Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iHFDziNUfx6OfsdOC8mbfL2FIbo.roa
File: iHFDziNUfx6OfsdOC8mbfL2FIbo.roa (raw, json)
Hash identifier: k/wr/7hlwJYNeDppCUniGHjj1gqk4v12kND5dHXWe0c=
Subject key identifier: 88:71:43:CE:23:54:7F:1E:8E:7E:C7:4E:0B:C9:9B:7C:BD:85:21:BA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841423F70DFFE09FC250AB41796E7E7015
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iHFDziNUfx6OfsdOC8mbfL2FIbo.roa
Signing time: Wed 26 Oct 2022 11:53:32 +0000
ROA not before: Wed 26 Oct 2022 11:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.109.120.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
78.109.121.0/24 maxlen: 24
31.173.119.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:23:f7:0d:ff:e0:9f:c2:50:ab:41:79:6e:7e:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 11:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=887143ce23547f1e8e7ec74e0bc99b7cbd8521ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:8b:4f:bf:08:45:8e:1f:db:3d:c9:34:36:
1e:fc:d1:36:b9:aa:32:ae:51:86:46:64:10:ab:04:
87:89:6b:02:77:83:78:04:d6:34:7d:9e:66:20:67:
dc:98:c7:d7:27:e6:b8:b9:3b:c1:16:f4:e6:b3:35:
2a:c9:ed:47:3e:ec:81:14:ab:fa:fc:68:fc:5d:dd:
a5:ad:66:3a:83:0c:5e:76:29:89:7f:ae:cb:2f:44:
d2:ce:1b:dc:b0:56:34:a2:2e:87:a0:64:a0:8e:9c:
e5:ec:08:f3:59:9a:48:8b:ae:40:a7:ee:b5:88:74:
3b:26:4a:a0:62:9a:c4:7d:67:87:49:77:a9:63:fb:
e8:ac:b6:5a:c7:24:51:0d:5f:c7:c1:05:65:1c:b4:
a4:32:ef:61:e8:2d:b1:26:4d:e3:60:93:8e:84:37:
a2:37:43:02:2b:6e:49:65:08:bb:fc:c2:d5:6a:93:
27:a2:d2:38:14:65:33:7b:68:e9:1e:18:a3:f0:d7:
74:73:ca:09:68:83:40:77:c7:54:a6:24:89:a4:cd:
8b:e8:61:5c:c3:40:54:bc:2e:75:fa:c1:fe:9e:f1:
78:ce:00:ee:ee:e6:b2:fc:e4:9a:b5:ae:cb:66:51:
9b:f6:b5:a2:46:2b:78:ae:6d:70:fc:dd:6e:46:09:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:43:CE:23:54:7F:1E:8E:7E:C7:4E:0B:C9:9B:7C:BD:85:21:BA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iHFDziNUfx6OfsdOC8mbfL2FIbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
78.109.120.0/23
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
53:cd:3c:c1:ae:90:8f:55:af:e7:de:c2:07:40:af:47:c6:f1:
73:45:71:79:6c:19:f7:fa:be:b7:5b:65:43:21:c1:b4:8c:ca:
15:55:bc:5a:da:a2:33:a7:cb:fd:9f:6b:c7:15:cd:63:12:68:
31:80:1c:e7:2d:48:0b:4f:08:9a:62:66:7e:34:ec:c3:bf:61:
1e:f1:e5:23:e4:2e:5d:ae:4c:18:6c:be:12:15:7e:52:a2:79:
f5:87:1e:7f:22:58:99:87:d7:1b:32:a8:4f:5e:f0:37:28:9f:
36:c8:b7:8f:1d:d8:36:21:f0:4b:d5:e8:6e:b5:3c:26:da:23:
b7:f1:07:59:89:73:63:98:40:fa:a4:61:7c:85:5a:32:16:8f:
ec:2f:b1:74:74:04:b1:29:7f:d5:1e:23:d1:97:c8:1a:90:c4:
7c:a0:87:86:47:4e:43:28:41:9a:14:3c:b1:9f:43:af:35:09:
9a:f6:4d:66:24:db:b8:e2:30:5b:ab:c5:85:60:0c:9f:34:f0:
26:ba:59:b0:5a:85:1c:d3:1d:12:0d:c9:f4:82:3f:ae:47:7e:
7b:d3:65:5f:ab:2a:98:89:3c:fb:c6:d4:a1:a8:87:4f:e0:51:
cc:39:5e:35:f9:81:f4:0d:ae:6d:0f:a2:2c:c4:f6:a7:48:87:
05:f1:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:35 2024 by rpki-client on console-ams.rpki-client.org