Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pAuEiB_BaILZ9-4SgljG4PSFZd0.roa
File: pAuEiB_BaILZ9-4SgljG4PSFZd0.roa (raw, json)
Hash identifier: qmkFk9l73/Nch50DtU4S9n2Uq42z1hk5Y7iaWqmmSF8=
Subject key identifier: A4:0B:84:88:1F:C1:68:82:D9:F7:EE:12:82:58:C6:E0:F4:85:65:DD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 08770AC3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pAuEiB_BaILZ9-4SgljG4PSFZd0.roa
Signing time: Sat 01 Jan 2022 04:02:33 +0000
ROA not before: Sat 01 Jan 2022 04:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142019267 (0x8770ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a40b84881fc16882d9f7ee128258c6e0f48565dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:5e:10:b3:1a:e7:da:ac:98:3b:58:9c:64:
bd:d8:64:38:cd:76:ab:07:ea:6a:b5:f5:9c:49:68:
fc:eb:bc:10:48:a9:81:77:60:2b:7d:83:8e:7a:dc:
9b:02:eb:b7:b9:00:39:0d:c1:1d:91:32:5a:e0:4c:
d0:b9:13:e7:85:06:80:a1:06:1b:1e:20:c9:4b:62:
23:8b:38:7e:8f:68:c0:0e:b0:48:31:ee:0f:19:43:
7c:0e:c9:f9:dd:38:a0:e6:8b:37:3c:8c:fe:f7:c8:
26:ab:fe:67:43:36:04:0a:21:2a:dc:bb:80:a0:a9:
9e:52:38:76:15:ed:62:88:41:ef:50:b2:96:29:a2:
4d:a3:a0:cd:8d:31:23:6b:95:e8:87:f2:c4:ed:91:
04:ee:24:7f:03:d9:6b:87:7a:a9:67:2a:8a:5b:e1:
d5:46:2b:e1:f4:ed:58:e4:aa:bf:b6:25:b9:20:8b:
f8:e1:c6:6e:fc:98:e7:f4:60:22:3c:73:7e:fc:c7:
43:ca:62:17:54:3e:ca:1c:98:55:59:42:ce:0f:9d:
98:9e:66:e1:a0:eb:f6:da:ca:96:d0:ac:b3:e1:50:
53:93:3f:8d:6a:46:62:72:0e:23:dc:03:66:66:c6:
72:ab:88:cb:d6:27:91:70:9d:be:10:ca:8b:9c:07:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:84:88:1F:C1:68:82:D9:F7:EE:12:82:58:C6:E0:F4:85:65:DD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pAuEiB_BaILZ9-4SgljG4PSFZd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:9b:ad:4f:dc:ef:58:be:a6:e8:3c:ce:38:e0:19:b9:22:5b:
d6:67:a3:e5:a5:21:d9:97:31:d9:e9:10:0b:26:86:c0:f7:be:
3b:ec:3f:ab:6a:ee:9c:43:1d:fe:26:b4:42:13:b3:e8:55:6d:
5e:9d:59:b5:ca:53:9f:e7:2b:cb:f6:3b:05:34:3e:3b:45:3c:
f2:b4:b4:db:05:dd:0f:ad:09:6c:1b:45:56:54:9a:05:e6:fe:
57:7d:32:5b:99:df:a5:aa:76:51:38:f9:46:0d:f2:ab:30:79:
49:31:6f:fe:6a:5c:8e:65:68:be:cc:71:90:c9:42:92:c5:66:
82:44:a0:8c:e5:aa:71:e5:cb:bd:8f:fb:27:9b:20:2c:7f:f9:
f3:d8:3a:d5:0c:88:41:ed:d8:a4:b2:30:f5:2c:d4:1f:4c:f7:
fe:91:3f:09:06:4e:5f:57:3c:c8:59:d9:23:93:8c:5e:0a:0d:
bd:6b:a6:ca:9e:be:b4:58:70:dd:42:a0:48:d9:0b:71:61:4e:
8a:5c:92:34:b9:ae:93:86:53:62:03:80:95:3a:05:aa:97:b0:
fa:03:f4:67:8f:ee:6a:02:05:f4:ce:d6:80:04:18:b4:f7:aa:
53:5c:b7:8a:f2:d1:7b:ad:17:ef:22:21:86:8e:98:3a:fb:12:
96:38:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org