Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pBliIxxFENcqkqoODTMLxbqFkjU.roa
File: pBliIxxFENcqkqoODTMLxbqFkjU.roa (raw, json)
Hash identifier: 8Aex6bYavSKPGzrJ/q+s05zypvKJOihnlcsrVUXBCPQ=
Subject key identifier: A4:19:62:23:1C:45:10:D7:2A:92:AA:0E:0D:33:0B:C5:BA:85:92:35
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F176C419A2FE870C38D8A59F2257FA54
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pBliIxxFENcqkqoODTMLxbqFkjU.roa
Signing time: Thu 08 Dec 2022 11:20:03 +0000
ROA not before: Thu 08 Dec 2022 11:20:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/21 maxlen: 21
109.74.112.0/20 maxlen: 20
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:76:c4:19:a2:fe:87:0c:38:d8:a5:9f:22:57:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 11:20:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41962231c4510d72a92aa0e0d330bc5ba859235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:23:29:77:ce:7d:e5:f7:60:94:8e:ad:9d:
9b:97:51:c9:ff:30:04:69:62:52:c2:d9:07:50:aa:
73:88:8a:18:68:69:c7:1b:46:93:c1:4a:b3:8e:4c:
f7:2f:a3:01:61:8b:06:2f:49:a5:83:f6:56:61:dc:
53:62:ab:13:04:5b:48:b6:5b:76:57:03:1a:10:8c:
2d:f5:1e:e8:7c:7f:71:aa:33:a5:2f:1f:a1:15:3d:
9d:56:50:68:f4:57:c8:73:a9:fa:4d:90:ab:a6:0c:
3a:8b:ad:09:62:b4:4b:1e:5f:63:a6:93:3a:72:bb:
4e:7e:3b:f3:1d:44:8a:34:dc:b2:a1:9f:79:e4:c4:
8b:99:80:0d:e7:7b:12:3c:da:5c:4a:9f:9c:84:f9:
9b:c4:9d:00:d1:78:f2:10:c0:f9:14:f0:8a:95:86:
99:04:27:88:c3:70:20:65:0a:a9:c7:3f:f3:6d:5e:
1c:62:e5:0e:2d:f3:f9:0c:c4:8d:0a:ce:74:99:69:
25:2a:90:c7:78:75:98:d4:54:fe:39:2c:dc:f9:57:
0e:d2:75:a1:86:18:98:13:d2:50:45:c8:27:8d:ac:
f8:54:ad:bd:37:3b:2f:de:ef:98:10:3c:41:4c:2e:
00:c5:77:74:97:bd:a4:22:d3:71:ed:01:5f:32:e1:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:62:23:1C:45:10:D7:2A:92:AA:0E:0D:33:0B:C5:BA:85:92:35
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pBliIxxFENcqkqoODTMLxbqFkjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
93:02:c6:e9:80:80:de:fe:2b:ea:a3:75:20:44:c8:dc:69:f9:
51:28:8d:42:ae:86:a5:f1:6d:87:67:43:83:a5:a7:d5:e8:2b:
f3:14:7e:0f:54:89:68:c5:58:7a:b1:4f:a1:c8:dc:e4:8b:b5:
3a:af:0a:2c:7d:f5:e7:be:cd:7a:93:2e:a4:38:72:d4:ee:7f:
86:30:97:f2:d0:64:ff:6c:21:ed:4a:0f:f9:36:cc:10:21:e5:
ff:8b:f0:29:dd:78:13:b5:d1:22:cd:80:9d:c0:fb:86:79:1e:
fa:85:29:01:7c:52:52:2d:5c:2a:8f:49:7a:65:15:bb:21:74:
45:f9:6b:47:26:52:e9:a9:5e:a6:12:73:6a:b7:57:48:4b:4e:
9b:6e:08:2b:9d:17:99:f2:29:ec:c4:db:9b:cf:a5:08:d0:95:
0c:06:a7:23:10:db:33:20:ab:8c:0a:7e:c5:2d:cb:14:13:ea:
8f:66:ba:ef:87:e7:96:c9:f0:2c:e9:50:58:05:6d:c5:6a:3a:
28:c8:38:61:b1:f4:d3:9a:5f:98:ae:f8:03:22:20:aa:74:99:
65:70:d6:b8:4c:a6:92:96:91:f3:c3:93:f9:e1:f9:49:24:c3:
f6:21:91:5a:bd:a2:14:64:ba:ac:30:fb:9f:12:96:e4:1d:38:
e4:86:5e:77
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYTxdsQZov6HDDjYpZ8iV/pUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTEyMDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDE5NjIyMzFjNDUxMGQ3MmE5MmFhMGUwZDMzMGJjNWJhODU5MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqUjKXfOfeX3YJSOrZ2bl1HJ/zAE
aWJSwtkHUKpziIoYaGnHG0aTwUqzjkz3L6MBYYsGL0mlg/ZWYdxTYqsTBFtItlt2
VwMaEIwt9R7ofH9xqjOlLx+hFT2dVlBo9FfIc6n6TZCrpgw6i60JYrRLHl9jppM6
crtOfjvzHUSKNNyyoZ955MSLmYAN53sSPNpcSp+chPmbxJ0A0XjyEMD5FPCKlYaZ
BCeIw3AgZQqpxz/zbV4cYuUOLfP5DMSNCs50mWklKpDHeHWY1FT+OSzc+VcO0nWh
hhiYE9JQRcgnjaz4VK29Nzsv3u+YEDxBTC4AxXd0l72kItNx7QFfMuEzdwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFKQZYiMcRRDXKpKqDg0zC8W6hZI1MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvcEJsaUl4eEZFTmNxa3FvT0RUTUx4YnFGa2pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBARt
SnADAwBtvAMEBoDMQAMEA7IXkAMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnk
AwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVg
AwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IB
AQCTAsbpgIDe/ivqo3UgRMjcaflRKI1Croal8W2HZ0ODpafV6CvzFH4PVIloxVh6
sU+hyNzki7U6rwosffXnvs16ky6kOHLU7n+GMJfy0GT/bCHtSg/5NswQIeX/i/Ap
3XgTtdEizYCdwPuGeR76hSkBfFJSLVwqj0l6ZRW7IXRF+WtHJlLpqV6mEnNqt1dI
S06bbggrnReZ8insxNubz6UI0JUMBqcjENszIKuMCn7FLcsUE+qPZrrvh+eWyfAs
6VBYBW3FajooyDhhsfTTml+YrvgDIiCqdJllcNa4TKaSlpHzw5P54flJJMP2IZFa
vaIUZLqsMPufEpbkHTjkhl53
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:40 2025 by rpki-client