Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ufvFh5EbNa1ZOKEEFgxDmsR8pAg.roa
File: ufvFh5EbNa1ZOKEEFgxDmsR8pAg.roa (raw, json)
Hash identifier: DNNIevYAlk+tC6zwrs551OaCo4vYiS5YneIgMKBS4Ns=
Subject key identifier: B9:FB:C5:87:91:1B:35:AD:59:38:A1:04:16:0C:43:9A:C4:7C:A4:08
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D29A76BF2D51077F1A4EEAD8758DD513
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ufvFh5EbNa1ZOKEEFgxDmsR8pAg.roa
Signing time: Fri 02 Dec 2022 11:30:49 +0000
ROA not before: Fri 02 Dec 2022 11:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24767
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:76:bf:2d:51:07:7f:1a:4e:ea:d8:75:8d:d5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 11:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9fbc587911b35ad5938a104160c439ac47ca408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:7e:f0:99:18:08:cd:16:d7:9a:13:f1:45:
45:82:99:73:14:8e:c5:5e:e0:b9:04:d9:9f:65:fe:
2f:00:8b:36:78:8e:36:19:e4:13:1a:02:51:31:4d:
c2:86:f9:6e:7b:66:de:ae:51:77:45:79:33:08:8c:
60:dd:3f:c3:15:e0:3d:59:3a:c7:33:84:57:e1:b0:
b4:3c:69:85:fc:7d:1e:1b:b2:ab:4e:67:14:83:20:
82:5c:b7:b5:f0:d7:a4:3b:43:9f:1d:b7:03:0f:ce:
12:6f:95:6f:72:24:38:8f:c5:20:d0:e7:6d:88:e8:
e5:fa:cf:fd:00:d9:c9:c2:ac:63:ed:8d:2a:58:0f:
1c:de:c5:c4:8b:a3:e7:1f:6a:fc:15:7d:53:04:96:
27:09:63:af:fc:5b:ca:74:df:dd:52:57:c7:aa:23:
61:5e:13:b1:0d:f6:70:f1:b7:6a:80:06:94:1c:79:
ae:37:6e:92:7d:73:04:48:e0:c0:f4:4f:50:6a:f4:
a4:e1:40:e0:25:38:0d:8d:05:67:3e:e8:ba:d8:5b:
7c:8d:2d:29:74:1d:50:73:d9:ad:c2:4f:29:ab:a2:
37:13:18:7e:6f:ad:ca:b8:cf:03:6b:ee:f9:5c:b1:
d1:77:0a:e6:3a:2d:f9:2c:e4:09:c6:94:70:30:dd:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:C5:87:91:1B:35:AD:59:38:A1:04:16:0C:43:9A:C4:7C:A4:08
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ufvFh5EbNa1ZOKEEFgxDmsR8pAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:47:17:51:8d:30:a6:b4:7e:82:1b:a1:f0:5b:e8:27:a0:41:
3d:e7:4c:d2:07:c7:ca:33:85:db:a9:ef:35:c0:f7:f1:3c:c1:
92:9a:7b:ce:b6:df:e8:c8:a3:8a:87:c8:84:da:50:13:a6:ec:
05:a0:d4:90:1c:14:f2:57:69:b8:fd:92:4f:3f:0c:7e:bb:e9:
0f:b8:56:ad:7b:90:b5:3f:1e:bd:fb:a9:87:8f:bb:7a:49:aa:
ea:db:a7:87:69:51:57:d4:87:e8:ca:84:df:31:30:e1:5b:1d:
35:7c:db:38:82:58:89:5d:5a:65:b3:3a:90:4b:a7:d9:81:34:
57:39:9e:db:13:02:e6:24:d0:a2:c9:5a:33:cc:57:24:26:ac:
f7:48:43:ad:ed:8e:51:fa:bc:4f:ac:c8:b5:9d:f9:d0:08:85:
26:15:b8:68:4b:b9:83:aa:cd:b9:aa:ad:b9:9b:e5:26:b0:6c:
cf:b3:c0:77:a3:4a:84:30:41:e7:b5:f2:d1:8b:d2:0e:ab:f1:
16:8e:07:61:54:a5:e4:ac:fd:ed:ab:5f:44:42:19:3f:11:19:
e9:b4:fe:3d:ab:74:6d:f7:f0:74:98:43:1c:f0:b8:2f:8c:24:
ff:a5:ff:89:2d:94:0a:f0:71:7d:b0:19:8f:2d:07:8b:45:54:
33:68:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org