Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uR59PewU-ctOwQkjZMOlHJSaE9M.roa
File: uR59PewU-ctOwQkjZMOlHJSaE9M.roa (raw, json)
Hash identifier: XkGUGaCdaA1B0ZF+HRyshlpviw0l/ufi2z9sdDlQo7g=
Subject key identifier: B9:1E:7D:3D:EC:14:F9:CB:4E:C1:09:23:64:C3:A5:1C:94:9A:13:D3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847658FEB17D6B9243A6F21F39FC7DF69B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uR59PewU-ctOwQkjZMOlHJSaE9M.roa
Signing time: Mon 14 Nov 2022 13:34:14 +0000
ROA not before: Mon 14 Nov 2022 13:34:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
62.64.0.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:58:fe:b1:7d:6b:92:43:a6:f2:1f:39:fc:7d:f6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b91e7d3dec14f9cb4ec1092364c3a51c949a13d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:3c:93:6d:3d:93:c2:e0:6c:e4:5e:c9:73:
c4:a5:d4:f7:86:c1:b5:68:b9:21:82:6d:f5:59:f3:
44:6e:47:0f:73:c3:32:c0:18:31:e2:82:a2:73:d6:
37:dd:d0:7e:b5:c5:bd:bb:3e:7c:10:17:d1:8c:f9:
0d:a2:3b:38:ba:85:90:bc:ea:3f:42:1b:00:05:d7:
0a:13:a7:d4:e2:0f:20:fb:c2:ba:c8:dd:74:c9:3c:
84:9f:56:fd:96:29:c7:6c:e3:46:6b:2a:b5:35:23:
c4:6b:09:8b:aa:d3:08:e0:96:14:a4:b0:16:9d:6b:
5d:9c:ff:03:98:e0:2d:b7:37:60:31:cd:28:d8:de:
f3:a9:09:30:cd:47:95:97:1d:12:8d:b0:22:ad:c5:
f8:6e:e7:2f:2d:cd:ac:2b:59:96:bf:2c:cb:87:ca:
5c:8e:65:4f:46:5c:73:d3:db:f8:69:73:67:c4:4f:
78:bd:33:1b:15:cf:22:f2:fc:60:c9:a3:42:f6:67:
f6:75:91:10:c1:54:68:b6:b6:92:79:d7:dc:ad:06:
ab:9c:91:df:c2:ab:5a:b3:6d:1f:c8:02:b2:81:76:
8d:d7:bf:a5:6c:d7:b2:59:68:ae:eb:38:af:57:f9:
dd:27:ca:9e:33:41:6b:61:d1:f3:77:9b:a8:44:01:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:7D:3D:EC:14:F9:CB:4E:C1:09:23:64:C3:A5:1C:94:9A:13:D3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uR59PewU-ctOwQkjZMOlHJSaE9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
15:fb:1d:23:b4:08:a4:49:aa:a9:a7:46:65:54:1d:5b:33:39:
22:f4:4c:65:20:09:2d:eb:74:ed:56:bc:3a:ee:81:3c:2e:4e:
23:05:8e:50:df:ad:0c:6e:f3:7d:65:75:8d:d2:86:82:08:c3:
15:97:cf:ef:dd:41:1c:7e:f7:22:e0:f1:30:73:62:f1:9c:e9:
85:02:5c:84:b0:cc:3c:e5:0d:84:71:2d:fb:1f:3c:44:ac:32:
9b:1b:f1:d8:a4:15:5a:b1:f8:66:a2:51:b2:dc:1d:09:02:86:
4e:c4:9e:cb:7d:19:44:5a:ff:2b:d9:50:d1:5e:f6:21:dc:83:
92:32:b2:f0:0c:33:0f:e9:fc:19:36:e9:2d:b0:9c:4d:14:c8:
73:6a:5a:42:03:94:0c:b5:b4:6d:3e:59:c1:b3:ec:49:f5:8b:
5f:bd:8f:1f:52:ab:17:05:bc:38:ab:42:f0:46:c8:a4:41:33:
95:93:7f:31:3d:3a:63:7f:65:28:a1:2b:5d:4c:9e:00:98:81:
c8:c0:38:99:c5:2f:12:4e:ee:0d:61:05:0f:e3:c7:04:47:e5:
83:0c:80:05:a1:4e:6f:1a:44:6b:87:ca:6c:5f:93:7e:58:72:
b7:f6:90:d4:39:d5:85:67:17:64:9b:9b:d4:3d:02:ff:55:d0:
db:e6:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:57 2025 by rpki-client