Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-F6DEPC69cLcDhOSZDoZ0jkaOxY.roa
File: 1-F6DEPC69cLcDhOSZDoZ0jkaOxY.roa (raw, json)
Hash identifier: b3ADnj4VVn9n4kd4z3RaKJ293bFZ3wbldiE2IAy+ARk=
Subject key identifier: F8:5E:83:10:F0:BA:F5:C2:DC:0E:13:92:64:3A:19:D2:39:1A:3B:16
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01840EC21961DA77985C9581D882CF72314E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-F6DEPC69cLcDhOSZDoZ0jkaOxY.roa
Signing time: Tue 25 Oct 2022 10:48:32 +0000
ROA not before: Tue 25 Oct 2022 10:48:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
46.232.200.0/21 maxlen: 24
78.25.64.0/18 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:c2:19:61:da:77:98:5c:95:81:d8:82:cf:72:31:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 25 10:48:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f85e8310f0baf5c2dc0e1392643a19d2391a3b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:4e:a0:bb:b3:85:ff:76:20:6f:e4:64:14:
c1:00:0d:2e:f1:d6:1f:cd:84:0f:ef:ea:19:f2:db:
a2:8b:0a:3d:ea:85:15:82:d6:79:17:b4:ed:46:08:
7c:54:66:75:b8:6d:a9:e2:51:ad:ca:f5:eb:4c:10:
8c:9c:51:40:a5:99:51:6c:ea:ac:99:bf:42:fd:4c:
b9:81:9c:5e:c5:03:5e:ed:22:8e:38:4b:85:1d:f6:
93:df:c3:13:9d:34:c4:24:4d:62:34:2f:29:04:f7:
f0:08:36:b1:45:6a:94:2b:5a:9f:ee:5d:44:91:98:
53:e5:9c:41:93:d6:09:bc:b5:3f:b3:95:b8:79:fa:
47:0c:da:91:af:fd:6d:34:3d:ef:91:4c:32:04:d2:
0e:5b:09:fc:d4:b3:36:50:d0:cb:80:fb:00:eb:a9:
3c:d5:7b:77:52:a1:71:c2:65:94:45:c9:39:cc:83:
33:22:89:ef:e1:1e:ea:f9:7c:35:75:be:5b:52:c2:
be:8b:9f:be:c6:80:6a:49:6c:5c:d6:ad:d0:ac:d5:
6a:b4:1c:b7:ec:07:15:25:a8:10:ac:93:98:af:15:
2c:2e:d1:ae:83:39:95:00:e5:bf:1d:a9:1f:13:27:
99:ab:0b:be:9d:dd:71:58:e4:3c:01:aa:33:76:5d:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5E:83:10:F0:BA:F5:C2:DC:0E:13:92:64:3A:19:D2:39:1A:3B:16
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-F6DEPC69cLcDhOSZDoZ0jkaOxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
94:29:f6:dd:b7:a2:8b:f8:b2:19:ab:d4:bf:72:27:a7:80:cb:
f5:52:82:17:ca:c0:62:73:ca:00:d5:55:5b:b6:ad:14:85:bd:
ac:17:56:5d:4c:b3:62:53:26:ed:9f:a2:1a:d1:42:05:38:28:
a1:18:ed:69:db:72:d6:ea:e2:13:f4:99:37:ac:06:23:5f:bd:
ae:49:40:d4:44:be:04:c4:7a:9f:c3:a7:d2:dd:ce:d9:bc:94:
ac:c1:92:38:07:6f:3a:44:c6:f2:ab:35:99:e8:08:a2:e6:23:
64:75:bf:2a:d5:df:6e:e9:92:e3:1a:c9:76:11:a7:67:2d:85:
79:ec:a8:21:4d:d8:3b:cc:b4:60:80:f6:a0:be:8a:19:5d:9b:
66:df:98:07:ae:77:7c:42:77:05:5f:9c:f2:f4:09:8c:0a:0a:
6f:1a:f3:52:d2:c5:ab:0c:bc:df:b9:5c:d1:85:ac:43:04:d1:
34:c1:95:c4:ec:f6:05:0e:45:6f:88:37:06:d9:a3:8d:95:17:
1a:0b:1a:86:85:62:98:e2:10:4b:43:2d:31:75:ae:53:04:da:
69:b1:32:43:3b:46:9b:f5:38:41:6e:bb:ac:a6:5d:f4:5a:10:
e8:99:a3:5e:56:16:ff:c6:2d:31:14:8e:c0:13:dd:43:aa:dd:
33:79:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org