Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0_OPfBGJ1o3NLjUZzGbN_wUq1ds.roa
File: 0_OPfBGJ1o3NLjUZzGbN_wUq1ds.roa (raw, json)
Hash identifier: vBSBl7sJxnrupv2/I6RAKHgpXUtAu8/WVYZUu3t9R8w=
Subject key identifier: D3:F3:8F:7C:11:89:D6:8D:CD:2E:35:19:CC:66:CD:FF:05:2A:D5:DB
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D6EE0692EDDC12C114B46401C6051BD
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0_OPfBGJ1o3NLjUZzGbN_wUq1ds.roa
Signing time: Mon 31 Oct 2022 09:45:51 +0000
ROA not before: Mon 31 Oct 2022 09:45:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
31.173.184.0/24 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.190.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.224.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.129.0/24 maxlen: 24
31.173.130.0/23 maxlen: 23
31.173.128.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.160.0/22 maxlen: 22
31.173.169.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.170.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
109.106.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
31.173.234.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
31.173.0.0/16 maxlen: 16
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
79.171.208.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.253.0/24 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.96.0/24 maxlen: 24
178.178.104.0/24 maxlen: 24
178.178.100.0/23 maxlen: 23
178.178.102.0/23 maxlen: 23
178.178.106.0/24 maxlen: 24
178.178.108.0/24 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
178.178.127.0/24 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/16 maxlen: 16
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
188.170.128.0/24 maxlen: 24
188.170.131.0/24 maxlen: 24
188.170.130.0/24 maxlen: 24
188.170.132.0/24 maxlen: 24
188.170.129.0/24 maxlen: 24
37.28.160.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.58.0/24 maxlen: 24
188.170.136.0/24 maxlen: 24
188.170.139.0/24 maxlen: 24
188.170.137.0/24 maxlen: 24
188.170.144.0/24 maxlen: 24
188.170.141.0/24 maxlen: 24
188.170.140.0/24 maxlen: 24
188.170.142.0/24 maxlen: 24
188.170.145.0/24 maxlen: 24
188.170.152.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.147.0/24 maxlen: 24
188.170.146.0/24 maxlen: 24
188.170.149.0/24 maxlen: 24
188.170.148.0/24 maxlen: 24
188.170.151.0/24 maxlen: 24
188.170.150.0/24 maxlen: 24
188.170.155.0/24 maxlen: 24
188.170.154.0/24 maxlen: 24
62.89.194.0/24 maxlen: 24
188.170.157.0/24 maxlen: 24
188.170.159.0/24 maxlen: 24
188.170.153.0/24 maxlen: 24
188.170.160.0/24 maxlen: 24
188.170.163.0/24 maxlen: 24
188.170.162.0/24 maxlen: 24
188.170.165.0/24 maxlen: 24
188.170.164.0/24 maxlen: 24
188.170.166.0/24 maxlen: 24
188.170.161.0/24 maxlen: 24
188.170.167.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.16.0/22 maxlen: 22
83.149.16.0/24 maxlen: 24
83.149.17.0/24 maxlen: 24
83.149.21.0/24 maxlen: 24
83.149.18.0/24 maxlen: 24
83.149.19.0/24 maxlen: 24
83.149.22.0/23 maxlen: 23
83.149.20.0/22 maxlen: 22
83.149.20.0/24 maxlen: 24
83.149.26.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.53.0/24 maxlen: 24
83.149.54.0/24 maxlen: 24
178.176.50.0/23 maxlen: 23
178.176.160.0/20 maxlen: 20
178.176.176.0/21 maxlen: 21
178.176.184.0/22 maxlen: 22
178.176.191.0/24 maxlen: 24
178.176.190.0/24 maxlen: 24
178.176.189.0/24 maxlen: 24
188.170.0.0/16 maxlen: 16
83.169.192.0/18 maxlen: 24
178.176.132.0/23 maxlen: 23
178.176.128.0/24 maxlen: 24
178.176.131.0/24 maxlen: 24
178.176.130.0/24 maxlen: 24
178.176.135.0/24 maxlen: 24
178.176.134.0/23 maxlen: 23
178.176.137.0/24 maxlen: 24
178.176.136.0/24 maxlen: 24
178.176.139.0/24 maxlen: 24
178.176.133.0/24 maxlen: 24
178.176.143.0/24 maxlen: 24
178.176.142.0/24 maxlen: 24
178.176.145.0/24 maxlen: 24
178.176.144.0/24 maxlen: 24
178.176.141.0/24 maxlen: 24
178.176.150.0/24 maxlen: 24
178.176.152.0/24 maxlen: 24
178.176.149.0/24 maxlen: 24
178.176.156.0/24 maxlen: 24
178.176.158.0/24 maxlen: 24
178.176.153.0/24 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
83.149.0.0/18 maxlen: 18
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:6e:e0:69:2e:dd:c1:2c:11:4b:46:40:1c:60:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 09:45:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f38f7c1189d68dcd2e3519cc66cdff052ad5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:83:7d:50:12:b4:62:1f:a5:33:c6:8e:df:
46:f8:ed:59:70:0b:3f:88:3a:98:83:ab:c2:15:d9:
9e:ca:d9:cd:c5:7d:00:dd:3e:60:90:82:70:bc:13:
00:13:78:a8:23:89:41:59:19:e5:3f:d4:a6:91:b6:
46:60:06:6e:6c:34:c0:8e:af:da:12:aa:6a:d2:34:
24:d3:98:f1:c0:dd:bd:7b:5b:d9:2a:89:d9:6a:38:
f8:6e:31:37:ca:40:60:18:69:a0:e4:b0:6d:0c:6b:
59:64:9b:84:45:0f:4f:00:5c:fb:b9:7c:ba:f2:c6:
2a:36:ca:a5:8d:38:6a:01:76:a2:aa:55:94:f0:86:
9c:ee:3e:8c:2c:2e:75:e0:76:a5:b7:a9:60:5b:e7:
48:a9:05:6f:3a:fd:5b:af:74:c8:0a:86:26:a0:fc:
bf:c3:a9:5b:93:6a:72:2d:11:9b:50:e9:6e:52:2e:
79:c8:a5:e9:dc:c3:38:30:fd:f9:cf:b4:ff:1c:61:
08:fc:b6:06:c5:ff:ca:d1:19:59:8f:58:a4:8f:fe:
d7:6e:77:59:15:e4:2f:70:5b:f5:0f:f8:a5:8f:53:
09:3f:f5:39:e0:27:97:29:45:15:71:a8:93:32:2d:
10:da:ff:75:2d:07:38:0f:5a:bb:58:50:93:fe:40:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:8F:7C:11:89:D6:8D:CD:2E:35:19:CC:66:CD:FF:05:2A:D5:DB
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0_OPfBGJ1o3NLjUZzGbN_wUq1ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0/16
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
62.89.194.0/24
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
79.171.208.0/24
80.247.176.0/20
81.24.128.0/20
83.149.0.0/18
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/16
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/19
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.50.0/23
178.176.128.0/24
178.176.130.0-178.176.137.255
178.176.139.0/24
178.176.141.0-178.176.145.255
178.176.149.0-178.176.150.255
178.176.152.0/23
178.176.156.0/24
178.176.158.0/24
178.176.160.0-178.176.187.255
178.176.189.0-178.176.191.255
178.178.96.0/24
178.178.100.0-178.178.104.255
178.178.106.0/24
178.178.108.0/24
178.178.110.0/23
178.178.127.0/24
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:c1:88:d5:18:4d:ac:3b:1c:35:ee:bc:04:14:99:6e:37:ce:
e4:c6:49:1c:5a:ee:4e:16:49:ad:de:94:ed:93:7e:d7:6e:2b:
8b:6e:28:53:66:46:a6:19:c0:7d:98:8a:ad:39:ea:7d:03:99:
6b:1c:31:81:db:6f:1f:91:92:bb:e6:da:6e:73:d0:57:ae:da:
ee:70:65:e4:dd:4d:43:38:df:88:4e:ca:5d:3d:1f:58:d4:f4:
33:25:ff:59:a0:92:c3:c3:99:63:8a:c9:08:bf:b7:e1:9e:b5:
56:6c:a6:f9:f5:9e:7b:33:39:97:25:be:1c:59:62:26:0f:e5:
78:ea:2d:2e:1d:db:a2:c0:ad:2d:ad:a9:bf:30:34:65:da:17:
7f:32:47:2c:2b:82:f7:5a:56:ac:7a:2a:8d:2f:bf:c7:25:57:
9e:39:89:bb:2c:8e:9f:70:7b:ad:81:73:2b:fd:08:bd:0a:b2:
bf:51:98:3c:96:77:72:d6:52:b5:aa:39:e2:6e:7c:68:9e:92:
1d:5a:85:d7:a4:90:a7:5b:af:82:2a:c9:68:ec:68:f3:74:8d:
a0:19:c9:4a:18:6a:13:9d:3d:75:61:ac:83:90:75:e9:8e:78:
cf:8b:fd:8e:59:3c:ee:0d:f4:16:a0:ff:4d:db:d2:bd:a2:0b:
5f:eb:0b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org