Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xcq1Bu72vyKRbqhlpM5DdsnccVw.roa
File: xcq1Bu72vyKRbqhlpM5DdsnccVw.roa (raw, json)
Hash identifier: rNHk7aOFdot3eebhY2GXSVhDK9JOQuRxj5cfAbxi2R0=
Subject key identifier: C5:CA:B5:06:EE:F6:BF:22:91:6E:A8:65:A4:CE:43:76:C9:DC:71:5C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3DF4161AA25B8BB91366AD80E31AF
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xcq1Bu72vyKRbqhlpM5DdsnccVw.roa
Signing time: Wed 30 Nov 2022 09:17:42 +0000
ROA not before: Wed 30 Nov 2022 09:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:df:41:61:aa:25:b8:bb:91:36:6a:d8:0e:31:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5cab506eef6bf22916ea865a4ce4376c9dc715c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:c2:eb:2a:ae:25:0f:67:23:d7:31:4f:ec:
53:df:43:d2:7d:a6:d8:6d:56:eb:f6:5a:6c:39:81:
ef:e7:57:86:8e:64:c9:68:69:27:f1:d1:2b:88:2e:
d5:b6:97:df:65:dc:d0:3e:9e:90:ef:b5:6b:02:1b:
d2:ad:64:eb:3e:81:05:bb:b4:ff:98:07:cb:35:41:
61:da:0a:9c:a2:e2:29:90:57:57:16:b3:82:cd:9e:
eb:40:f4:3a:91:5e:6f:e2:db:de:5f:1b:00:8a:39:
aa:95:76:dc:cf:52:b5:0b:9a:5d:fa:c4:48:fe:1f:
04:60:20:91:42:22:3d:a0:ce:30:9f:86:62:d6:3c:
c8:c3:46:44:a3:fd:d4:74:49:78:4b:ec:d1:d5:5e:
f0:14:16:b3:5b:9e:6e:db:19:aa:0d:42:35:68:e1:
be:46:4b:a2:23:09:bd:51:7b:03:38:58:a2:e8:da:
4a:90:93:e6:3e:7e:a4:62:da:f3:e1:cb:1b:db:a6:
97:4d:77:db:37:b8:76:c3:4c:a4:15:fe:11:6e:53:
96:ac:ea:c4:e0:8d:ba:04:44:23:cf:e7:e4:28:21:
cc:aa:f4:e8:52:f4:de:fc:3f:4c:33:72:cf:43:ff:
f9:77:7b:c2:1a:5b:a2:5d:6a:f8:f0:1a:35:a5:c0:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:B5:06:EE:F6:BF:22:91:6E:A8:65:A4:CE:43:76:C9:DC:71:5C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xcq1Bu72vyKRbqhlpM5DdsnccVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:d9:f3:51:c7:b5:b8:d6:05:d9:d1:fd:11:80:3b:50:2e:ac:
61:59:15:92:5d:75:c0:f1:a0:77:be:b6:ce:24:c1:0e:7d:f0:
0c:f6:7d:50:ca:1a:13:31:0d:9a:11:10:4a:3a:ad:ee:a4:11:
d1:93:c2:59:d9:99:dc:25:38:21:dd:ae:43:e3:ee:41:80:a9:
d7:51:3d:a4:95:69:5c:70:18:8e:8f:19:b5:c6:0c:1a:14:43:
e0:72:54:9b:21:a9:8c:b1:9c:0a:15:39:21:3a:65:20:7c:bf:
bf:4e:79:f7:f9:4a:2f:1d:6a:9a:9f:72:cb:db:72:be:80:17:
6c:d3:b7:35:d3:eb:5d:8d:00:47:6b:f0:83:a7:a5:89:7c:3b:
15:e9:d7:24:06:4a:08:d4:23:41:e0:a4:49:41:c9:52:3b:3c:
9f:ab:8c:4f:00:8f:22:3f:04:df:2f:e6:ae:0d:1a:9c:c0:8b:
5e:fd:56:16:f5:78:07:b4:be:6c:9e:4e:48:10:4f:e4:80:ea:
ca:1e:93:14:39:6b:1a:54:b6:64:5b:95:cd:7e:28:c9:3a:18:
15:49:cd:1e:f6:d4:a3:c8:55:89:6f:1c:75:e3:3e:14:ca:b1:
c0:84:0c:09:e4:2f:ed:94:c9:29:a2:cb:3e:f1:0c:7a:e6:e0:
46:75:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org