Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/k0ZHcnCii-jVXeUVJNlYeFaGWGo.roa
File: k0ZHcnCii-jVXeUVJNlYeFaGWGo.roa (raw, json)
Hash identifier: aLX417oM3PVo/XU+Bl96P90ZL3m7b6HThHppY26j+no=
Subject key identifier: 93:46:47:72:70:A2:8B:E8:D5:5D:E5:15:24:D9:58:78:56:86:58:6A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01850561567015F816AE152049D4BFC9BB9A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/k0ZHcnCii-jVXeUVJNlYeFaGWGo.roa
Signing time: Mon 12 Dec 2022 08:09:03 +0000
ROA not before: Mon 12 Dec 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/20 maxlen: 20
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
109.188.128.0/17 maxlen: 17
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
188.170.80.0/21 maxlen: 21
78.25.120.0/22 maxlen: 22
188.170.92.0/22 maxlen: 22
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
37.28.160.0/21 maxlen: 21
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
37.28.168.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
83.149.0.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.74.0/24 maxlen: 24
128.204.75.0/24 maxlen: 24
94.25.208.0/22 maxlen: 22
37.29.48.0/21 maxlen: 21
37.29.56.0/21 maxlen: 21
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:56:70:15:f8:16:ae:15:20:49:d4:bf:c9:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9346477270a28be8d55de51524d958785686586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:86:ad:31:59:34:f2:07:d9:64:f8:24:bb:
ce:a5:ac:7b:5f:84:6b:0c:1c:c5:8f:78:4f:aa:83:
cb:e2:a1:ed:af:ae:fa:2e:1a:6d:90:1b:eb:27:cf:
e7:89:f4:fc:22:72:a2:40:d4:1a:0c:50:3b:34:b6:
bf:dc:e8:08:e5:c6:a0:78:31:fc:10:89:7c:59:25:
d5:90:37:c9:7f:0a:5a:d9:bb:e4:f1:22:2d:cd:6d:
ef:ca:36:40:99:39:92:eb:f0:8e:72:5e:d0:9f:03:
0f:9b:03:e9:c9:bf:5e:ba:ee:ab:bc:bd:bf:aa:6f:
6d:78:35:5f:53:f8:b3:b7:30:37:71:7d:bd:11:dc:
d2:ca:2e:f6:90:37:20:8b:51:8d:8d:b1:12:a3:58:
f8:ea:ab:56:30:84:35:18:9b:52:6e:c9:f0:fc:1c:
37:be:63:61:36:38:53:1f:51:6b:7b:9f:13:51:10:
43:43:50:8a:0a:fa:e5:aa:ac:ea:a4:ef:f7:42:16:
8f:c7:17:da:1a:71:27:03:14:30:01:2f:b5:d1:62:
e9:aa:8e:d0:9a:86:8b:a6:b0:dc:c3:46:99:f0:17:
91:90:8b:ce:c6:ef:b4:92:0d:5c:51:09:ec:cb:4e:
9d:d2:ed:ca:ce:06:8b:ee:9f:27:97:57:5e:12:0d:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:46:47:72:70:A2:8B:E8:D5:5D:E5:15:24:D9:58:78:56:86:58:6A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/k0ZHcnCii-jVXeUVJNlYeFaGWGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.74.0/23
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
Signature Algorithm: sha256WithRSAEncryption
83:03:28:e0:92:cf:d3:0f:51:90:1b:b5:1c:80:ef:7d:8a:4a:
94:e5:1d:8c:41:77:7d:d0:e8:da:fa:71:8b:e9:2c:f7:2a:aa:
76:9a:1b:e1:28:4d:ba:fb:f2:7d:1b:cf:46:b6:c5:4b:ce:a6:
30:a9:46:ef:0a:3e:74:aa:74:7c:a7:ce:d0:3a:c6:db:b7:1b:
fa:df:c1:62:aa:aa:77:4e:8b:81:b4:bc:c4:02:cf:85:bb:7f:
08:77:13:5d:4c:d2:91:a0:fb:d7:76:71:a8:47:25:d0:0e:11:
27:66:09:8d:b8:b5:0d:58:2c:0b:81:78:41:91:34:28:26:bd:
90:f7:00:91:da:14:7a:27:1d:5f:48:08:dc:96:e2:64:be:56:
5f:38:f1:6b:29:e3:ee:f5:aa:42:35:cf:11:f4:31:c9:1a:b2:
87:bd:43:ff:3b:df:f8:f1:dc:e8:c8:34:3e:7c:47:a5:46:54:
a3:6f:40:ad:d2:4f:0d:13:95:07:07:15:42:87:34:5c:6f:d7:
a7:d9:8b:c0:5e:b7:63:41:8b:7a:48:ed:2c:3d:c6:a9:b5:a5:
02:f5:6d:42:04:e5:4e:9e:9e:8a:0d:ab:fa:77:0e:10:a8:27:
17:9c:c6:a6:e5:59:92:c5:0c:82:bb:25:48:3b:0b:07:e0:7b:
22:55:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:21 2025 by rpki-client