Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n88fd4zp_Hiq6Fdu0Mq1re-1o18.roa
File: n88fd4zp_Hiq6Fdu0Mq1re-1o18.roa (raw, json)
Hash identifier: Ctxx/AwiR65FmXjnuwxeASliWXhvJMZ2+ixYC16DzwM=
Subject key identifier: 9F:CF:1F:77:8C:E9:FC:78:AA:E8:57:6E:D0:CA:B5:AD:EF:B5:A3:5F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BEFB9CB62C50605F4D667F1BC0C92
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n88fd4zp_Hiq6Fdu0Mq1re-1o18.roa
Signing time: Mon 05 Dec 2022 12:21:29 +0000
ROA not before: Mon 05 Dec 2022 12:21:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24767
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:ef:b9:cb:62:c5:06:05:f4:d6:67:f1:bc:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fcf1f778ce9fc78aae8576ed0cab5adefb5a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:5f:c2:37:96:80:f1:78:81:7d:c9:8d:1a:
03:82:2a:49:48:fd:36:da:8d:6a:ae:9c:12:f1:c1:
f2:07:37:1a:cb:4d:b4:7f:0b:c9:29:6b:cc:b2:13:
99:fb:94:a2:a5:5c:e6:91:9e:19:84:be:1d:79:94:
59:ef:0a:9b:bf:03:23:50:a1:77:b6:73:a1:e7:b1:
67:9e:ef:e9:52:0d:64:99:c1:02:e1:82:80:17:d7:
a7:11:e2:86:37:d6:25:b1:10:95:e8:8b:be:0f:00:
33:5c:5c:5f:56:81:ca:f7:da:69:4b:b2:03:f3:7f:
11:b4:c6:2f:9f:d6:b4:a1:84:59:06:52:59:79:6b:
86:f0:af:8c:10:4b:0b:86:8e:27:23:5c:6d:43:e9:
62:30:e3:01:ea:66:9a:a4:68:d5:ef:67:a7:40:65:
e7:b0:f2:71:6e:b4:14:6a:6d:8e:de:64:1c:d9:4e:
5b:93:f7:60:e7:0c:da:4d:71:ad:1e:e1:b5:c0:f7:
09:a3:bd:de:b1:3b:42:e2:f2:07:95:9d:cf:7a:3f:
16:f9:34:23:ca:6d:2b:ae:17:01:5e:89:0b:29:04:
3a:64:3c:26:b0:d8:43:24:66:85:05:3b:ec:8f:cc:
77:6f:5e:9b:8d:df:6b:fb:66:d1:8f:f7:d7:86:2a:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:1F:77:8C:E9:FC:78:AA:E8:57:6E:D0:CA:B5:AD:EF:B5:A3:5F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n88fd4zp_Hiq6Fdu0Mq1re-1o18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
28:b0:fa:96:36:2d:76:0f:55:d9:88:8d:3d:56:02:f5:03:9e:
ee:4d:9f:5c:54:9a:33:ca:a4:17:d7:dd:0e:47:c8:8a:1b:dd:
91:98:d9:6e:3a:c4:17:fc:46:0a:bc:f7:fd:e5:6b:4d:8c:8b:
83:12:6f:a0:a4:51:25:8b:c2:ae:0f:75:98:33:31:8e:26:08:
4f:6f:47:96:92:e9:01:24:69:e3:52:ce:1b:52:a0:2f:4b:7d:
61:ea:44:1f:8b:1b:7c:f1:89:76:ea:f3:92:bb:ec:47:5c:07:
63:77:35:cc:ac:1a:d5:67:7f:47:af:16:19:04:d2:5b:a9:1c:
b6:ba:1e:67:28:41:f3:21:19:f7:9f:78:01:29:ef:e8:a2:6a:
59:ea:b6:f2:10:11:38:a1:2d:49:91:74:84:63:39:97:32:16:
a1:c8:85:1e:a1:f6:52:2d:c9:a8:4f:d3:30:90:05:28:c8:c9:
65:7a:11:58:4b:ee:ba:89:e3:b6:3c:08:86:c5:e1:72:95:df:
77:54:a3:2b:c6:62:0a:1c:e5:c2:0b:d2:8b:89:5b:cd:63:fe:
0b:4f:52:55:25:4e:24:54:c0:35:2f:86:19:b5:f3:e4:74:6d:
f4:12:bb:ea:f7:10:79:06:3e:6f:da:f1:5f:8d:96:ce:73:7f:
5a:be:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org