Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-wrYvOGd_mxTGddlhtWhT35ob6U.roa
File: 1-wrYvOGd_mxTGddlhtWhT35ob6U.roa (raw, json)
Hash identifier: KMpeIgAwsPULEHisO4sIVkmj9mEuvMyhlIf4VZdqXuQ=
Subject key identifier: FB:0A:D8:BC:E1:9D:FE:6C:53:19:D7:65:86:D5:A1:4F:7E:68:6F:A5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D29A7775F8BD2A6DA3B6C0D0C78DE151
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-wrYvOGd_mxTGddlhtWhT35ob6U.roa
Signing time: Fri 02 Dec 2022 11:30:49 +0000
ROA not before: Fri 02 Dec 2022 11:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.227.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:77:75:f8:bd:2a:6d:a3:b6:c0:d0:c7:8d:e1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 11:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb0ad8bce19dfe6c5319d76586d5a14f7e686fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:3e:f2:1b:dc:f0:0d:3f:a3:4c:8e:3f:8f:
be:71:65:c4:61:0d:2c:19:d3:2d:82:5d:aa:46:4c:
30:66:37:6a:e7:38:97:b3:d9:33:4e:54:fd:21:b7:
c3:64:62:5e:6c:1a:17:0b:a0:1d:77:d0:bd:e8:44:
8a:66:0f:14:b9:a1:20:36:0a:a6:0c:80:dd:e0:d5:
14:75:b4:b4:f6:6d:64:ca:ea:de:d7:26:83:27:fe:
56:dd:bd:46:12:2f:fd:98:28:75:44:14:45:31:48:
34:42:ec:c8:74:5e:0d:bf:d9:d3:6f:bd:3c:36:9c:
35:b7:69:d5:b5:12:0c:ee:e8:d7:ec:d3:30:e3:c2:
6e:e7:7f:7a:82:44:99:bf:58:5a:9b:fa:57:97:ba:
92:56:69:37:27:b6:34:0e:a1:eb:53:69:35:aa:0c:
82:a6:0b:76:fc:9c:f6:50:95:6f:d2:eb:e3:96:ac:
4e:09:36:82:c4:79:da:2c:6d:67:6f:46:de:52:3f:
ff:8c:ce:a6:5b:d8:0e:78:8b:10:01:cc:28:13:dc:
12:3c:e5:5c:39:1a:c9:4f:0d:ba:4e:e1:f4:43:2c:
cd:ff:b7:1a:fa:dc:9d:8d:ef:1c:84:11:83:8e:45:
c9:15:d0:92:6d:ff:77:7c:60:6f:c2:fc:7b:9a:70:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:D8:BC:E1:9D:FE:6C:53:19:D7:65:86:D5:A1:4F:7E:68:6F:A5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-wrYvOGd_mxTGddlhtWhT35ob6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.227.0-178.176.229.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
67:ee:ee:3c:1b:7e:d4:6f:92:4c:62:f1:86:4c:80:50:dd:1e:
d4:1e:1d:b7:ee:42:04:90:40:f5:7a:36:de:ef:69:d7:fb:ac:
ac:d2:99:a4:14:72:1a:7c:c7:16:aa:2b:ce:66:a0:2d:7a:d6:
51:39:15:08:d4:9b:76:c9:7c:72:e8:a9:80:64:c6:8e:bc:d0:
ed:ad:b1:a9:23:0e:7a:0e:d1:cd:30:3f:ab:d0:e1:17:05:bf:
86:e7:1a:e4:a4:64:68:8b:31:d5:0e:72:29:55:64:14:bb:a6:
fc:76:98:eb:d0:5a:ba:f6:97:92:38:57:51:4c:5a:ae:47:25:
0e:10:7d:30:84:ef:50:3f:52:20:53:e8:16:56:97:7f:96:13:
3f:26:66:f5:90:17:d7:1b:45:a1:89:d5:e0:cb:20:bf:f1:cc:
5f:c7:96:e5:68:70:04:9f:78:62:bd:8b:06:5d:e4:79:d9:8e:
b1:bf:d9:b3:62:42:25:6c:4a:84:ec:d5:90:83:71:a4:5e:96:
8c:42:21:64:09:08:57:ed:f9:2c:39:e3:07:fe:f1:fd:5c:d1:
55:14:e0:6c:67:a6:82:ba:71:0f:70:7d:af:9a:83:b2:1b:89:
30:da:54:f6:60:0c:a4:59:66:70:54:f3:a2:3d:8c:b4:a0:64:
98:32:bd:da
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgISAYTSmnd1+L0qbaO2wNDHjeFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAyMTEzMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjBhZDhiY2UxOWRmZTZjNTMxOWQ3NjU4NmQ1YTE0ZjdlNjg2ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2E+8hvc8A0/o0yOP4++cWXEYQ0s
GdMtgl2qRkwwZjdq5ziXs9kzTlT9IbfDZGJebBoXC6Add9C96ESKZg8UuaEgNgqm
DIDd4NUUdbS09m1kyure1yaDJ/5W3b1GEi/9mCh1RBRFMUg0QuzIdF4Nv9nTb708
Npw1t2nVtRIM7ujX7NMw48Ju5396gkSZv1ham/pXl7qSVmk3J7Y0DqHrU2k1qgyC
pgt2/Jz2UJVv0uvjlqxOCTaCxHnaLG1nb0beUj//jM6mW9gOeIsQAcwoE9wSPOVc
ORrJTw26TuH0QyzN/7ca+tydje8chBGDjkXJFdCSbf93fGBvwvx7mnBJeQIDAQAB
o4IC7jCCAuowHQYDVR0OBBYEFPsK2Lzhnf5sUxnXZYbVoU9+aG+lMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvMS13cll2T0dkX214VEdkZGxodFdoVDM1b2I2VS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzcvOWNmZjdjLWYwNWEtNGUwMi1iZWE3LTg5ZTU2YzgwZDFk
MC8xL2t0ZkNvUWN0YzFCNjJfWlFmZWFLcXNBWGhjQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAQEGCCsGAQUFBwEHAQH/BIHxMIHuMIHrBAIAATCB5AME
Ak4pZAMEA0+rCAMEBFD3sAMEBFEYgAMEBlOpwAMEBVPewAMEB1PlgAMEB1UagAME
BVZtwAMEAlvB1AMEB12ZgAMEB14ZgAMEB1+JAAMEBG1KcAMEBm18QAMDAG28AwQG
gMxAAwQDsheQMAwDBACysOMDBAGysOQDBAK5AyADBAK50owDBAO8XqgDAwC8ogME
AsHJ5AMEBcMFgAMEBcMQYAMEAcNOdAMEAMOVbwMEBcPmQAMEBdQOoAMEBdQsQAME
BdRFYAMEBdR3oAMEBdWaoAMEBdWoIAMEBtXzQAMEBNlzUDANBgkqhkiG9w0BAQsF
AAOCAQEAZ+7uPBt+1G+STGLxhkyAUN0e1B4dt+5CBJBA9Xo23u9p1/usrNKZpBRy
GnzHFqorzmagLXrWUTkVCNSbdsl8cuipgGTGjrzQ7a2xqSMOeg7RzTA/q9DhFwW/
huca5KRkaIsx1Q5yKVVkFLum/HaY69BauvaXkjhXUUxarkclDhB9MITvUD9SIFPo
FlaXf5YTPyZm9ZAX1xtFoYnV4Msgv/HMX8eW5WhwBJ94Yr2LBl3kedmOsb/Zs2JC
JWxKhOzVkINxpF6WjEIhZAkIV+35LDnjB/7x/VzRVRTgbGemgrpxD3B9r5qDshuJ
MNpU9mAMpFlmcFTzoj2MtKBkmDK92g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org