Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kFHfKM8za3qu8_cg88qQ-e_Nv6o.roa
File: kFHfKM8za3qu8_cg88qQ-e_Nv6o.roa (raw, json)
Hash identifier: i2RPuLkvFPfDgckq4nvYy6vZFtVzd/Kn3IgBX94SG+I=
Subject key identifier: 90:51:DF:28:CF:33:6B:7A:AE:F3:F7:20:F3:CA:90:F9:EF:CD:BF:AA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2660DBB57EF050DD01619012F38E3FB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kFHfKM8za3qu8_cg88qQ-e_Nv6o.roa
Signing time: Mon 05 Dec 2022 13:07:29 +0000
ROA not before: Mon 05 Dec 2022 13:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:0d:bb:57:ef:05:0d:d0:16:19:01:2f:38:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9051df28cf336b7aaef3f720f3ca90f9efcdbfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:fd:e0:06:de:c0:07:7c:0a:7b:91:22:67:
98:68:d2:36:30:97:0c:e1:7d:45:0b:c3:dc:38:b1:
3d:06:7d:96:ed:52:26:e9:96:bc:b6:79:3d:d7:58:
59:f6:26:03:05:b1:4c:f9:a2:ac:5f:9d:77:19:cc:
8f:7e:73:a6:00:04:ce:82:e8:da:42:42:c9:96:f1:
bd:54:bb:46:4f:b0:45:3a:6d:aa:fa:36:5a:fa:bf:
e8:e1:1f:31:9f:d4:c7:83:de:18:15:db:d2:64:c1:
f4:c4:0c:7f:56:f6:c5:f3:7d:a7:53:86:71:d6:7c:
22:13:be:3a:2d:fe:fd:b5:c7:b2:fe:4e:b2:10:bf:
e1:16:c4:21:fd:99:8c:e5:d3:3c:c9:01:79:0d:e5:
f9:82:4f:e5:82:94:74:fa:95:1d:d6:2a:f3:bb:27:
a0:f7:a7:04:38:de:26:be:d8:2d:ff:d6:66:91:8c:
d9:85:84:48:3e:93:b0:d5:c5:d6:95:db:c9:28:2f:
03:49:a3:5b:e2:e3:cb:7e:44:d8:ae:b6:9d:1b:af:
37:b2:99:2f:b4:97:93:8d:39:7e:81:e1:87:dc:11:
24:6a:25:c9:46:19:f1:a1:54:05:48:ad:39:fd:f3:
95:91:2f:ca:e0:b4:24:ca:07:0c:f6:a5:10:81:d5:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:DF:28:CF:33:6B:7A:AE:F3:F7:20:F3:CA:90:F9:EF:CD:BF:AA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kFHfKM8za3qu8_cg88qQ-e_Nv6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
89:ea:b8:11:60:95:e5:d2:7d:d8:6c:df:0d:76:b8:d8:e7:c9:
27:46:e5:3b:05:2f:d4:da:ec:e3:35:15:ca:a0:68:39:41:f9:
2b:2a:f0:bc:81:83:ff:15:5f:75:ff:e3:c7:6d:90:e7:b7:16:
a8:01:e2:b1:ee:a5:41:f5:fe:ea:43:bb:53:b6:ff:cb:c6:fa:
79:30:d0:e4:14:5d:b4:32:b7:e0:dc:47:8e:90:35:b8:78:02:
74:c2:84:54:5a:fa:37:ec:b5:21:e9:d7:65:d8:8c:d8:74:8f:
3d:87:22:3b:e1:6e:29:b4:e3:d5:3d:52:5b:df:ab:fb:0f:80:
16:41:52:44:e8:ce:26:32:4b:cc:a4:03:3d:5d:fb:92:c5:9a:
f0:48:b8:2e:1e:82:ae:01:74:02:53:a3:ca:1f:5b:33:f9:17:
b9:63:e8:9a:2f:fc:74:00:c3:64:a2:eb:fd:4d:d9:10:46:4b:
8f:94:f7:e8:48:47:a8:44:5a:d7:f3:02:3f:78:df:d5:cf:cf:
2c:1d:e8:43:85:50:60:06:70:47:0a:09:af:97:d1:2a:fc:34:
34:93:f8:fd:da:60:30:de:1a:b5:d1:35:9e:2e:62:b5:45:c8:
16:a7:0d:a6:bb:99:07:44:57:d3:86:fe:37:37:64:14:82:b6:
70:97:4b:29
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYTiZg27V+8FDdAWGQEvOOP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA1MTMwNzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDUxZGYyOGNmMzM2YjdhYWVmM2Y3MjBmM2NhOTBmOWVmY2RiZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkz94AbewAd8CnuRImeYaNI2MJcM
4X1FC8PcOLE9Bn2W7VIm6Za8tnk911hZ9iYDBbFM+aKsX513GcyPfnOmAATOguja
QkLJlvG9VLtGT7BFOm2q+jZa+r/o4R8xn9THg94YFdvSZMH0xAx/VvbF832nU4Zx
1nwiE746Lf79tcey/k6yEL/hFsQh/ZmM5dM8yQF5DeX5gk/lgpR0+pUd1irzuyeg
96cEON4mvtgt/9ZmkYzZhYRIPpOw1cXWldvJKC8DSaNb4uPLfkTYrradG683spkv
tJeTjTl+geGH3BEkaiXJRhnxoVQFSK05/fOVkS/K4LQkygcM9qUQgdWSjwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFJBR3yjPM2t6rvP3IPPKkPnvzb+qMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEva0ZIZktNOHphM3F1OF9jZzg4cVEtZV9OdjZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAdV
GoADBAVWbcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBt
vAMEBoDMQAMEA7IXkAMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnkAwQFwwWA
AwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVgAwQF1Heg
AwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IBAQCJ6rgR
YJXl0n3YbN8NdrjY58knRuU7BS/U2uzjNRXKoGg5QfkrKvC8gYP/FV91/+PHbZDn
txaoAeKx7qVB9f7qQ7tTtv/Lxvp5MNDkFF20Mrfg3EeOkDW4eAJ0woRUWvo37LUh
6ddl2IzYdI89hyI74W4ptOPVPVJb36v7D4AWQVJE6M4mMkvMpAM9XfuSxZrwSLgu
HoKuAXQCU6PKH1sz+Re5Y+iaL/x0AMNkouv9TdkQRkuPlPfoSEeoRFrX8wI/eN/V
z88sHehDhVBgBnBHCgmvl9Eq/DQ0k/j92mAw3hq10TWeLmK1RcgWpw2mu5kHRFfT
hv43N2QUgrZwl0sp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org