Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vF6i7hhcdCcDjGx_vcbV1fXXBYk.roa
File: vF6i7hhcdCcDjGx_vcbV1fXXBYk.roa (raw, json)
Hash identifier: 5xnyAKDTMC+Lqg9PM3swTOPcOEuoKWPztGgnRF+bQJo=
Subject key identifier: BC:5E:A2:EE:18:5C:74:27:03:8C:6C:7F:BD:C6:D5:D5:F5:D7:05:89
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BED5C961811C19FEC64ED59CB545A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vF6i7hhcdCcDjGx_vcbV1fXXBYk.roa
Signing time: Mon 05 Dec 2022 12:21:28 +0000
ROA not before: Mon 05 Dec 2022 12:21:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
80.253.0.0/20 maxlen: 20
185.210.140.0/22 maxlen: 24
62.64.16.0/20 maxlen: 20
212.119.160.0/19 maxlen: 24
62.64.24.0/21 maxlen: 21
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:ed:5c:96:18:11:c1:9f:ec:64:ed:59:cb:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc5ea2ee185c7427038c6c7fbdc6d5d5f5d70589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:95:59:81:e0:b0:ee:b5:21:73:8c:1b:6c:
ad:93:d2:99:56:8c:d1:1d:9d:f6:d4:c5:05:2d:ad:
b3:d2:a2:24:61:31:44:d2:98:4d:e2:be:b9:b1:7c:
87:71:e1:80:35:ec:86:65:8a:76:29:26:81:f1:47:
85:47:c3:57:7d:2e:23:88:1d:46:59:76:67:d9:1b:
4a:9f:dc:12:38:73:04:cf:96:9f:98:1d:22:1b:b5:
a5:c5:f5:5e:cc:45:f8:c4:5b:80:c4:2b:5b:54:35:
bc:e7:e0:58:10:6a:ea:6e:f7:31:49:73:be:01:9b:
41:72:95:a3:57:67:49:d1:47:67:95:87:5f:43:5c:
49:21:6b:b4:9f:fe:ad:47:a9:b7:a5:f6:e5:e6:54:
c6:04:fb:2a:43:bd:13:0b:de:f5:c7:3f:dc:c5:80:
c1:64:e8:f1:c7:34:41:3f:2a:02:5d:0f:fa:db:e6:
21:d3:c9:95:3d:dd:a9:e9:c6:7c:60:2a:19:01:b5:
0b:a2:80:7d:20:23:45:b2:87:47:4e:ef:2d:45:79:
56:80:41:e8:b7:a4:6b:67:d4:5c:34:89:5a:0e:74:
7e:f1:00:56:b0:eb:87:d5:36:74:f6:a5:58:9b:d6:
a9:a5:79:19:70:e1:30:d8:0e:0f:15:ad:52:bc:1b:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5E:A2:EE:18:5C:74:27:03:8C:6C:7F:BD:C6:D5:D5:F5:D7:05:89
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vF6i7hhcdCcDjGx_vcbV1fXXBYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
14:ee:f4:d6:18:53:78:2f:f5:6d:57:73:f0:e8:9c:3e:23:5d:
5a:ef:b6:fd:d8:15:9e:3f:a1:54:b0:82:d4:02:a8:4b:2e:00:
6e:0c:c4:bf:03:4f:d5:98:b2:f5:0c:c2:c6:5f:ac:9a:08:eb:
c8:b9:12:25:51:6a:b9:b2:5c:e3:61:1f:8e:0f:c7:71:8d:a8:
8d:48:05:97:cc:03:11:b1:71:a1:f6:72:a4:e4:68:34:7c:3b:
e5:7c:2b:58:38:a4:2b:79:cd:02:bd:49:4c:66:b0:59:2a:46:
da:69:e1:5e:48:62:5f:d8:7e:cf:9f:cb:e6:4f:49:10:7d:68:
9b:76:cb:d3:72:e8:ab:1d:86:a8:23:55:e3:ef:e6:58:b1:51:
e0:83:21:da:87:5f:f6:11:bf:5f:a9:95:4b:24:d3:83:84:08:
71:24:45:c1:11:3f:0c:ca:ad:7d:8a:1d:b7:49:f3:4b:8c:e3:
7f:6f:51:cf:07:d2:3f:ab:2d:a7:3b:f3:5c:ab:ca:5e:4e:0b:
0e:75:0c:5b:be:22:f9:b1:38:0c:92:ee:44:24:63:f9:61:78:
60:37:91:88:a8:5b:76:34:03:50:74:26:13:9c:29:59:c5:14:
9f:a6:e8:f1:c4:99:35:c9:06:1b:4b:1c:54:c5:a0:fe:89:3f:
4f:cd:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:23 2025 by rpki-client