Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fgdO7frddb4AD29sfgLyo3y9-N8.roa
File: fgdO7frddb4AD29sfgLyo3y9-N8.roa (raw, json)
Hash identifier: DAWMpduZ1t21DD6x8ao7o6c+Se5EjIXlXpVCEct5KTY=
Subject key identifier: 7E:07:4E:ED:FA:DD:75:BE:00:0F:6F:6C:7E:02:F2:A3:7C:BD:F8:DF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2C50A4BD1A5ABE98BE68CE48BBEAC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fgdO7frddb4AD29sfgLyo3y9-N8.roa
Signing time: Thu 08 Dec 2022 12:43:04 +0000
ROA not before: Thu 08 Dec 2022 12:43:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 109.188.0.0/17 maxlen: 17
94.25.128.0/18 maxlen: 18
212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:c5:0a:4b:d1:a5:ab:e9:8b:e6:8c:e4:8b:be:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e074eedfadd75be000f6f6c7e02f2a37cbdf8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:cc:26:77:2d:05:df:da:22:14:8e:ee:e2:
f5:8c:4b:51:da:f2:10:0e:c1:45:9f:4f:8b:97:a5:
9f:76:54:d9:53:51:5b:f9:ae:c1:b4:b9:1c:8e:5a:
08:32:68:93:f6:b9:f3:a3:fd:82:59:ae:d0:ab:ce:
31:1b:e5:94:2d:ca:8a:72:64:53:9b:4d:97:f6:31:
a3:d1:c1:12:c4:c5:9c:f0:8a:c3:89:af:0e:68:59:
a1:07:f5:a5:f7:ab:31:16:d3:03:f6:8e:b4:27:cd:
96:65:77:e6:9d:13:be:35:59:ee:b8:72:f3:c9:f3:
c7:7d:45:75:78:ae:d2:e7:cd:37:85:7e:fc:41:0f:
8c:33:3f:d6:cf:65:09:02:f0:ae:20:30:2c:9d:b7:
1d:6b:12:a2:ab:54:1c:25:25:53:11:95:fb:aa:c6:
95:55:90:3d:a1:22:4f:e4:98:7d:86:c3:ce:06:3d:
16:9a:67:e2:18:06:57:f0:b1:a4:3a:1d:68:55:a4:
05:95:91:a0:2a:53:2c:14:31:55:d4:8e:a6:3d:ad:
3a:d4:7e:d8:03:9a:c2:5c:c5:ef:f0:1e:72:68:06:
13:81:d5:5c:de:9f:42:46:62:ca:4b:07:21:6c:7b:
4a:ca:b7:6e:20:f7:87:6b:bb:78:92:18:f3:f9:e7:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:4E:ED:FA:DD:75:BE:00:0F:6F:6C:7E:02:F2:A3:7C:BD:F8:DF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fgdO7frddb4AD29sfgLyo3y9-N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/18
109.188.0.0/17
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:1c:27:30:b0:8d:fc:86:f6:b2:86:8c:71:87:39:f9:c3:4f:
1d:9d:f7:26:a7:30:2f:70:9a:a7:45:1c:e9:69:6f:42:c8:05:
e9:e9:b1:a5:97:e5:5b:16:e8:5c:ca:18:c1:c9:8a:e8:75:1b:
db:4b:5c:35:ef:72:2b:cc:bb:68:1f:16:c5:c7:fa:6a:47:7e:
d4:d7:a3:91:c4:89:1a:22:ab:1a:4d:0f:0b:9d:f8:69:63:cd:
28:31:d7:c3:4f:ff:d8:17:a7:a1:71:26:50:13:0a:7a:19:0d:
eb:42:24:10:ea:8f:9e:24:01:ae:8b:a3:8c:9a:83:79:52:b1:
66:0b:fd:7f:75:59:51:d4:19:e6:d2:b6:b3:eb:f5:da:a3:99:
e9:87:fe:40:67:19:6d:68:ac:c7:18:fc:43:e6:78:19:e2:7e:
13:59:72:17:37:6a:54:5b:c4:b4:8b:88:84:af:e5:4a:19:62:
87:21:83:d8:16:30:4b:17:91:ce:72:8d:51:64:a8:3a:1a:10:
34:d1:61:59:11:cc:a7:63:2c:6d:39:0c:a4:e1:6e:37:37:fc:
85:01:02:98:2b:29:86:d4:81:9e:c7:8f:c7:46:dd:f3:b1:0b:
24:fa:2f:03:ae:09:87:a7:b1:24:0e:3d:0f:20:a4:93:f9:28:
56:fb:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:51 2025 by rpki-client