Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xmbR8pYLtIWG_zXnr1wvTjeIaow.roa
File: xmbR8pYLtIWG_zXnr1wvTjeIaow.roa (raw, json)
Hash identifier: DyDRrPh3f1NLL+E+/06hq4pyuJlMeDWKtUU5C72yUkw=
Subject key identifier: C6:66:D1:F2:96:0B:B4:85:86:FF:35:E7:AF:5C:2F:4E:37:88:6A:8C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 087B406E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xmbR8pYLtIWG_zXnr1wvTjeIaow.roa
Signing time: Sat 01 Jan 2022 04:02:36 +0000
ROA not before: Sat 01 Jan 2022 04:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142295150 (0x87b406e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c666d1f2960bb48586ff35e7af5c2f4e37886a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:a7:d1:c2:44:82:87:05:11:42:b4:44:66:
74:75:bf:bf:81:4e:f3:db:c8:93:f9:ee:ff:5a:1f:
e6:cf:7a:0c:e0:9c:d9:93:83:17:c3:82:c3:dc:e9:
bf:50:3f:1b:8b:57:b5:b8:45:31:ae:d2:b4:4d:14:
8a:91:7a:65:34:c7:88:d8:03:a0:c4:bb:7f:f5:b0:
c0:1a:29:28:2a:77:c4:ab:ac:40:9e:49:f4:3f:bc:
04:53:73:13:27:65:72:e1:94:16:ba:48:d2:42:49:
c7:ff:f6:98:81:72:69:30:85:ff:65:1c:53:54:40:
40:75:56:09:3c:97:f2:18:56:ef:59:4e:3a:57:c1:
04:43:ac:eb:b0:d4:30:9d:d8:12:33:6b:bd:8a:c0:
50:d3:31:08:ab:40:f3:0e:4b:11:f0:8e:a9:1f:26:
b4:d5:67:54:5c:df:b1:8b:88:69:8e:b9:84:4d:79:
99:12:55:b4:8d:46:37:9f:92:64:92:73:84:9c:dd:
fd:56:ca:bf:b5:56:cd:c6:12:05:7f:e2:2d:0d:3a:
de:bc:8b:ca:2f:ff:3a:45:9a:2b:3c:44:e4:56:c9:
1c:1d:f5:cf:fe:36:ee:15:f7:25:32:1a:ee:08:eb:
47:8b:0b:c8:2e:7a:4b:8f:5c:6f:1c:dc:2e:5a:a2:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:D1:F2:96:0B:B4:85:86:FF:35:E7:AF:5C:2F:4E:37:88:6A:8C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xmbR8pYLtIWG_zXnr1wvTjeIaow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
79:b7:f4:5c:d3:92:64:89:35:bc:23:44:6f:8f:6f:97:99:34:
7d:b9:81:c5:c8:a2:5f:61:28:d6:44:9f:8c:54:72:dc:6e:8b:
3f:8c:41:37:43:ce:1a:2f:19:54:5b:07:45:47:71:22:d2:61:
60:2a:5e:25:55:e0:1c:fb:36:17:81:f3:41:9c:e3:40:cf:58:
94:33:2b:d6:2c:d3:0d:2a:7e:d5:ec:60:f9:a8:b8:cd:b7:1b:
83:5a:de:86:93:ea:30:69:a9:8a:01:a3:7c:c4:57:a9:09:40:
6a:5c:f0:4e:5d:cb:54:eb:f9:c8:76:c0:62:e4:72:ad:70:54:
8d:57:c5:d4:a9:08:4a:06:8c:6f:5c:48:98:0f:2f:61:fd:ae:
94:23:71:d9:6e:58:79:c9:51:a0:e5:ec:d0:99:22:48:9b:ba:
e0:99:b6:e2:15:03:01:15:26:be:5b:92:b5:fb:7c:8c:38:7a:
e8:a0:aa:46:ec:03:e2:f7:6b:ca:52:2d:8e:78:4d:51:9e:fc:
70:80:84:e9:9d:e9:87:88:cb:b6:06:fe:82:e6:b9:2a:ab:db:
2d:37:06:12:ff:2d:a8:55:05:02:6e:94:b8:4e:00:1b:48:d4:
2c:bd:97:3e:55:19:24:f3:ab:e4:57:ba:f7:03:2a:55:02:ca:
00:7d:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:32 2025 by rpki-client