Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rf8oYKpUMFSepLQ2-Sg2HXvFn3A.roa
File: rf8oYKpUMFSepLQ2-Sg2HXvFn3A.roa (raw, json)
Hash identifier: N6iaGyTlIifqtcVl0f+yuZsaKs6hzCNZiuTgVybqDn0=
Subject key identifier: AD:FF:28:60:AA:54:30:54:9E:A4:B4:36:F9:28:36:1D:7B:C5:9F:70
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184765904E7DD419283C0D50A1525CCF47A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rf8oYKpUMFSepLQ2-Sg2HXvFn3A.roa
Signing time: Mon 14 Nov 2022 13:34:16 +0000
ROA not before: Mon 14 Nov 2022 13:34:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:04:e7:dd:41:92:83:c0:d5:0a:15:25:cc:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adff2860aa5430549ea4b436f928361d7bc59f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:c2:c5:bc:0d:90:c9:78:9e:4b:0d:d5:02:
5c:47:b0:22:ea:40:6a:51:bd:a2:27:55:eb:fe:60:
f3:27:a3:56:02:51:dd:f5:0f:11:da:b2:38:87:1d:
a1:2d:54:34:bc:9c:08:06:43:93:f6:2c:66:00:02:
24:64:e3:68:c9:75:09:61:7d:16:1f:15:a0:c3:9c:
be:48:8a:80:a4:0d:9f:85:73:56:a5:0b:bd:d7:08:
ac:9f:c8:a4:1b:89:46:d2:81:d7:67:74:1f:b7:4b:
26:ec:3d:bd:6b:d7:bb:b1:82:15:3c:29:99:f2:ff:
0d:69:19:c6:38:ee:7f:7d:af:f8:57:d3:6e:49:73:
4e:07:c6:18:df:ba:49:dc:c2:50:18:c8:fb:e4:7e:
82:05:e6:32:23:77:33:ff:34:80:d2:c6:13:17:95:
2b:24:0e:01:20:ba:44:a9:f4:35:28:89:4a:03:96:
dc:14:7d:99:66:d8:52:16:a9:d2:29:92:93:a1:c4:
a4:6a:c7:78:64:a1:f1:0b:5c:e2:dd:8a:80:7e:73:
c4:b9:41:d5:32:d4:62:7e:35:7c:c4:9a:cd:a4:8b:
6f:b2:78:10:5f:98:98:cf:f9:62:b2:7e:eb:ab:80:
82:49:f2:5c:90:2a:7a:4b:94:0e:19:f1:7a:e9:48:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:28:60:AA:54:30:54:9E:A4:B4:36:F9:28:36:1D:7B:C5:9F:70
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rf8oYKpUMFSepLQ2-Sg2HXvFn3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:b6:cb:eb:7e:6e:ae:d6:af:6b:10:a4:e8:1a:5f:b6:1a:8b:
d6:5e:1d:25:5f:98:87:0c:b2:c8:58:e7:cf:ef:b5:98:ef:15:
46:9a:63:35:a6:4d:04:b3:f2:97:5a:be:8b:05:e5:6a:9d:a2:
39:71:5a:14:bf:8a:64:6c:90:b9:80:05:51:07:6c:04:d2:c9:
31:fe:03:ff:91:09:3c:8c:4f:f9:89:f2:a1:16:d1:32:43:d3:
83:1c:1e:9a:3f:7d:c5:6b:2b:c9:fa:78:d3:80:d4:39:93:84:
f8:7e:1c:41:98:ed:4d:f7:ce:c9:0a:6e:88:a5:6d:01:56:18:
28:98:a9:d4:7a:cb:61:29:97:a7:45:be:ba:57:53:fd:87:a8:
bf:f9:16:77:d2:59:64:10:ad:2c:dd:15:66:d8:db:ab:54:b1:
3a:bd:85:c6:7b:56:7b:3e:55:b7:eb:1f:43:63:70:6b:57:6d:
c5:49:8a:6f:23:54:e5:8e:36:c9:69:00:08:97:88:55:8f:08:
8a:a8:a7:b0:4e:31:b5:4e:ae:d7:99:b9:f8:26:5f:4b:21:78:
56:e3:9a:c2:14:b5:c5:ff:6e:d7:f7:8b:00:bf:97:cf:7a:f5:
70:19:35:bb:0f:57:52:ca:e5:d1:bf:3e:4c:67:d8:90:34:c3:
6e:14:87:f2
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAYR2WQTn3UGSg8DVChUlzPR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTE0MTMzNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGZmMjg2MGFhNTQzMDU0OWVhNGI0MzZmOTI4MzYxZDdiYzU5ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfXCxbwNkMl4nksN1QJcR7Ai6kBq
Ub2iJ1Xr/mDzJ6NWAlHd9Q8R2rI4hx2hLVQ0vJwIBkOT9ixmAAIkZONoyXUJYX0W
HxWgw5y+SIqApA2fhXNWpQu91wisn8ikG4lG0oHXZ3Qft0sm7D29a9e7sYIVPCmZ
8v8NaRnGOO5/fa/4V9NuSXNOB8YY37pJ3MJQGMj75H6CBeYyI3cz/zSA0sYTF5Ur
JA4BILpEqfQ1KIlKA5bcFH2ZZthSFqnSKZKTocSkasd4ZKHxC1zi3YqAfnPEuUHV
MtRifjV8xJrNpItvsngQX5iYz/lisn7rq4CCSfJckCp6S5QOGfF66UgvqQIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFK3/KGCqVDBUnqS0NvkoNh17xZ9wMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvcmY4b1lLcFVNRlNlcExRMi1TZzJIWHZGbjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQD
LujIAwQFPkAAAwQFTemgAwQGThlAAwQCTilkAwQDT6sIAwQEUPewAwQEURiAAwQG
U6nAAwQFU97AAwQHU+WAAwQHVRqAAwQFVm3AAwQCW8HUAwQHXZmAAwQHXhmAAwQH
X4kAAwQEbUpwAwQGbXxAAwMAbbwDBAaAzEADBAOyF5ADBAK5AyADBAK50owDBAO8
XqgDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQO
oAMEBdQsQAMEBdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkq
hkiG9w0BAQsFAAOCAQEADrbL635urtavaxCk6BpfthqL1l4dJV+YhwyyyFjnz++1
mO8VRppjNaZNBLPyl1q+iwXlap2iOXFaFL+KZGyQuYAFUQdsBNLJMf4D/5EJPIxP
+YnyoRbRMkPTgxwemj99xWsryfp404DUOZOE+H4cQZjtTffOyQpuiKVtAVYYKJip
1HrLYSmXp0W+uldT/Yeov/kWd9JZZBCtLN0VZtjbq1SxOr2FxntWez5Vt+sfQ2Nw
a1dtxUmKbyNU5Y42yWkACJeIVY8IiqinsE4xtU6u15m5+CZfSyF4VuOawhS1xf9u
1/eLAL+Xz3r1cBk1uw9XUsrl0b8+TGfYkDTDbhSH8g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:21 2025 by rpki-client