Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mKZFCyx7_0JWZNlnwtBL4smfU50.roa
File: mKZFCyx7_0JWZNlnwtBL4smfU50.roa (raw, json)
Hash identifier: QL1n+Gk8j710zfk/vseSltl07ESsaE8kLDyO+0IiExE=
Subject key identifier: 98:A6:45:0B:2C:7B:FF:42:56:64:D9:67:C2:D0:4B:E2:C9:9F:53:9D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184765903D0B886C66F7639D4F9B28A03A1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mKZFCyx7_0JWZNlnwtBL4smfU50.roa
Signing time: Mon 14 Nov 2022 13:34:15 +0000
ROA not before: Mon 14 Nov 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
78.25.64.0/18 maxlen: 24
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:03:d0:b8:86:c6:6f:76:39:d4:f9:b2:8a:03:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98a6450b2c7bff425664d967c2d04be2c99f539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:9f:c1:22:d5:b6:66:3f:c4:97:85:c4:cb:
68:dd:af:fa:e2:6b:b6:b9:f3:01:ba:27:fc:c3:f9:
0b:d0:34:66:eb:dc:ea:d7:9e:30:b6:4b:ad:23:16:
cc:25:31:8c:0d:2d:5b:ea:45:dc:22:db:7a:a2:c2:
4d:93:bc:c3:5d:4f:5a:8a:f4:67:ab:2a:02:a8:20:
5d:24:73:11:88:d2:4d:cf:fd:4c:36:7a:84:fb:c4:
79:e5:3c:b6:07:fe:dc:ed:bb:34:c5:66:68:3d:0d:
22:b5:02:88:d5:cf:d9:5d:bd:8f:8b:5a:a2:a5:23:
7a:b2:4c:1a:ac:ad:99:bc:22:27:69:20:76:0e:47:
1c:66:0c:b6:eb:96:b3:f2:34:19:30:ac:e6:7a:1f:
b0:e5:8c:9b:43:e5:cc:5b:1e:19:b5:d1:74:e3:53:
9b:f4:f9:4a:1c:61:69:dd:2f:43:2a:cf:0a:c8:ef:
f8:9d:fa:98:28:7b:93:fe:fb:00:6e:42:fb:bf:fd:
f1:b1:6b:d5:35:a0:08:20:58:54:95:ca:9e:4d:b4:
4f:77:f5:dc:2d:e0:7e:71:6d:ef:7e:2a:16:ac:51:
e0:d5:d3:34:83:43:a9:51:f9:c0:dc:dc:81:db:e9:
03:f2:22:41:10:8c:6b:f6:3d:da:d0:f6:83:12:0a:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:45:0B:2C:7B:FF:42:56:64:D9:67:C2:D0:4B:E2:C9:9F:53:9D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mKZFCyx7_0JWZNlnwtBL4smfU50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.0.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:c6:dc:3a:c8:f4:88:82:6c:22:59:35:9d:6d:27:7d:38:76:
1b:1f:82:43:16:f3:a8:e7:d9:e1:a7:71:6d:d4:8d:04:d5:ff:
2b:51:b0:49:73:8b:47:24:0d:bd:5f:6c:15:3a:de:79:a5:b4:
46:02:15:b4:0f:b9:7d:5f:5b:7c:0b:ee:34:7c:ac:ca:29:8f:
7e:03:b8:d4:4c:a1:3a:97:79:a0:ce:9c:59:a1:48:95:a9:f3:
82:91:34:a8:e8:8e:58:cf:8b:74:fa:1a:2d:a6:51:20:cd:d8:
0b:66:91:58:8e:3f:cf:fe:69:c7:88:fe:59:76:3b:c1:43:96:
c9:b3:33:a4:2a:13:97:cd:c7:d1:93:2d:9b:0d:ab:f2:77:41:
1e:f5:b8:e6:3e:50:89:18:94:97:12:e6:d8:30:e2:8d:0e:f8:
e6:51:f3:b2:9c:55:38:d0:f2:bc:ad:6c:f2:99:4f:0a:26:ec:
19:b8:e7:30:00:9b:2e:7e:c8:94:54:28:d1:ac:34:e6:19:f3:
e5:0c:8c:57:68:89:b1:23:20:6f:95:b5:a8:a2:53:0b:42:05:
a0:c4:0e:73:b0:0e:fb:e6:47:93:a5:b7:14:99:2e:d3:e5:51:
49:42:f8:b0:b7:2e:27:9d:90:78:94:ed:ee:39:40:11:70:6d:
09:70:be:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:29 2025 by rpki-client