Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lrbpYdaRBm6JcbR9m58BG8J9B_c.roa
File: lrbpYdaRBm6JcbR9m58BG8J9B_c.roa (raw, json)
Hash identifier: uijlhSSUHbWS09atuoHTVPPq9kMEu66YC3TrDMSotNs=
Subject key identifier: 96:B6:E9:61:D6:91:06:6E:89:71:B4:7D:9B:9F:01:1B:C2:7D:07:F7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1271A99FA6892208D6167A797D34400
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lrbpYdaRBm6JcbR9m58BG8J9B_c.roa
Signing time: Thu 08 Dec 2022 09:53:02 +0000
ROA not before: Thu 08 Dec 2022 09:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.227.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:27:1a:99:fa:68:92:20:8d:61:67:a7:97:d3:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 09:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96b6e961d691066e8971b47d9b9f011bc27d07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:a0:20:dc:2c:92:40:b8:42:17:31:a0:bb:
38:87:25:dd:45:1f:d4:2a:48:e8:5f:13:6c:ed:69:
7f:84:4c:a4:4f:65:6d:00:6c:88:e4:7e:41:27:68:
78:74:22:68:46:8c:5f:5a:50:7c:75:7e:cb:09:3f:
82:ba:66:a1:e4:dc:27:4c:db:c9:fc:2b:b7:d8:6c:
40:de:f0:85:7c:e9:70:e8:80:62:07:59:36:65:0f:
b9:37:47:90:b3:6a:a4:33:75:55:2b:23:5b:95:b4:
93:b7:e3:95:bd:8b:4c:f5:d0:f7:54:52:e6:7c:cd:
5e:75:9d:0d:24:5f:d2:f6:a5:38:20:65:72:24:75:
cd:04:49:ff:de:0f:81:8d:97:03:26:c3:b8:3e:5a:
98:ea:f3:58:9e:fd:7b:55:be:94:22:17:97:81:12:
2c:87:98:95:2b:14:d3:03:09:e7:c1:6a:69:02:d9:
94:49:02:ca:2e:9b:0e:15:a7:70:43:cb:11:7a:ce:
0f:de:97:f4:35:ff:bd:25:21:8a:34:74:11:ac:ce:
80:ca:af:0e:4e:5e:2d:92:62:b9:4f:99:51:fe:20:
e4:14:83:8f:c1:d1:1f:d2:69:e9:d1:54:66:fb:01:
60:bc:4a:ed:2b:fc:b9:90:7b:76:f0:de:c8:f5:dd:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B6:E9:61:D6:91:06:6E:89:71:B4:7D:9B:9F:01:1B:C2:7D:07:F7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lrbpYdaRBm6JcbR9m58BG8J9B_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.227.0-178.176.229.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:8d:e1:f1:32:8c:32:d4:63:50:88:8b:16:36:b6:96:5a:3f:
1f:c6:f5:f4:6c:7e:76:de:20:67:b6:0c:4a:24:cf:5a:78:00:
34:0c:b7:71:51:ee:fe:4e:2c:b8:68:47:2d:19:0a:15:86:31:
2a:ce:7b:47:12:29:5a:97:ec:13:39:ae:5c:bf:58:65:9e:90:
64:be:8f:89:bc:df:3a:00:3d:27:20:bf:94:4a:83:5c:74:cf:
b8:7a:0b:c3:f4:e5:bd:66:9a:23:d6:5a:e6:e7:eb:7a:79:84:
10:e5:ef:2b:6e:0b:7a:81:ac:22:93:01:5e:83:df:95:2a:85:
d8:3b:e2:36:b2:e9:18:f8:36:6d:f3:77:cb:85:cc:6e:24:b1:
f9:be:4a:6e:04:cf:ea:bb:83:53:98:76:b8:35:a3:6f:4c:f1:
96:e1:f0:1a:7e:fc:b9:48:50:fd:f6:1b:66:66:1a:a8:f4:38:
f9:17:8d:52:90:9c:b3:45:30:2a:f2:e5:2d:ba:90:c2:f3:d4:
7a:d5:d9:bc:6e:1c:20:a6:11:3f:2a:72:4e:fc:ff:7b:b6:07:
5f:ba:8e:14:4d:65:ec:2f:e3:6b:55:48:d2:56:a1:d3:6b:97:
56:09:f5:c1:fd:ea:7c:84:9f:a5:1c:91:bc:d1:33:d8:8e:bf:
97:17:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:07 2025 by rpki-client