Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sHvfAFdluHiFDGq8Mh3_KUhBA6g.roa
File: sHvfAFdluHiFDGq8Mh3_KUhBA6g.roa (raw, json)
Hash identifier: G7z4f8OImaoweYGnq92MLok1Z1UVWy3iE0Zmix6jrw8=
Subject key identifier: B0:7B:DF:00:57:65:B8:78:85:0C:6A:BC:32:1D:FF:29:48:41:03:A8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2AF52DEDFFB4155DED05A5E90F64B5F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sHvfAFdluHiFDGq8Mh3_KUhBA6g.roa
Signing time: Mon 05 Dec 2022 14:27:31 +0000
ROA not before: Mon 05 Dec 2022 14:27:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:af:52:de:df:fb:41:55:de:d0:5a:5e:90:f6:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 14:27:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b07bdf005765b878850c6abc321dff29484103a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:66:8f:dd:f7:ca:31:23:e4:85:06:80:02:
07:f5:06:25:2a:6d:7e:ba:ef:28:23:c7:21:71:f4:
74:8e:c8:b2:a0:db:d7:ec:c9:51:23:2b:76:ca:01:
d2:36:b7:ac:1f:26:1d:4f:4d:14:8f:d4:e2:4f:b8:
09:33:54:39:51:6c:fa:e5:33:74:a4:c8:20:89:24:
88:45:7d:f0:d0:dc:82:30:f3:b0:7f:65:25:cc:7e:
6d:ba:2b:e0:e2:3b:39:78:4a:56:aa:5f:fa:9b:f8:
0d:07:27:fd:08:40:ad:41:54:a6:ac:8f:6b:74:10:
cc:e7:55:fe:53:26:17:04:43:bc:d9:ce:50:50:c0:
1a:2e:fd:c7:50:58:bd:e0:98:a8:07:f2:e2:12:cc:
92:73:ab:59:f3:e1:dd:40:29:91:89:c7:0f:62:4d:
48:2f:62:65:96:19:eb:bb:e2:82:86:bf:23:2a:12:
b5:e7:ab:c7:3f:eb:37:0c:78:c7:26:1e:9a:d2:db:
ec:97:a3:e6:32:cb:2f:c5:ad:91:49:01:3e:9c:88:
f5:1b:42:77:db:fe:7e:ed:e9:52:36:62:81:64:28:
74:bb:3b:aa:0c:57:61:65:8c:de:52:31:15:58:fa:
c4:6e:3f:7e:22:2f:73:e7:e8:cb:44:e7:98:49:af:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7B:DF:00:57:65:B8:78:85:0C:6A:BC:32:1D:FF:29:48:41:03:A8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/sHvfAFdluHiFDGq8Mh3_KUhBA6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
82:d8:43:52:5b:0b:bf:b1:12:c7:31:0e:65:e1:e4:46:0d:01:
ab:5e:c6:4d:ab:68:a8:e9:d4:49:d0:d9:1e:90:4f:85:b9:ba:
f0:e9:66:33:0f:30:a2:43:5b:d5:3d:43:31:a7:32:d2:62:42:
6f:9d:88:c0:c3:78:bb:23:41:57:ea:bf:6e:fa:b9:43:5d:4c:
b0:fe:54:0a:af:51:ad:37:c7:ec:6b:d9:73:7a:72:51:57:0e:
02:5f:71:6e:0a:30:ad:16:ef:fc:6e:1e:cd:e3:5c:9d:30:90:
b7:05:ba:30:b6:15:7d:18:49:95:fb:e4:41:0d:b2:da:8e:72:
d9:00:20:f1:15:56:6c:da:79:46:85:d4:36:1c:31:ec:73:34:
a1:02:1e:b1:f9:42:f8:3e:46:8c:ed:c6:b1:15:86:0f:75:23:
95:b6:24:ef:8b:1b:f1:8f:52:13:6d:2f:b5:2e:9b:06:5c:1c:
fd:c7:ef:b9:5a:a4:97:3f:9e:be:16:88:a2:30:48:f2:f1:e9:
85:de:30:ba:32:83:11:cf:0f:0f:31:c4:9f:48:6b:97:98:96:
ff:8c:a5:06:4d:bb:94:1c:f7:32:41:3c:e8:71:82:05:5e:a4:
ad:dc:b0:1c:52:af:d0:ec:8c:1d:95:b7:0a:89:8f:1b:66:e0:
cb:fa:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:26 2025 by rpki-client