Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pG7DD5Mad0aEyb-DmPYtixFvfAk.roa
File: pG7DD5Mad0aEyb-DmPYtixFvfAk.roa (raw, json)
Hash identifier: JqoPaX6r/YodylpSiU8+rbVBrLaL63mNQd4osjynSNM=
Subject key identifier: A4:6E:C3:0F:93:1A:77:46:84:C9:BF:83:98:F6:2D:8B:11:6F:7C:09
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF11C51DFF5C1DE54FE4FC1380A1A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pG7DD5Mad0aEyb-DmPYtixFvfAk.roa
Signing time: Mon 05 Dec 2022 12:21:29 +0000
ROA not before: Mon 05 Dec 2022 12:21:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.119.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f1:1c:51:df:f5:c1:de:54:fe:4f:c1:38:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a46ec30f931a774684c9bf8398f62d8b116f7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:dd:9c:52:9a:41:fb:bb:58:e8:4a:9f:b9:
6f:b0:55:ca:dd:8f:10:29:64:02:39:5b:7e:f3:33:
3d:dc:36:91:cb:f5:e5:42:34:a6:62:5c:3c:f2:33:
5f:c9:13:fd:b7:cf:12:57:02:a8:b0:34:5b:b3:c0:
30:04:21:6d:9d:a1:11:2c:df:0c:58:f4:70:de:c3:
8b:69:63:3b:cf:a6:3a:a3:c4:14:ef:f8:54:23:10:
6a:46:4e:b7:4b:20:8b:7c:f5:52:9b:a9:c7:de:b8:
90:79:43:13:3a:1b:e0:1a:e0:e5:68:73:d5:4c:54:
d0:18:d3:35:ff:7c:a4:62:73:25:60:12:cc:c3:db:
b4:2e:c0:9a:3f:41:63:d0:99:f8:1a:bf:b1:40:9c:
95:a9:62:5b:18:f3:2c:5c:34:40:2f:cd:33:2e:4e:
92:c7:80:7c:27:b3:f0:b7:4d:ed:25:6f:03:03:af:
64:2c:ef:77:bd:24:fc:3a:b4:a4:d0:3c:79:aa:dd:
cc:90:6e:ee:40:0c:ab:6b:9c:45:c3:1e:f9:2c:88:
8b:48:26:db:b6:85:2c:85:2d:16:0c:10:af:a7:12:
59:fb:e2:de:9d:00:12:05:9f:5e:23:80:82:a6:df:
ba:72:de:14:c1:88:db:d1:18:b6:82:29:cc:3e:69:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6E:C3:0F:93:1A:77:46:84:C9:BF:83:98:F6:2D:8B:11:6F:7C:09
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pG7DD5Mad0aEyb-DmPYtixFvfAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:09:0d:74:dc:b0:92:4c:b6:95:d3:9f:69:66:f8:00:b6:68:
12:93:76:3e:94:1f:29:4d:b1:68:a2:26:99:5a:80:b3:ef:9e:
57:df:b0:e7:30:64:2e:67:cc:52:0c:72:b1:85:e1:a3:6c:ac:
ab:2e:9d:51:5d:64:6b:c7:09:7d:5a:65:30:e0:5d:a4:45:e7:
d3:64:ef:fa:99:b7:ad:9c:fc:b5:8f:cc:27:b8:9c:67:ee:a4:
47:ab:13:c5:df:ac:d9:fa:19:19:3b:7c:b2:f0:31:58:a3:75:
3e:a2:c5:e4:4e:2f:3e:3b:bc:db:43:5a:8e:a4:96:18:d5:bd:
cc:ad:2a:2e:85:b1:e6:47:11:6d:b5:69:de:65:fd:4a:dd:c4:
6d:f4:e8:7c:f4:3d:31:22:26:e5:98:2f:25:68:02:ee:9e:18:
35:f1:37:47:a3:b9:c4:0a:02:62:43:9e:2f:42:17:d4:f3:a2:
1f:95:ae:a3:1d:c1:6e:f1:72:74:12:be:36:99:bb:76:21:3e:
b9:b1:ab:c6:ea:5e:f8:92:85:78:04:85:3c:bf:d5:34:24:20:
06:cd:1c:f2:77:a3:d6:74:19:4a:85:1f:80:f7:81:81:05:ad:
05:1d:f7:4d:35:47:53:c3:be:5b:6d:40:ab:67:06:5c:15:02:
f4:f6:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:44 2025 by rpki-client