Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vxtL60fGRH6hXi2-gi2_ZcWmHEc.roa
File: vxtL60fGRH6hXi2-gi2_ZcWmHEc.roa (raw, json)
Hash identifier: MbE8j/X/0bJBds41VQ3TXVk2azc981bvxGK/L53WMqg=
Subject key identifier: BF:1B:4B:EB:47:C6:44:7E:A1:5E:2D:BE:82:2D:BF:65:C5:A6:1C:47
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018414C10B9B828D17E182B3F33C043AAB03
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vxtL60fGRH6hXi2-gi2_ZcWmHEc.roa
Signing time: Wed 26 Oct 2022 14:45:06 +0000
ROA not before: Wed 26 Oct 2022 14:45:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
128.204.64.0/18 maxlen: 24
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
81.3.128.0/18 maxlen: 18
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:c1:0b:9b:82:8d:17:e1:82:b3:f3:3c:04:3a:ab:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 14:45:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf1b4beb47c6447ea15e2dbe822dbf65c5a61c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:0a:84:4f:cf:57:44:ad:be:4e:d2:10:92:
9c:b8:9d:a1:b3:36:89:5f:23:72:be:3d:3c:bc:03:
52:05:19:80:e1:97:75:21:6e:86:49:3c:aa:5b:f5:
c8:f5:13:b3:20:dd:2b:6a:78:e1:3c:65:0d:0b:dc:
7b:0d:7f:d2:30:82:c5:68:16:1c:68:16:97:28:0e:
05:ed:fb:34:92:68:a1:6d:49:ac:c4:41:ec:7d:af:
c4:af:e6:68:8c:64:c3:c0:34:ec:5d:c9:0a:bb:c6:
67:3d:57:82:9d:65:db:73:a3:3a:12:96:1c:d8:30:
de:5e:24:1b:93:7e:99:61:d5:87:82:ad:1f:99:aa:
5b:1f:0e:17:03:f9:3a:59:49:f5:59:13:ec:4c:40:
51:81:b3:70:e7:1e:66:5a:de:f5:0d:54:d6:ee:4d:
c2:8f:0e:7d:96:96:42:fc:e5:1a:30:2b:47:95:e1:
4e:f9:fe:5a:c7:b3:51:19:23:88:8a:ea:4f:9f:69:
a7:65:b4:80:1f:e8:df:25:06:51:64:52:fe:bd:db:
15:2b:00:a0:36:b3:ab:cb:f0:4e:11:b4:0b:86:7d:
b5:71:5f:d9:f8:eb:77:e9:bf:86:aa:29:a7:fd:69:
44:ea:8f:8c:59:4e:4e:a9:60:a2:39:85:76:20:1e:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:4B:EB:47:C6:44:7E:A1:5E:2D:BE:82:2D:BF:65:C5:A6:1C:47
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/vxtL60fGRH6hXi2-gi2_ZcWmHEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.47.192.0/18
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
77:a0:c3:9d:6c:9f:97:93:5b:d7:54:5d:35:17:b1:79:ee:0e:
f8:30:19:cc:67:dc:d5:1e:42:28:94:6d:b4:0f:dd:b1:bb:76:
48:3d:f4:8c:73:62:3a:db:4d:81:0f:fe:d2:d0:61:57:1c:1e:
41:41:b3:7a:14:59:22:ef:69:8f:bc:fa:22:86:26:af:b8:58:
bf:b5:3b:cf:b7:33:ed:99:b3:0a:ec:3d:6b:29:44:9e:0e:5e:
20:90:01:bf:f2:04:c2:8c:be:72:d1:21:f9:8d:b5:7a:a0:2b:
7b:43:42:aa:7e:92:f9:87:06:ef:14:29:0e:8c:ee:46:c1:ea:
1e:e2:0b:b1:eb:e7:eb:ac:e3:8d:ae:3e:b9:04:8b:bb:1a:f3:
8b:8c:50:83:ac:e6:cf:24:77:37:39:45:57:c9:70:a7:ee:32:
03:12:14:8b:30:e7:54:3c:4e:b1:24:90:a2:c4:b1:b0:92:e8:
26:de:fd:48:cf:7d:f3:b9:68:25:5e:f8:d3:e1:b3:2d:7a:11:
fe:c3:99:72:99:fa:39:1d:cc:e8:a9:14:0c:15:52:9d:44:83:
5c:93:71:51:59:f4:72:4d:15:7b:87:fe:c3:2e:a9:7b:2e:bf:
7c:9f:41:e1:0b:10:ae:9b:15:9d:b9:6b:b1:74:ca:ce:18:56:
c8:76:44:7c
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgISAYQUwQubgo0X4YKz8zwEOqsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI2MTQ0NTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjFiNGJlYjQ3YzY0NDdlYTE1ZTJkYmU4MjJkYmY2NWM1YTYxYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotcKhE/PV0Stvk7SEJKcuJ2hszaJ
XyNyvj08vANSBRmA4Zd1IW6GSTyqW/XI9ROzIN0ranjhPGUNC9x7DX/SMILFaBYc
aBaXKA4F7fs0kmihbUmsxEHsfa/Er+ZojGTDwDTsXckKu8ZnPVeCnWXbc6M6EpYc
2DDeXiQbk36ZYdWHgq0fmapbHw4XA/k6WUn1WRPsTEBRgbNw5x5mWt71DVTW7k3C
jw59lpZC/OUaMCtHleFO+f5ax7NRGSOIiupPn2mnZbSAH+jfJQZRZFL+vdsVKwCg
NrOry/BOEbQLhn21cV/Z+Ot36b+Gqimn/WlE6o+MWU5OqWCiOYV2IB7tVwIDAQAB
o4IDKzCCAycwHQYDVR0OBBYEFL8bS+tHxkR+oV4tvoItv2XFphxHMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvdnh0TDYwZkdSSDZoWGkyLWdpMl9aY1dtSEVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPwYIKwYBBQUHAQcBAf8EggEuMIIBKjCCASYEAgABMIIB
HgMEBSUcoAMEByUdAAMEAy4dwAMEBi4vwAMEBC7lgAMEAy7oyAMEBT5AAAMEBU3p
oAMEBk4ZQAMEAk4pZAMEA0+rCAMEBFD3sAMEBlEDgAMEBFEYgAMEBlKMQAMEBVLE
QAMEBlOpwAMEBVPewAMEB1PlgAMEB1UagAMEBVZtwAMEAlvB1AMEB12ZgAMEB14Z
gAMEB1+JAAMEBG1KcAMEBm18QAMDAG28AwQGgMxAAwQDsheQAwQCuQMgAwQCudKM
AwQDvF6oAwMAvKIDBALByeQDBAXDBYADBAXDEGADBAHDTnQDBADDlW8DBAXD5kAD
BAXUDqADBAXULEADBAXURWADBAXUd6ADBAXVmqADBAXVqCADBAbV80ADBATZc1Aw
DQYJKoZIhvcNAQELBQADggEBAHegw51sn5eTW9dUXTUXsXnuDvgwGcxn3NUeQiiU
bbQP3bG7dkg99IxzYjrbTYEP/tLQYVccHkFBs3oUWSLvaY+8+iKGJq+4WL+1O8+3
M+2ZswrsPWspRJ4OXiCQAb/yBMKMvnLRIfmNtXqgK3tDQqp+kvmHBu8UKQ6M7kbB
6h7iC7Hr5+us442uPrkEi7sa84uMUIOs5s8kdzc5RVfJcKfuMgMSFIsw51Q8TrEk
kKLEsbCS6Cbe/UjPffO5aCVe+NPhsy16Ef7DmXKZ+jkdzOipFAwVUp1Eg1yTcVFZ
9HJNFXuH/sMuqXsuv3yfQeELEK6bFZ25a7F0ys4YVsh2RHw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:31:24 2025 by rpki-client