Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wvi6kNSKRIu3R7oWfhE7AFgcO4g.roa
File: wvi6kNSKRIu3R7oWfhE7AFgcO4g.roa (raw, json)
Hash identifier: OZRuV2EIUU73b5eHWGxtPDFzZXk+URtbHruB4r1zA/k=
Subject key identifier: C2:F8:BA:90:D4:8A:44:8B:B7:47:BA:16:7E:11:3B:00:58:1C:3B:88
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EA4EB1183AD438D1E8A2A3B288DEE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wvi6kNSKRIu3R7oWfhE7AFgcO4g.roa
Signing time: Fri 02 Dec 2022 13:37:43 +0000
ROA not before: Fri 02 Dec 2022 13:37:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
178.176.225.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:a4:eb:11:83:ad:43:8d:1e:8a:2a:3b:28:8d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2f8ba90d48a448bb747ba167e113b00581c3b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:ef:7a:11:2e:cb:39:1b:66:f5:09:51:61:
72:c8:2b:98:00:3c:c2:4f:e0:38:21:65:10:82:8c:
b8:a4:35:9c:f8:b5:cf:8d:0d:3b:1d:c2:be:4f:f4:
bc:ee:74:52:f3:cc:95:0a:48:16:1d:0d:e8:79:0c:
3c:6e:6e:17:7f:9c:a2:ef:05:99:09:a5:99:28:c7:
2e:e4:84:21:ac:06:f7:25:bd:84:89:e7:c2:31:7f:
c9:0a:be:24:01:f7:3d:c9:8c:a1:fc:eb:f1:35:38:
b0:fc:ea:c2:37:c5:d2:76:21:e6:df:01:fe:a6:c8:
c5:70:b7:e3:4c:f1:ef:31:66:e1:6c:8e:b3:37:a5:
31:ca:52:cf:fc:96:19:a0:4d:f4:8d:c7:7b:2b:1f:
1b:1c:c3:bc:c3:97:9c:44:ae:e2:e5:a0:bf:2f:03:
b4:f6:3c:33:2c:a9:a4:38:37:79:b7:72:a8:08:48:
fd:b9:3d:0d:da:b2:ae:ad:ef:5a:54:13:ef:61:9b:
3b:6f:34:1d:af:01:b5:6f:39:f8:0d:e2:e5:31:4b:
86:76:11:90:77:63:77:03:4d:42:39:bb:8e:22:a6:
31:ac:d9:30:92:05:01:0a:8b:24:61:f9:eb:81:42:
75:46:e5:39:0e:fc:55:ad:d0:74:e0:53:4f:dd:3f:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:BA:90:D4:8A:44:8B:B7:47:BA:16:7E:11:3B:00:58:1C:3B:88
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wvi6kNSKRIu3R7oWfhE7AFgcO4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
28:17:28:1d:98:76:fc:e5:27:47:29:3d:bf:45:40:94:8a:79:
1b:f7:a2:c6:88:57:a8:41:73:a5:49:8e:6f:b6:3b:b1:85:30:
b7:bf:68:6d:55:59:fc:bb:3e:b5:46:38:2f:cb:b6:db:0b:13:
a0:ff:40:d8:8f:82:5e:6a:92:eb:88:49:e8:c3:1e:11:bc:27:
b4:70:13:df:cf:9b:c0:41:03:c2:51:89:3e:e7:5e:ce:1f:3b:
74:0f:72:59:1f:88:2e:e3:3b:0e:f8:34:61:65:17:69:7a:fb:
e5:97:63:0e:5c:fd:5b:6e:3e:1b:70:97:c3:19:7f:04:22:77:
54:77:4d:c5:48:84:ad:23:e7:89:30:36:66:23:53:f7:36:39:
d0:a9:ca:71:04:66:99:4a:4e:2c:d2:00:ae:74:61:57:e8:60:
fb:ad:82:34:e2:5a:1e:87:78:42:13:0e:c4:5e:3a:c0:98:24:
67:6b:b1:26:05:81:df:1e:4d:4e:f7:9e:01:05:2b:98:00:36:
ae:10:42:87:3c:12:53:54:03:44:1c:4e:54:a9:1e:1d:35:23:
f0:67:13:98:98:ec:1a:2d:83:60:cb:2b:a5:3e:49:08:ce:7a:
c6:cb:e0:3c:4d:42:c1:68:01:e1:a7:1d:e9:21:d9:14:3a:89:
3b:39:b7:64
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAYTTDqTrEYOtQ40eiio7KI3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAyMTMzNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmY4YmE5MGQ0OGE0NDhiYjc0N2JhMTY3ZTExM2IwMDU4MWMzYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD7vehEuyzkbZvUJUWFyyCuYADzC
T+A4IWUQgoy4pDWc+LXPjQ07HcK+T/S87nRS88yVCkgWHQ3oeQw8bm4Xf5yi7wWZ
CaWZKMcu5IQhrAb3Jb2EiefCMX/JCr4kAfc9yYyh/OvxNTiw/OrCN8XSdiHm3wH+
psjFcLfjTPHvMWbhbI6zN6UxylLP/JYZoE30jcd7Kx8bHMO8w5ecRK7i5aC/LwO0
9jwzLKmkODd5t3KoCEj9uT0N2rKure9aVBPvYZs7bzQdrwG1bzn4DeLlMUuGdhGQ
d2N3A01CObuOIqYxrNkwkgUBCoskYfnrgUJ1RuU5DvxVrdB04FNP3T/gsQIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFML4upDUikSLt0e6Fn4ROwBYHDuIMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvd3ZpNmtOU0tSSXUzUjdvV2ZoRTdBRmdjTzRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBARQ
97ADBARRGIADBAZTqcADBAVT3sADBAdT5YADBAdVGoADBAVWbcADBAJbwdQDBAdd
mYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkDAMAwQF
srDgAwQAsrDiAwQCuQMgAwQCudKMAwQDvF6oAwMAvKIDBALByeQDBAXDBYADBAXD
EGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6ADBAXV
mqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQADggEBACgXKB2Ydvzl
J0cpPb9FQJSKeRv3osaIV6hBc6VJjm+2O7GFMLe/aG1VWfy7PrVGOC/LttsLE6D/
QNiPgl5qkuuISejDHhG8J7RwE9/Pm8BBA8JRiT7nXs4fO3QPclkfiC7jOw74NGFl
F2l6++WXYw5c/VtuPhtwl8MZfwQid1R3TcVIhK0j54kwNmYjU/c2OdCpynEEZplK
TizSAK50YVfoYPutgjTiWh6HeEITDsReOsCYJGdrsSYFgd8eTU73ngEFK5gANq4Q
Qoc8ElNUA0QcTlSpHh01I/BnE5iY7Botg2DLK6U+SQjOesbL4DxNQsFoAeGnHekh
2RQ6iTs5t2Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org