Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wEWEtEQnfYZfUAOy4yXlZFo4zxI.roa
File: wEWEtEQnfYZfUAOy4yXlZFo4zxI.roa (raw, json)
Hash identifier: wdO5AxB2Tm55gvKTc+JEMCS+bAorzKcwb5VAlUdzb2c=
Subject key identifier: C0:45:84:B4:44:27:7D:86:5F:50:03:B2:E3:25:E5:64:5A:38:CF:12
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 08788CE7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wEWEtEQnfYZfUAOy4yXlZFo4zxI.roa
Signing time: Sat 01 Jan 2022 04:02:35 +0000
ROA not before: Sat 01 Jan 2022 04:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142118119 (0x8788ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04584b444277d865f5003b2e325e5645a38cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:66:59:fd:c5:b5:75:72:a9:ad:b8:95:60:
71:8a:79:f9:70:50:7c:c9:31:e4:d5:cc:8c:09:70:
2c:a3:7f:21:b6:20:65:26:3b:06:54:4e:9d:52:1c:
73:93:76:1f:21:37:6a:11:45:24:d1:c4:99:30:09:
11:55:8e:69:5f:89:60:35:85:c3:91:c7:02:ef:03:
2f:7b:14:e1:6c:b2:a8:fa:7d:5c:a6:5c:0e:76:d3:
29:c6:86:f5:64:7c:5d:f0:76:5c:2c:d2:85:e8:16:
48:b5:15:cb:df:3f:8c:ef:59:28:0a:4e:f3:43:03:
ce:e9:29:d8:c4:47:c6:10:16:9f:0e:a5:83:12:10:
09:66:11:e3:a6:dc:8d:86:1d:54:d0:12:45:2a:fc:
78:9a:23:83:3b:83:f9:fc:67:24:53:27:89:91:da:
2b:a6:f9:2a:f6:25:83:bf:61:10:73:5e:fc:4f:d2:
72:2f:51:82:e1:1c:4f:08:ca:b2:e2:62:98:eb:ff:
ce:3f:71:e0:10:b1:ae:3f:e0:fd:50:22:6e:37:d9:
94:07:00:bb:85:30:bc:2e:f5:d3:5e:80:95:c5:68:
aa:63:f6:b5:4e:67:b2:ea:ee:59:58:55:77:cd:c0:
49:7b:75:19:b5:d4:91:4d:f3:69:24:f4:32:b7:6e:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:84:B4:44:27:7D:86:5F:50:03:B2:E3:25:E5:64:5A:38:CF:12
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wEWEtEQnfYZfUAOy4yXlZFo4zxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
20:f1:1a:66:c2:32:ce:1c:bd:ab:50:51:94:cc:01:a9:45:1f:
65:db:14:ca:17:c2:07:cb:4a:43:9f:6a:fd:0b:20:7d:46:28:
7a:c2:ad:e6:89:32:fd:ee:ab:ff:e5:f3:c6:5d:6b:6c:3c:c8:
14:09:10:69:3b:2e:8b:60:4b:eb:85:90:9e:b6:3f:16:35:41:
95:de:59:5f:07:6d:62:4a:a0:c4:70:58:6c:02:74:bb:32:01:
99:df:bb:b2:72:4d:90:aa:8e:e5:c8:c0:e1:56:e8:02:62:da:
bc:b7:b1:94:58:6a:78:77:a5:85:d8:0c:55:63:e9:1b:aa:00:
d6:e8:fe:4f:9d:ab:20:23:18:f1:8b:33:d4:cc:4a:cf:05:5a:
91:08:a4:6c:be:bf:06:f9:d0:bc:ea:4a:c6:ad:1c:12:d7:ad:
df:b5:f4:06:aa:a1:61:01:d5:ba:17:ae:eb:b1:e6:40:f4:e0:
ea:fc:21:a9:c7:a9:9b:90:99:2a:13:c6:36:33:60:1a:fd:51:
fd:86:d3:90:90:0c:e3:52:4f:c6:63:42:be:a2:6f:21:46:36:
90:e5:b7:6c:f5:42:29:ed:ab:b0:e5:e2:61:63:16:fc:79:71:
8d:e6:6e:fc:2a:de:b3:48:c9:c3:7b:7e:be:c8:32:1d:7a:ae:
34:e4:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org