Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/h_7pN2kt3ONGZbN7YkXV7sfSTWk.roa
File: h_7pN2kt3ONGZbN7YkXV7sfSTWk.roa (raw, json)
Hash identifier: tIPELNGiHhlU8BQwN7YL6UtCoRogxApL7OUJU6YByjs=
Subject key identifier: 87:FE:E9:37:69:2D:DC:E3:46:65:B3:7B:62:45:D5:EE:C7:D2:4D:69
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E74D542F779EDBD380C65DB2381E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/h_7pN2kt3ONGZbN7YkXV7sfSTWk.roa
Signing time: Wed 30 Nov 2022 09:17:44 +0000
ROA not before: Wed 30 Nov 2022 09:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
178.176.154.0/23 maxlen: 23
31.173.176.0/20 maxlen: 20
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e7:4d:54:2f:77:9e:db:d3:80:c6:5d:b2:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87fee937692ddce34665b37b6245d5eec7d24d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:aa:a8:39:b2:f1:64:b5:f3:69:78:d0:1f:
da:ef:8f:92:a2:38:8c:f0:f0:b9:e5:b6:48:a1:6f:
8f:7f:27:cf:cb:f1:01:a2:85:36:27:6b:75:80:9e:
96:d9:39:bc:41:c3:33:fc:8a:db:16:0f:d2:5c:96:
a6:6a:e1:bc:af:6f:00:4d:1c:1d:bd:df:d5:bb:6e:
07:fc:9b:c9:5d:09:0f:11:ec:68:51:31:d1:b6:ae:
81:d0:2e:68:8d:6f:fb:89:cb:51:7a:8a:6e:73:43:
33:76:91:29:bd:0d:64:4e:2c:4c:7c:89:0a:ee:df:
aa:ab:a4:8c:6b:21:24:a7:bb:79:cc:33:85:5e:e4:
cc:2c:d1:fd:3a:33:03:fa:ed:67:26:0d:ff:dd:35:
e2:d8:c3:51:ea:67:30:08:1b:93:3d:be:cd:d2:a0:
18:0c:29:ea:10:4e:3c:9a:bc:1e:a5:85:84:a2:52:
59:e8:1c:5e:66:92:b5:3f:d1:a0:4b:6d:c9:ae:35:
ce:e1:23:b3:60:3b:95:57:83:84:ce:14:bd:cf:d3:
89:89:53:00:e4:a8:84:b2:ea:57:c2:30:bd:08:71:
5e:6a:13:2e:64:77:ca:00:15:c0:a1:f4:32:a7:74:
e1:82:55:d9:a1:a9:58:20:fe:3a:d4:f7:8c:7f:9c:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:E9:37:69:2D:DC:E3:46:65:B3:7B:62:45:D5:EE:C7:D2:4D:69
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/h_7pN2kt3ONGZbN7YkXV7sfSTWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.154.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
72:31:21:53:9d:f4:12:00:04:d0:1f:dd:af:2a:03:41:a8:29:
8d:36:eb:28:dc:e2:0a:89:63:25:ff:18:11:7b:4b:d4:65:45:
6d:6e:a1:d3:50:4b:7e:9f:cd:b9:eb:eb:05:4a:48:b7:f9:3c:
39:c5:ba:ad:03:a2:0a:47:66:63:6b:93:c4:4c:d8:d7:08:14:
83:8b:62:66:d0:25:7a:1a:26:76:c3:d3:f6:c2:55:0d:96:44:
c6:02:ff:dc:89:c9:7c:6c:52:25:7c:3d:30:6f:2a:d0:89:55:
1c:da:34:d4:c6:fb:f1:7a:d0:5d:9c:a5:a0:2a:40:e8:7e:31:
b2:b6:57:30:95:72:d8:d3:4b:25:6e:3a:d3:0a:62:22:c2:36:
87:57:6a:54:de:29:e4:97:69:6e:e2:5a:4d:93:d3:44:c7:6c:
31:5b:d3:a8:df:ef:9b:b3:e0:63:59:7a:84:57:25:e2:2f:20:
e3:c4:9b:ca:7e:ea:f5:71:27:a9:4e:fa:94:20:0a:7a:ba:58:
1d:21:22:a8:93:a0:e4:fb:dd:25:be:fa:56:f5:01:fc:59:7f:
8a:c0:96:7c:4e:5d:de:53:92:b5:54:16:e6:f6:20:17:24:45:
61:0a:10:18:8c:5e:9e:16:d7:a5:ff:6f:57:9d:8d:4b:a8:f2:
90:29:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org