Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/htdmzWWuiH8h0JgSbq1Zglp_wUA.roa
File: htdmzWWuiH8h0JgSbq1Zglp_wUA.roa (raw, json)
Hash identifier: LHcKA0mCK9+vzY+nqHcSZRXqmnayHSWqhPUcINiFwQQ=
Subject key identifier: 86:D7:66:CD:65:AE:88:7F:21:D0:98:12:6E:AD:59:82:5A:7F:C1:40
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219DFEAFCDB830D37ACD7F5AE41A3E3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/htdmzWWuiH8h0JgSbq1Zglp_wUA.roa
Signing time: Thu 08 Dec 2022 14:18:12 +0000
ROA not before: Thu 08 Dec 2022 14:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.227.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:df:ea:fc:db:83:0d:37:ac:d7:f5:ae:41:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86d766cd65ae887f21d098126ead59825a7fc140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:36:1e:5b:d4:04:65:fa:a8:8d:ba:0e:9d:
9a:b1:5e:7f:2f:99:1c:0b:11:ed:c2:e8:f2:ef:d6:
27:aa:01:9b:2c:cf:b5:e4:13:8c:83:66:4e:b0:d4:
7c:da:e7:7e:5d:3b:55:8c:ed:f1:ac:3e:d0:3d:1d:
5b:e7:52:5f:96:06:ea:0c:03:6c:c9:22:12:30:d4:
51:8d:03:c7:fb:74:a0:44:bc:59:b9:30:07:25:42:
cc:4d:8b:ff:a8:6d:a9:92:ed:ba:94:11:2c:63:45:
02:dd:6a:d3:cf:18:ee:bd:85:d8:0b:78:f1:a3:da:
ff:b9:d0:1c:61:96:b2:63:c1:d0:e4:bf:7c:dc:f4:
9f:91:1a:81:d5:b7:6a:82:26:b1:94:1a:33:bf:fb:
75:77:d6:e1:2a:43:d5:8c:16:84:44:a1:f2:b1:10:
18:03:1e:14:36:ac:ca:a2:0b:8b:30:13:f2:46:e7:
40:a3:91:d9:62:86:14:61:37:7d:dc:09:81:66:24:
35:41:81:0b:58:5d:cc:fc:d6:64:f1:89:a9:8a:a0:
1e:34:30:16:5b:b9:4c:6a:51:0c:9c:4a:83:c8:51:
ea:cd:99:28:08:84:d9:14:7d:15:81:60:20:86:5d:
4f:a1:aa:47:44:c9:8b:32:02:7b:3a:38:1d:86:95:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:66:CD:65:AE:88:7F:21:D0:98:12:6E:AD:59:82:5A:7F:C1:40
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/htdmzWWuiH8h0JgSbq1Zglp_wUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.227.0-178.176.229.255
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:fb:ca:fe:82:0c:31:33:88:1c:79:6f:75:1b:d1:da:96:1b:
2e:1b:6c:82:1c:a0:ed:f2:ad:1a:ab:5e:c6:03:3a:d5:25:f9:
e0:26:5b:72:ab:0a:b3:70:ba:12:65:f6:2d:bb:46:97:88:c8:
10:57:66:6d:60:0b:91:90:cf:3b:b9:39:fa:33:03:a9:73:b2:
dd:dd:39:38:80:e9:65:ec:7a:ea:49:2f:81:d1:8d:6c:bd:41:
22:6a:da:b5:63:ae:11:42:45:c1:2e:a6:57:9e:eb:fe:02:68:
2d:ca:f8:83:48:e2:2e:35:9d:72:65:b4:4c:d0:e4:11:da:96:
c2:76:83:90:12:09:6c:22:f6:7e:41:4f:6a:8b:23:b6:23:0f:
1e:91:ab:db:8b:6d:d3:b6:c9:b4:99:e6:62:72:94:89:89:d8:
82:ee:e3:79:00:21:e2:df:96:b4:12:72:26:d5:a8:7c:78:28:
37:f1:79:56:4f:1f:9f:76:55:24:0e:cf:69:cd:7b:4c:0e:86:
28:f5:e5:95:33:d4:c3:29:9c:45:54:ea:f1:75:16:c8:59:bb:
54:b4:65:02:ed:bd:53:c9:65:75:b7:6d:d4:34:4c:3f:26:ad:
e0:da:91:37:5e:c5:5e:06:da:c2:01:23:a8:e3:50:c3:49:e1:
3b:76:0b:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:21 2025 by rpki-client