Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-u_sdoBOMzBFzctARMRcRo0Hmw.roa
File: 1-u_sdoBOMzBFzctARMRcRo0Hmw.roa (raw, json)
Hash identifier: xbPc1iOe+SKimjduilxtc1u9U93IQWlxLiR4+steEo0=
Subject key identifier: D7:EB:BF:B1:DA:01:38:CC:C1:17:37:2D:01:13:11:71:1A:34:1E:6C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2AF50554B283F07ADF5119BC3D81D34
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-u_sdoBOMzBFzctARMRcRo0Hmw.roa
Signing time: Mon 05 Dec 2022 14:27:30 +0000
ROA not before: Mon 05 Dec 2022 14:27:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.247.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.229.0/24 maxlen: 24
85.26.230.0/24 maxlen: 24
85.26.231.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
178.176.244.0/22 maxlen: 22
91.193.212.0/22 maxlen: 24
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.252.0/22 maxlen: 22
83.169.248.0/22 maxlen: 22
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:af:50:55:4b:28:3f:07:ad:f5:11:9b:c3:d8:1d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 14:27:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7ebbfb1da0138ccc117372d011311711a341e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:47:30:5f:74:9e:b7:bb:57:48:33:63:f8:
26:44:72:e2:3a:57:c7:7b:94:c8:a5:16:ce:f0:33:
35:04:05:ca:93:15:55:26:6f:55:b2:a1:5e:85:d5:
67:f6:d6:f4:b4:d9:2d:22:ef:fb:74:4f:42:21:92:
e1:34:5e:8a:ea:ed:a5:f9:98:57:d2:96:76:5f:6a:
f3:f3:bf:57:8e:cd:fd:c2:d6:17:91:78:79:f2:50:
93:0a:a3:67:5a:f3:f1:bf:5b:d9:03:f9:ce:77:2e:
4a:eb:25:e4:93:cc:19:52:1f:5d:7a:4f:2a:f7:71:
7a:0a:d9:17:d7:10:4a:e6:b3:4f:4a:2a:53:2f:fa:
b0:e5:b3:d6:c6:53:ee:27:c8:94:e6:ce:5a:28:e7:
9d:7e:ca:d9:b3:0b:5a:a0:4e:ef:cb:91:61:e9:61:
0e:84:b7:2e:09:15:7f:69:17:33:55:b4:45:68:03:
41:32:c2:2a:0f:4d:e3:98:3a:d8:01:86:36:be:ea:
de:02:cc:8d:da:8c:f2:b5:a8:06:fc:07:59:2b:36:
22:5a:62:53:90:24:22:79:bd:c8:6c:1b:7f:a6:90:
e3:51:9e:59:00:ae:3c:73:84:07:0a:17:3c:ee:20:
49:e7:e3:fd:9d:bc:08:f0:62:14:46:12:f2:25:79:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:BF:B1:DA:01:38:CC:C1:17:37:2D:01:13:11:71:1A:34:1E:6C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-u_sdoBOMzBFzctARMRcRo0Hmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.229.0-85.26.231.255
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
63:6f:a6:d7:ff:ca:a4:33:28:ee:37:f5:b6:d5:4e:92:0c:66:
bd:d4:6f:79:d8:a0:63:0e:00:18:4c:ff:60:56:26:a9:6e:b1:
d8:c1:3e:64:ca:a3:b1:c4:cc:e0:57:2a:5e:62:6b:f0:b5:6a:
a2:74:6b:9f:74:3f:4a:9b:04:9e:55:c0:bf:52:ac:fc:5c:13:
72:cf:c7:a3:68:72:db:21:78:cf:e7:3d:8b:46:94:c9:b0:ab:
9c:72:b8:ff:06:35:89:bb:c8:a3:ee:41:08:ce:fc:37:46:9f:
6b:49:68:bd:fe:50:3d:ce:b5:fe:36:9b:3a:88:87:c1:56:53:
10:9d:85:05:b1:31:16:d4:81:b5:38:a8:a7:76:a3:99:80:66:
81:c9:71:c8:40:de:2c:7d:52:08:d0:bc:21:d9:32:05:8c:31:
ea:b2:84:84:be:f9:fb:1e:d5:9b:e2:4c:97:b3:e2:2c:3a:d6:
a3:e2:06:8a:ab:bd:f6:ec:c4:11:f4:53:3c:1a:36:39:1c:67:
0a:46:c4:6d:fd:77:6d:f6:8d:b7:3d:5e:3f:35:fa:44:e5:34:
9f:bf:d5:01:ce:aa:51:55:61:48:02:4a:b7:43:6b:0b:2f:46:
c0:25:1f:80:21:c2:8d:91:3f:d6:c6:41:48:b7:47:60:86:e5:
19:f5:97:5d
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgISAYTir1BVSyg/B631EZvD2B00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA1MTQyNzMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2ViYmZiMWRhMDEzOGNjYzExNzM3MmQwMTEzMTE3MTFhMzQxZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi5HMF90nre7V0gzY/gmRHLiOlfH
e5TIpRbO8DM1BAXKkxVVJm9VsqFehdVn9tb0tNktIu/7dE9CIZLhNF6K6u2l+ZhX
0pZ2X2rz879Xjs39wtYXkXh58lCTCqNnWvPxv1vZA/nOdy5K6yXkk8wZUh9dek8q
93F6CtkX1xBK5rNPSipTL/qw5bPWxlPuJ8iU5s5aKOedfsrZswtaoE7vy5Fh6WEO
hLcuCRV/aRczVbRFaANBMsIqD03jmDrYAYY2vureAsyN2ozytagG/AdZKzYiWmJT
kCQieb3IbBt/ppDjUZ5ZAK48c4QHChc87iBJ5+P9nbwI8GIURhLyJXn2hQIDAQAB
o4IC+TCCAvUwHQYDVR0OBBYEFNfrv7HaATjMwRc3LQETEXEaNB5sMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvMS11X3Nkb0JPTXpCRnpjdEFSTVJjUm8wSG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDQYIKwYBBQUHAQcBAf8Egf0wgfowgfcEAgABMIHwAwQD
H63wAwQBJR1WAwQCLujIAwQCThlcAwQCU5UwAwQDU6n4MAwDBABVGuUDBANVGuAD
BAVWbcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAME
BoDMQAMEA7IXkAMEALKwMAMEA7Kw8AMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQC
vKrwAwQAvKr3AwQCwcnkAwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF
1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0G
CSqGSIb3DQEBCwUAA4IBAQBjb6bX/8qkMyjuN/W21U6SDGa91G952KBjDgAYTP9g
ViapbrHYwT5kyqOxxMzgVypeYmvwtWqidGufdD9KmwSeVcC/Uqz8XBNyz8ejaHLb
IXjP5z2LRpTJsKuccrj/BjWJu8ij7kEIzvw3Rp9rSWi9/lA9zrX+Nps6iIfBVlMQ
nYUFsTEW1IG1OKindqOZgGaByXHIQN4sfVII0Lwh2TIFjDHqsoSEvvn7HtWb4kyX
s+IsOtaj4gaKq7327MQR9FM8GjY5HGcKRsRt/Xdt9o23PV4/NfpE5TSfv9UBzqpR
VWFIAkq3Q2sLL0bAJR+AIcKNkT/WxkFIt0dghuUZ9Zdd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org