Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kCpkcETMpPXgPA6dxE8PINm0ePw.roa
File: kCpkcETMpPXgPA6dxE8PINm0ePw.roa (raw, json)
Hash identifier: M7u8syETpBtoLWDO3yyf5400Lr3v8RQuvmyGnbfE3Zo=
Subject key identifier: 90:2A:64:70:44:CC:A4:F5:E0:3C:0E:9D:C4:4F:0F:20:D9:B4:78:FC
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D7FD96F219F612CCCF449FCD6236
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kCpkcETMpPXgPA6dxE8PINm0ePw.roa
Signing time: Thu 08 Dec 2022 15:04:03 +0000
ROA not before: Thu 08 Dec 2022 15:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.244.0/24 maxlen: 24
188.170.245.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 21
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.80.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.82.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.248.0/24 maxlen: 24
31.173.252.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
188.162.0.0/16 maxlen: 24
178.23.149.0/24 maxlen: 24
178.23.148.0/24 maxlen: 24
178.23.151.0/24 maxlen: 24
178.23.150.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d7:fd:96:f2:19:f6:12:cc:cf:44:9f:cd:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=902a647044cca4f5e03c0e9dc44f0f20d9b478fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:6e:b0:f8:6a:44:d1:c7:25:c1:44:71:48:
1a:47:74:a7:0b:8b:49:bc:46:ad:43:d4:3e:b0:98:
1e:ff:af:b4:ed:19:9e:e5:6e:b7:f7:43:a0:70:29:
d5:c9:f2:ee:fe:52:70:84:1d:3a:25:92:89:87:a8:
d4:c5:79:13:87:12:24:b0:44:12:1f:51:7f:2a:4e:
10:ba:70:b9:3f:0b:f3:41:93:79:2b:81:3d:33:2a:
55:a1:1c:72:52:6a:f1:2e:c4:ce:6d:4d:e7:02:e7:
1e:12:01:38:8e:09:ee:29:dd:66:6c:02:49:7b:1d:
77:4b:bc:77:12:1e:0f:68:28:10:dc:e2:4d:d2:0c:
f8:71:8f:f3:0d:f1:fa:74:ed:56:8b:88:fe:ab:67:
d9:7b:40:8e:62:fc:cf:49:8e:a3:e0:f8:50:5b:61:
d2:05:bd:da:87:e5:ff:33:31:22:a4:f3:cf:4e:3f:
2a:d5:1d:27:11:b6:d8:c4:f4:31:c3:d4:cd:de:00:
35:85:da:0e:5b:73:fe:78:b2:dd:3c:f0:37:4c:c3:
f4:5c:c6:1b:b9:cc:92:56:74:5a:0b:dd:4c:f2:be:
f8:d7:f3:ab:f6:ef:0f:7b:a6:76:6f:c5:cf:38:69:
a8:d0:a5:60:5b:3d:30:5c:c0:5c:c0:60:92:9e:7b:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:64:70:44:CC:A4:F5:E0:3C:0E:9D:C4:4F:0F:20:D9:B4:78:FC
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kCpkcETMpPXgPA6dxE8PINm0ePw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
178.23.144.0/21
178.176.248.0-178.176.253.255
188.162.0.0/16
188.170.244.0/23
188.170.248.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
60:3e:86:90:ea:28:e8:61:63:01:08:4b:4e:bb:c0:a4:d4:f5:
a1:19:21:b4:10:a5:d6:42:cb:d8:5f:5e:1b:07:3c:8c:40:1c:
b3:fe:ef:a4:a0:bb:c0:52:f4:43:bc:3e:0b:6f:22:be:c5:c2:
2a:f6:3c:d1:6f:e1:ba:ce:2b:4c:e4:34:b6:29:11:f4:3b:fd:
90:82:cf:c2:e2:75:8c:12:49:d8:f5:8d:29:4a:93:d2:47:2c:
28:6d:7e:40:38:99:b7:d3:64:60:06:35:0f:e6:44:c3:08:95:
65:8a:58:50:3b:e9:ee:c3:c2:5d:8d:da:35:59:c0:83:3e:37:
c8:a7:a6:5a:23:6e:e7:6b:89:b2:98:68:dd:31:51:8d:38:a6:
6e:34:30:95:7c:73:08:19:7b:63:d5:f8:30:c3:bc:3b:d8:77:
cf:4c:e8:ff:70:a0:3c:9b:70:8e:0a:06:5c:f4:f6:e6:72:ec:
53:7e:7e:c2:70:da:17:89:e1:0a:65:1c:ae:04:82:36:7d:fa:
aa:da:a1:77:33:b8:b7:9a:2e:ef:27:e7:2f:7f:f4:c2:50:3c:
2e:5d:a7:f2:89:50:97:c2:3b:a4:ed:7f:e2:34:14:55:c2:cd:
d8:bb:80:cc:d9:4a:8b:d2:62:b4:9d:ee:e7:97:8e:09:66:3f:
04:a1:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:20 2025 by rpki-client