:a9:ca:83:4a:e1:16:4d:16:b9:87:d4:ad:22:
3f:30:43:97:37:96:a5:43:44:40:63:dd:66:12:eb:
f0:39:cd:59:4a:ee:d2:4e:3a:0a:0f:9c:63:68:fe:
a4:00:2f:94:60:b3:4d:58:a2:d9:d6:fe:c0:29:c8:
ee:4d:a4:6e:71:96:80:b1:86:e5:ab:5e:de:bc:a9:
55:37:0a:c6:00:ae:fb:50:ce:52:d4:22:6e:b1:2d:
3b:b6:8d:e7:d9:6e:f0:f7:8a:fb:23:f3:3c:af:70:
71:5a:3a:eb:80:7e:7d:25:63:74:6f:b3:69:83:c6:
b9:30:b6:bc:b0:41:90:3d:58:e3:ed:82:b7:7c:1f:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:AD:85:0B:6D:0E:B9:9D:14:B1:B9:09:E4:26:48:B7:4B:B1:D3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f9OthQttDrmdFLG5CeQmSLdLsdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:c6:09:29:e4:d4:19:ef:6a:df:f4:e9:8b:87:25:48:3b:4a:
07:9c:d6:cd:ae:d8:cc:29:07:e3:a1:5e:09:73:56:90:c5:19:
71:bc:1b:d8:58:ec:b9:bf:70:e7:25:0a:72:b6:cd:e8:df:73:
3c:6a:03:14:2d:86:4f:3a:f4:83:9a:d4:99:20:1b:31:10:dd:
24:f4:b3:51:d9:d9:ed:ff:5e:49:06:50:81:54:b9:fc:0f:6a:
73:37:7b:cf:a7:b8:b6:92:98:95:be:57:d4:fe:15:ea:35:14:
1b:a0:02:72:50:44:d3:f9:b7:9c:36:3d:42:83:ba:cd:09:b5:
3b:6a:aa:53:12:91:26:27:e7:0f:3e:90:ef:2e:41:9d:97:f7:
c0:5e:58:71:79:b1:48:ae:8d:60:8e:ba:df:ab:ec:84:6f:57:
4f:fa:de:fd:d5:ed:e4:f5:eb:1d:a0:3c:bb:09:98:10:e3:8c:
06:68:d7:0c:81:e4:8e:b4:d6:0f:ea:34:d3:7a:44:37:af:4a:
c1:21:13:9c:c8:9a:6e:95:35:38:af:3a:4a:b5:92:33:ab:96:
8f:a6:e3:a7:af:e6:c3:fb:be:90:e4:4c:85:1c:56:b1:8e:01:
22:7c:87:8e:be:70:46:fc:2c:1c:01:9e:70:73:a2:50:0d:d2:
d0:8c:07:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:21 2025 by rpki-client