Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hUFzsx_VLvzxbAeybqrhkxP-TaM.roa
File: hUFzsx_VLvzxbAeybqrhkxP-TaM.roa (raw, json)
Hash identifier: oTEtRHzXljsWlFi6kxivBr0fNgL4cAQtr/H82lrd3Ew=
Subject key identifier: 85:41:73:B3:1F:D5:2E:FC:F1:6C:07:B2:6E:AA:E1:93:13:FE:4D:A3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176C25F4916998ABA2CBF0D2E018B26
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hUFzsx_VLvzxbAeybqrhkxP-TaM.roa
Signing time: Thu 08 Dec 2022 11:20:02 +0000
ROA not before: Thu 08 Dec 2022 11:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:c2:5f:49:16:99:8a:ba:2c:bf:0d:2e:01:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=854173b31fd52efcf16c07b26eaae19313fe4da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:3d:3d:4c:27:92:18:31:27:18:c1:06:84:
e0:bb:c9:6f:21:e8:ab:dd:25:ac:a2:68:65:8b:ce:
66:80:e5:68:d7:43:99:ee:9a:3e:7b:8e:9c:0f:37:
98:41:03:d5:d6:01:59:0d:f5:99:9a:dc:8d:11:21:
bd:9e:6c:a8:2d:7a:5b:7e:43:d0:14:eb:c0:53:00:
6f:d8:a1:22:d8:01:1a:e8:47:84:a7:c2:bb:7b:d1:
e9:1a:7a:fd:15:0b:09:8d:f9:83:67:42:97:c0:80:
ff:e1:40:03:1e:c0:ee:b1:36:0f:72:c6:5a:ed:49:
ee:68:50:1d:bd:3c:08:94:57:f0:6d:5b:b9:4f:28:
86:7c:39:bb:3e:15:18:ee:eb:15:ac:68:32:b4:a2:
4d:d7:86:a9:2e:97:17:3d:f2:f1:b3:0a:88:03:28:
f4:9e:01:02:5e:01:10:39:e3:87:cc:37:48:5a:7a:
df:02:87:5f:e6:2e:04:dd:bf:ca:ab:3d:58:50:57:
c7:76:59:a4:70:36:ed:98:c6:f9:74:1b:96:2d:bb:
96:4b:82:5e:3a:5e:46:87:03:4a:58:7a:38:b0:4f:
74:bf:2f:6e:52:49:ed:65:6c:68:7e:1c:12:de:b6:
9b:65:7d:0a:25:ac:78:ed:f9:b2:99:d7:88:94:d2:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:73:B3:1F:D5:2E:FC:F1:6C:07:B2:6E:AA:E1:93:13:FE:4D:A3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hUFzsx_VLvzxbAeybqrhkxP-TaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
72:72:ae:e5:ef:7a:50:ab:ca:1e:82:2a:0f:51:17:5f:cf:09:
d5:1d:11:fe:06:0e:10:05:3a:5d:e3:3b:a6:cc:6a:17:1d:c6:
7c:b3:b6:a5:95:e0:1b:cf:68:1c:d7:43:b0:ba:05:49:38:c9:
27:c3:0a:60:79:03:53:31:00:71:09:7f:53:78:23:55:fd:06:
7b:a2:0b:4e:cb:d2:0e:0a:f5:21:45:c2:f8:76:bd:e9:13:fc:
aa:63:ca:a9:bf:0a:4d:6f:d4:a9:f8:24:19:25:6c:a3:a5:2e:
2b:97:48:82:60:57:87:41:eb:d0:a1:e4:b3:3a:83:c6:e1:b6:
85:01:7c:ef:b0:bc:c2:c6:f0:2e:c4:07:73:65:2a:6c:18:e2:
05:c4:af:58:72:ba:7c:d7:ab:48:3c:f9:32:e5:45:9d:aa:bd:
6b:a5:1b:68:01:88:70:77:b5:b0:6d:d3:e0:98:fd:8d:e3:f3:
00:1a:f9:88:8d:63:e0:17:ac:29:35:ba:4a:ff:4a:c6:06:42:
0f:9f:c7:0d:e3:e1:68:94:4c:16:b6:40:62:e2:aa:88:64:35:
f0:a1:57:9a:8c:94:30:e7:f1:0f:e4:61:ad:0e:83:ce:44:4b:
e0:2d:98:6f:ce:61:98:f5:a5:f7:4e:b7:42:f0:36:30:d0:62:
df:a3:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:42 2025 by rpki-client