Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hwH5J8Mx2okx7FFBQrVuDGiUGf4.roa
File: hwH5J8Mx2okx7FFBQrVuDGiUGf4.roa (raw, json)
Hash identifier: 7tK64cA8xy5t8Afxb6cj/1/3hKjS2TRlRykyf+if4hM=
Subject key identifier: 87:01:F9:27:C3:31:DA:89:31:EC:51:41:42:B5:6E:0C:68:94:19:FE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFC6AFAE720803CD143BE1CADE75B0
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hwH5J8Mx2okx7FFBQrVuDGiUGf4.roa
Signing time: Tue 29 Nov 2022 15:09:41 +0000
ROA not before: Tue 29 Nov 2022 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:c6:af:ae:72:08:03:cd:14:3b:e1:ca:de:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8701f927c331da8931ec514142b56e0c689419fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:3c:b7:5d:28:24:06:66:db:da:ff:7e:28:
2b:1f:71:aa:0e:71:f7:8a:24:cc:8a:cd:65:f0:3c:
4d:73:b3:ad:65:7a:2e:20:7e:62:a3:78:56:f8:2b:
74:61:d0:f1:b7:3f:25:cd:8c:b6:b7:79:3b:f4:ce:
6e:7c:61:ce:58:c6:5e:ae:40:0e:64:44:cb:94:cf:
46:88:96:20:76:4c:d0:a1:9a:d6:5f:70:0a:d4:9d:
e8:f3:09:dd:61:a8:4b:df:66:89:74:c5:2d:a7:0e:
49:c4:9c:06:cd:38:89:87:71:74:8d:d1:5b:96:b9:
01:5e:ab:29:dd:4f:59:18:ac:bb:59:07:05:7f:a8:
33:b7:8e:23:0f:ee:68:94:f4:5d:ef:a6:ce:58:db:
e3:bc:a5:23:6a:b8:40:5a:68:4c:61:bb:29:c5:a1:
be:fa:92:eb:22:99:74:0e:67:99:6d:91:d0:50:1a:
5f:79:0d:96:18:99:58:ad:50:a6:ac:78:d9:f9:15:
b1:9a:52:a6:f9:c2:50:77:f2:85:a9:54:14:dd:63:
cf:41:e4:ec:e5:74:f8:6b:f8:cb:df:ae:b3:22:ac:
81:34:0f:18:13:31:80:92:e6:03:27:07:f7:0d:6f:
cf:65:d4:02:68:c7:50:7d:a6:c3:d1:a1:f8:7a:67:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:F9:27:C3:31:DA:89:31:EC:51:41:42:B5:6E:0C:68:94:19:FE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hwH5J8Mx2okx7FFBQrVuDGiUGf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
94:d3:b4:22:cc:6c:de:82:d1:16:cf:d0:44:8f:1c:09:3b:93:
1c:b2:9e:fe:aa:f8:26:bd:cc:58:5f:ea:a1:ea:96:8f:67:a1:
d2:5e:6b:8a:9b:00:e1:f2:31:64:45:b5:0c:0e:43:93:5e:b1:
78:fa:a2:13:0f:bf:a6:3a:88:6c:b4:81:58:69:ec:b7:eb:cc:
bb:0a:49:eb:11:be:3c:08:fe:e5:c2:f5:dc:79:f4:d9:1c:63:
60:ad:c2:75:e8:45:7f:c4:b0:42:b3:d5:97:b3:9c:ed:7a:0e:
b8:92:03:99:d7:93:2c:90:33:40:65:57:6d:d3:5d:b9:82:37:
6c:da:7c:6d:25:f3:ae:c9:63:6e:08:fa:59:38:db:60:4f:c9:
52:da:f9:f3:27:ba:3c:02:7b:79:61:ca:2e:55:50:f3:39:61:
a6:33:dc:2e:bf:79:20:67:61:fe:a9:3b:cc:5c:9f:f8:fb:f7:
05:9c:ef:79:41:6f:f8:13:d2:c2:78:1d:4a:0a:3e:8c:7b:5f:
a9:59:ad:c5:30:cd:14:b7:16:1f:db:65:73:56:6a:57:83:70:
cf:7c:7f:2a:3b:03:af:5d:7a:cc:89:98:aa:b9:26:94:f1:dd:
90:04:88:8b:47:b0:85:ab:f6:27:40:54:7f:77:22:7a:e1:32:
66:4e:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org